Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5289eebe-db62-368d-bf72-d40de00fba52.roa
File:                     5289eebe-db62-368d-bf72-d40de00fba52.roa (raw, json)
Hash identifier:          A6If0Ts4yggHw7gFp/eZhK/HhjQaKTTPQ/aKjU5UHLk=
Subject key identifier:   B1:23:75:61:4B:66:2C:56:B7:CC:F0:34:50:52:62:92:0E:48:CA:F5
Certificate issuer:       /CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc
Certificate serial:       010D0C9F43285847E21E2D4466E1D6BD0DD01B80
Authority key identifier: 54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5289eebe-db62-368d-bf72-d40de00fba52.roa
Signing time:             Fri 15 Nov 2024 03:13:26 +0000
ROA not before:           Fri 15 Nov 2024 03:13:26 +0000
ROA not after:            Thu 13 Feb 2025 03:13:26 +0000
asID:                     399624
IP address blocks:        2602:f7a7::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e2:1e:2d:44:66:e1:d6:bd:0d:d0:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc
        Validity
            Not Before: Nov 15 03:13:26 2024 GMT
            Not After : Feb 13 03:13:26 2025 GMT
        Subject: CN=304bff65-b7b0-4b1d-82e7-b56890b59c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:69:34:b8:d4:7b:ce:fb:fa:fa:e2:c5:a9:22:
                    ab:36:63:7b:7c:9d:26:fc:10:93:5b:81:b8:48:28:
                    d7:31:f5:4a:b9:a7:7c:ee:eb:c8:8a:b2:66:ef:71:
                    3e:33:52:e0:85:06:2c:50:9f:34:dc:bb:e3:6e:d7:
                    87:90:40:c5:40:fb:cb:84:97:82:bb:e3:93:fa:b8:
                    be:a2:6d:3d:38:19:6c:d5:b0:f1:50:30:26:6d:e2:
                    a1:b7:27:3b:71:40:a8:18:df:20:4c:a9:d6:c1:51:
                    c9:c2:35:cf:39:e6:8d:99:5b:75:7d:05:42:f6:e3:
                    6b:e2:92:89:8f:f7:08:45:de:23:23:2b:31:fa:3e:
                    db:58:be:68:12:00:34:1a:02:e6:f6:8f:24:18:8c:
                    64:2b:53:30:78:7b:54:74:50:41:46:44:99:27:05:
                    df:c5:02:a8:4a:dd:00:dc:c7:49:07:a7:7c:77:5e:
                    10:df:a1:86:d6:2a:51:03:3b:3e:5b:e8:32:91:73:
                    52:0a:c8:b4:a0:39:30:2e:12:54:2b:31:78:00:60:
                    be:cc:58:09:eb:65:da:1d:15:e6:76:dc:fa:0e:ab:
                    05:3d:ae:76:58:8c:d9:75:e1:73:58:43:f0:9e:2e:
                    62:cf:78:e6:6e:90:b6:3d:8f:f6:47:68:38:22:bf:
                    50:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:23:75:61:4B:66:2C:56:B7:CC:F0:34:50:52:62:92:0E:48:CA:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5289eebe-db62-368d-bf72-d40de00fba52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl

            X509v3 Authority Key Identifier:
                keyid:54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7a7::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:ae:5f:09:24:cf:9c:b4:17:ea:2a:21:a1:3d:11:f9:55:3e:
         07:90:51:d8:19:9f:83:85:1e:93:ed:d5:6c:10:fa:53:80:c9:
         d7:cf:3e:b9:60:89:0a:91:6b:00:5c:ae:5c:c0:16:f0:f7:e9:
         30:8b:d7:36:50:01:76:65:da:dd:3e:2b:69:5b:9f:a5:ce:f2:
         f0:94:7d:0e:97:eb:ad:03:10:8f:26:2e:38:8a:bf:4f:46:6f:
         f6:32:0a:21:11:07:2d:1f:0b:3d:8b:50:df:1e:31:50:8b:53:
         c8:2c:fa:1b:c9:61:97:ae:aa:9f:56:68:57:3b:f5:6d:0b:76:
         fc:c5:fc:2b:32:2f:60:8b:64:b4:84:63:3c:45:4a:95:ec:b8:
         39:31:77:3e:fd:38:0d:91:92:6f:ee:43:44:49:dc:b2:4f:27:
         2f:a7:92:0e:22:ce:79:4e:85:66:9b:26:00:66:6d:ba:cf:df:
         71:62:ed:3a:7e:a6:c1:41:92:77:9d:3e:08:b9:38:27:d6:aa:
         f6:d2:3f:bd:5f:c2:c7:bf:34:18:31:94:e9:96:f4:3e:37:50:
         26:e4:dd:4d:f4:c1:57:10:ec:cd:1f:a2:59:47:4b:a2:17:73:
         e7:d0:01:43:c4:0b:4c:cd:aa:d7:a4:bd:e1:25:ad:23:98:d4:
         99:3c:ae:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:22 2024 by rpki-client on console-ams.rpki-client.org