Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/1c6faae5-8a1b-3aca-bfd3-81a290ed9146.roa
File:                     1c6faae5-8a1b-3aca-bfd3-81a290ed9146.roa (raw, json)
Hash identifier:          N+P+ubeXu6nWkS36lOC5B1Y5CVgYrjyu2SCI89bA8mo=
Subject key identifier:   4E:60:51:31:34:4A:1F:0F:C9:78:F1:79:76:B7:46:4B:9B:8E:39:39
Certificate issuer:       /CN=72be6912-a48b-441b-9ee6-94aa6da03275
Certificate serial:       010D0C9F43285847F243A3163C06D211F3FA9C80
Authority key identifier: A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/1c6faae5-8a1b-3aca-bfd3-81a290ed9146.roa
Signing time:             Wed 20 Nov 2024 22:01:51 +0000
ROA not before:           Wed 20 Nov 2024 22:01:51 +0000
ROA not after:            Tue 18 Feb 2025 22:01:51 +0000
asID:                     398355
IP address blocks:        2602:fa42:101::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:43:a3:16:3c:06:d2:11:f3:fa:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72be6912-a48b-441b-9ee6-94aa6da03275
        Validity
            Not Before: Nov 20 22:01:51 2024 GMT
            Not After : Feb 18 22:01:51 2025 GMT
        Subject: CN=745b1d93-b078-46d8-ac25-385d5c569569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:65:b4:d1:2e:20:90:c1:1b:df:ee:cc:67:47:
                    d4:6a:db:a5:a1:9c:76:00:06:c8:a3:e8:82:dd:72:
                    98:ed:2b:83:09:7d:9c:62:8f:5c:98:c9:7b:49:7b:
                    17:08:b4:74:0d:84:fa:a9:80:62:98:2c:a8:cb:09:
                    c6:4e:b4:48:5d:1f:37:7f:39:a9:d1:ec:40:55:8c:
                    23:53:cb:4a:d6:e7:4a:41:3b:bc:5e:0d:bd:67:e6:
                    dd:10:e1:9b:a3:d5:7b:48:4a:5d:58:06:ed:1d:d0:
                    c0:3d:a9:3a:61:f9:b6:fb:a6:ee:89:80:e4:11:b6:
                    59:43:f1:1c:9b:7e:91:59:90:04:cd:24:18:7e:28:
                    c9:03:b9:fc:ce:d0:70:c7:0e:2e:d6:3b:bc:c2:0d:
                    63:6a:9a:5d:ae:d5:de:d2:08:57:56:4e:5e:3e:1e:
                    5d:80:b2:09:16:15:7e:d0:1a:da:91:a8:51:25:53:
                    47:ad:e3:fb:44:06:ec:78:c2:f1:42:46:97:84:51:
                    53:12:ec:5d:98:dc:59:9a:ee:b1:f4:b4:95:02:9b:
                    dc:ce:e9:31:79:0c:8c:d4:c6:ba:e4:68:a5:f5:92:
                    f5:b3:15:cb:6a:52:88:b2:44:6b:1f:13:b3:d1:8e:
                    71:6c:a8:8c:33:9c:76:19:0e:59:47:ca:be:56:53:
                    30:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:60:51:31:34:4A:1F:0F:C9:78:F1:79:76:B7:46:4B:9B:8E:39:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/1c6faae5-8a1b-3aca-bfd3-81a290ed9146.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.crl

            X509v3 Authority Key Identifier:
                keyid:A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa42:101::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:36:9c:6c:bb:13:3e:9a:ee:40:b5:35:8e:96:96:51:90:be:
         70:77:93:81:c9:a1:73:42:40:5b:83:85:a5:90:ac:30:8d:d8:
         1c:fc:ab:96:d1:91:e6:2b:8c:4e:a3:dc:86:29:64:90:35:27:
         1e:81:5f:f8:92:5b:fb:49:6e:c7:01:c9:26:8a:b7:c1:f9:ec:
         ca:2c:b2:2e:60:97:c5:1b:4b:e1:30:aa:eb:e8:2c:9f:3a:ed:
         98:c2:29:38:f1:ff:9d:d4:b9:84:77:05:3b:10:3f:8e:11:b2:
         6f:e5:f6:66:c2:3f:c3:fd:23:db:21:34:98:58:e6:02:28:51:
         5e:1a:05:fc:98:30:4b:8a:ce:af:3a:4a:8f:93:38:e4:88:2c:
         38:5a:2a:26:a7:76:90:f0:cd:ef:ab:d8:f7:88:13:f4:23:ed:
         fd:63:af:72:b1:7f:2d:e4:48:68:3a:50:f6:5e:93:f1:d9:ed:
         d5:a4:88:ea:d3:28:4e:76:da:a9:8e:64:fb:c0:b7:4e:cb:20:
         3a:a0:3b:2b:5f:76:0f:6d:86:d9:da:88:fd:75:ff:4f:66:d8:
         23:1d:b2:b4:25:8b:ca:de:17:2f:42:21:e8:5b:59:ae:e5:2f:
         53:a6:43:30:6d:0c:c5:67:7f:5a:83:fa:90:21:7f:e1:37:38:
         f6:8f:a0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:11 2024 by rpki-client on console-ams.rpki-client.org