Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/18bdc555-5ce7-3ce7-a252-8dd702bcc990.roa
File:                     18bdc555-5ce7-3ce7-a252-8dd702bcc990.roa (raw, json)
Hash identifier:          N2IE5rraDk8uzJeYNlJ7IXaT7IDHV6B6zSHTBRKs65I=
Subject key identifier:   17:7A:D4:D7:B0:69:3A:5A:E1:97:B1:4D:6C:EB:30:FB:B8:D2:DE:EF
Certificate issuer:       /CN=8b72935c-ac1b-4aa0-b408-9c3271a8a2a5
Certificate serial:       010D0C9F43285846F83D095E0829848531BDBE80
Authority key identifier: A0:9C:62:3B:6D:64:FD:4F:08:01:60:97:F8:DB:8F:44:DF:97:B9:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/18bdc555-5ce7-3ce7-a252-8dd702bcc990.roa
Signing time:             Fri 23 Aug 2024 08:36:28 +0000
ROA not before:           Fri 23 Aug 2024 08:36:28 +0000
ROA not after:            Thu 21 Nov 2024 09:36:28 +0000
asID:                     32797
IP address blocks:        2602:2ef::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f8:3d:09:5e:08:29:84:85:31:bd:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b72935c-ac1b-4aa0-b408-9c3271a8a2a5
        Validity
            Not Before: Aug 23 08:36:28 2024 GMT
            Not After : Nov 21 09:36:28 2024 GMT
        Subject: CN=df9a6803-70dd-415d-8701-d1318aedb5fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6d:98:1f:7c:53:f1:7e:f1:43:e6:93:6d:57:
                    ac:cd:d6:3c:e1:5c:32:d4:2a:63:d6:d2:d4:74:cb:
                    dc:27:c2:cb:1e:7d:da:ef:15:7d:16:42:29:b6:b5:
                    6c:73:3a:f8:b1:23:e0:95:61:19:ac:43:44:b6:44:
                    4a:a8:27:98:aa:41:6d:5d:1b:7d:5d:c4:c1:cb:f9:
                    d4:15:b0:d1:eb:df:ea:7e:df:73:16:16:32:e2:7f:
                    c0:52:5b:39:db:17:a6:27:b5:0d:02:b4:16:90:29:
                    81:e8:bc:1a:f3:d9:4c:67:fc:6f:f7:1c:7c:da:fa:
                    d1:2f:ae:89:89:15:21:75:70:59:9c:c8:44:f5:ec:
                    73:a1:6a:56:2e:4d:bd:48:5e:ff:91:ee:5e:7d:31:
                    e2:8c:05:90:53:aa:7b:7f:dd:c4:65:68:6c:8a:11:
                    d9:70:35:df:fd:7b:6b:d0:8f:9f:4a:36:09:c3:dd:
                    1c:9f:96:3f:23:24:e5:ee:98:77:e2:b1:70:4c:7c:
                    24:18:e1:14:5b:3c:25:d3:6a:36:2f:df:f4:20:63:
                    65:b2:b8:f2:9e:a1:81:dc:f6:b0:e3:4c:06:30:24:
                    fe:c2:8b:8f:5b:6d:f7:30:4a:56:2f:ba:db:95:08:
                    35:e6:00:58:08:bb:72:e6:d3:ca:ba:0b:b8:63:0d:
                    cf:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:7A:D4:D7:B0:69:3A:5A:E1:97:B1:4D:6C:EB:30:FB:B8:D2:DE:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/18bdc555-5ce7-3ce7-a252-8dd702bcc990.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.crl

            X509v3 Authority Key Identifier:
                keyid:A0:9C:62:3B:6D:64:FD:4F:08:01:60:97:F8:DB:8F:44:DF:97:B9:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2ef::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:fe:53:10:83:55:9d:3f:98:8f:ee:90:59:20:49:b1:c8:c5:
         40:05:00:f6:a6:16:a0:db:90:6e:7b:84:2e:bc:17:be:a0:5c:
         0a:35:2a:99:73:f4:36:ee:c4:f0:d1:9d:6b:d3:3d:4d:3e:4a:
         3c:4d:7d:6a:fc:ca:12:77:46:be:f9:18:3b:98:44:a8:80:96:
         4f:d7:c7:48:c8:da:39:45:75:96:0e:3b:3b:d5:7b:ae:9a:23:
         0c:a8:3c:74:4b:94:3d:09:d0:c3:e9:e8:40:02:44:ea:b8:b8:
         7c:2c:5b:2b:d4:2e:22:f2:77:b6:de:61:3f:21:53:00:40:5a:
         9d:c8:5d:18:f6:bf:17:7c:82:0f:6f:31:09:86:e7:5b:d4:c0:
         a0:49:63:a5:e4:78:56:0e:5b:47:b6:36:b7:2d:52:be:fd:0a:
         29:8d:f5:75:9c:f3:ab:ad:84:a8:d0:29:61:42:a6:15:ca:97:
         3e:ab:70:98:f1:09:60:d5:8c:f8:0a:35:35:29:7e:28:29:37:
         91:15:94:54:77:5b:8d:1f:bd:b6:84:d9:a3:c3:94:04:21:94:
         db:f6:eb:07:0e:95:a9:c1:51:fa:0a:4d:45:38:22:d0:32:ec:
         6b:6c:38:98:91:69:bf:60:6d:ec:15:d6:aa:a0:49:43:f2:4e:
         67:97:59:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 05:59:11 2024 by rpki-client on console-fra.rpki-client.org