Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/ea48664e-7f29-35b5-bcf7-47161f22fb58.roa
File:                     ea48664e-7f29-35b5-bcf7-47161f22fb58.roa (raw, json)
Hash identifier:          1c/snL4a4RRiiVSEmAghRZjoc4kWgR8W31rsBDzDjl8=
Subject key identifier:   09:E5:0B:32:36:27:50:DB:CA:3F:95:6C:8B:25:FA:76:2C:FE:0A:E2
Certificate issuer:       /CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
Certificate serial:       010D0C9F43285847D6CF468E094B2D90E44CFF00
Authority key identifier: E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/ea48664e-7f29-35b5-bcf7-47161f22fb58.roa
Signing time:             Mon 11 Nov 2024 02:00:27 +0000
ROA not before:           Mon 11 Nov 2024 02:00:27 +0000
ROA not after:            Sun 09 Feb 2025 02:00:27 +0000
asID:                     57974
IP address blocks:        2602:2d4::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d6:cf:46:8e:09:4b:2d:90:e4:4c:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
        Validity
            Not Before: Nov 11 02:00:27 2024 GMT
            Not After : Feb  9 02:00:27 2025 GMT
        Subject: CN=ba5cc7fc-20e2-4768-9434-d09dc06e665b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:59:24:ab:76:c6:84:e6:6e:7d:a1:e4:9d:50:
                    0f:17:21:78:b5:d1:8f:90:56:98:15:5a:6e:7e:2f:
                    ca:78:09:b1:ea:1f:6a:d8:4a:3a:05:dc:3d:9c:02:
                    07:5e:91:39:db:22:bd:89:1f:4f:da:45:e5:d6:e5:
                    a4:f3:13:82:9f:3a:6c:c1:e1:b5:1c:bd:11:55:26:
                    5c:12:71:58:9f:b1:ea:cd:a1:b9:ac:18:9b:e1:11:
                    2e:8e:54:5c:c6:19:2e:63:62:64:77:d4:6e:a4:eb:
                    0d:59:8a:68:2c:0d:72:0a:20:6b:56:cd:15:9a:c9:
                    dd:d2:37:47:8a:6a:9a:66:7f:cf:d3:57:73:4c:54:
                    55:60:7d:d1:71:17:dd:55:e9:18:3f:c9:e1:aa:52:
                    a3:44:4c:65:22:74:2c:b0:72:7f:fe:ca:51:be:b0:
                    49:36:03:00:c9:52:bf:53:cc:a9:c1:96:9d:94:59:
                    3d:70:e4:fc:f5:fc:d8:b0:94:c3:ae:77:52:6b:02:
                    db:3b:56:ba:61:29:c2:89:48:ae:82:76:e0:fe:ea:
                    40:e6:0f:d4:2a:e3:1d:54:94:e8:f6:1d:91:6b:e2:
                    0d:c9:67:43:a2:26:e6:8a:c2:23:b4:95:c3:2e:b5:
                    34:fb:57:5e:ef:d6:b7:ef:b7:d1:25:59:74:6d:7d:
                    8e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E5:0B:32:36:27:50:DB:CA:3F:95:6C:8B:25:FA:76:2C:FE:0A:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/ea48664e-7f29-35b5-bcf7-47161f22fb58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2d4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:3d:f5:20:cf:78:1d:52:c4:82:7c:75:0b:96:8c:22:b5:7b:
         69:38:78:ce:cb:68:6f:a7:11:0c:85:25:0c:05:33:2c:0d:b6:
         27:14:0f:df:0d:60:37:6b:44:2c:f6:4f:93:0a:9f:5b:e3:89:
         78:ff:04:56:80:d4:80:25:ee:67:eb:af:b0:c6:ae:c4:e6:e0:
         78:c2:6d:3d:82:c3:bd:55:e3:3d:04:cb:37:ca:4c:fb:84:83:
         33:09:0b:82:e1:5c:96:d7:dc:bd:bc:59:fd:4b:61:77:e2:db:
         6b:7a:d1:17:ef:e1:e5:15:71:5f:43:e4:d5:42:02:e6:c0:3e:
         95:28:b7:93:4b:b4:33:2e:5b:b1:c0:aa:d3:80:30:9c:11:f6:
         5d:1e:65:34:4e:da:31:5c:4e:44:6b:d2:49:78:f9:ab:55:be:
         17:34:50:73:0c:e1:eb:03:71:72:e1:e0:a3:96:ea:96:8a:b3:
         62:08:17:5f:18:de:15:0a:df:af:b9:61:b1:a4:b5:96:0e:d4:
         34:f0:e4:11:23:e1:5f:e5:ac:ba:8e:89:9c:8e:2e:9d:a8:ff:
         b0:d4:f9:d9:15:1a:d8:66:90:0d:5a:fe:7f:f1:f1:90:9f:b9:
         ca:12:98:c9:15:70:27:f1:11:a9:90:43:03:72:d8:22:cc:3a:
         b9:96:7f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:03:34 2024 by rpki-client on console-ams.rpki-client.org