Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/2babb0a1-9a1a-3bd4-9f14-ebf6dd309386.roa
File:                     2babb0a1-9a1a-3bd4-9f14-ebf6dd309386.roa (raw, json)
Hash identifier:          +8/SkBiFJucjZNI/++ylpKZaBz2Ca9ylbWzghMPVZ7o=
Subject key identifier:   D7:C3:36:24:6D:1D:3D:3D:CB:1C:20:04:42:72:72:4F:0C:08:FC:5F
Certificate issuer:       /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
Certificate serial:       010D0C9F43285847EBBF83EB6A6EA243FF222340
Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/2babb0a1-9a1a-3bd4-9f14-ebf6dd309386.roa
Signing time:             Mon 18 Nov 2024 14:00:40 +0000
ROA not before:           Mon 18 Nov 2024 14:00:40 +0000
ROA not after:            Sun 16 Feb 2025 14:00:40 +0000
asID:                     61112
IP address blocks:        2602:fa4f:300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:eb:bf:83:eb:6a:6e:a2:43:ff:22:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
        Validity
            Not Before: Nov 18 14:00:40 2024 GMT
            Not After : Feb 16 14:00:40 2025 GMT
        Subject: CN=a7be02c2-1687-434e-b317-7249c2e7de2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7f:e1:b0:f0:72:64:cf:97:7c:45:52:95:02:
                    3c:12:13:56:23:b1:c3:ec:01:a7:86:74:32:f5:ec:
                    c8:04:99:e1:b0:55:4e:36:b0:c1:96:15:8b:22:59:
                    4b:2f:ed:3d:cb:e4:81:fc:4e:28:7a:51:33:0a:de:
                    7e:4a:5a:0a:39:a2:f7:04:5f:1f:23:6a:13:b1:a7:
                    ef:a8:0e:52:70:f3:82:66:f5:95:82:1a:c7:48:b3:
                    ba:22:86:09:66:ad:a9:33:f4:61:51:ee:2b:ca:ad:
                    5a:a3:63:c3:8a:b1:d1:c9:3d:08:57:c3:3e:83:c3:
                    c3:16:b5:67:12:fc:13:28:19:4e:5f:2f:50:f6:f2:
                    05:ca:ba:14:07:78:ae:25:82:45:a5:f8:ee:e0:58:
                    7d:7d:f7:86:0b:e2:50:c5:aa:75:81:de:3c:b6:2c:
                    28:3f:d8:a4:fb:7f:83:88:ee:aa:0b:7a:4b:bf:20:
                    6f:e8:f8:76:55:7f:f7:b5:ac:48:41:6a:3d:6f:d3:
                    df:44:ab:e6:d2:bd:b6:67:25:a9:f8:e1:18:45:5d:
                    84:c9:57:f3:6b:5d:9c:04:50:a0:ca:c2:41:ce:f8:
                    b8:b8:3b:a7:33:f0:94:0f:84:4c:91:0d:05:5a:39:
                    4b:1c:0b:17:85:1c:9a:c0:a8:c4:73:c2:95:f3:ea:
                    e9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C3:36:24:6D:1D:3D:3D:CB:1C:20:04:42:72:72:4F:0C:08:FC:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/2babb0a1-9a1a-3bd4-9f14-ebf6dd309386.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl

            X509v3 Authority Key Identifier:
                keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4f:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:21:46:92:1f:eb:51:de:fb:22:96:67:6f:8e:4f:38:67:df:
         69:7c:df:55:56:d2:30:35:6b:9a:75:97:a7:14:06:11:92:bc:
         92:c4:d6:96:5f:38:84:00:f3:5a:c7:08:e8:37:8f:15:29:fd:
         e8:60:38:cb:64:53:87:38:e3:86:00:1e:e9:a9:db:f7:34:90:
         aa:4f:eb:90:37:dc:e4:bb:0c:52:cc:11:1f:b0:d1:66:d3:d2:
         82:d6:21:88:04:a4:b6:4e:9b:7c:3a:0a:fc:5c:42:29:55:48:
         56:26:b9:70:97:7b:a0:05:b2:c0:ac:0e:5d:f9:2a:21:3d:f8:
         ab:fc:82:fc:7a:10:7a:13:7d:7f:dd:5f:db:dc:18:8d:72:37:
         84:2e:e4:77:cf:1e:2a:c2:6d:f2:ec:b3:94:d0:46:c4:17:34:
         74:c2:47:da:d1:29:57:f6:5d:73:ba:ff:be:c7:d7:a3:3d:17:
         4b:7c:27:86:e7:5f:21:da:5a:a1:7a:15:43:20:d3:3e:fd:80:
         97:4a:c8:2b:84:55:99:83:27:53:43:4a:c4:b4:ec:63:f1:51:
         a6:26:9f:46:7b:d1:00:87:69:9e:51:a9:81:e9:71:b5:b9:09:
         8e:61:27:49:6e:2c:05:4e:26:e5:db:80:ad:2f:d6:00:8b:79:
         d8:d7:26:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:21:49 2024 by rpki-client on console-ams.rpki-client.org