Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/56ef51ad-5c96-3514-901e-7d87c5eec06b.roa
File:                     56ef51ad-5c96-3514-901e-7d87c5eec06b.roa (raw, json)
Hash identifier:          ta6INFNjGqugvnODESY1YdKAVTRKJH8s6JP+rNCkJYc=
Subject key identifier:   5B:8F:09:E2:BC:AB:56:EA:27:3C:ED:18:2A:A1:18:EF:EF:B7:03:14
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F432858472045B478E7C0871791ECC3E0
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/56ef51ad-5c96-3514-901e-7d87c5eec06b.roa
Signing time:             Fri 06 Sep 2024 16:46:16 +0000
ROA not before:           Fri 06 Sep 2024 16:46:16 +0000
ROA not after:            Thu 05 Dec 2024 17:46:16 +0000
asID:                     62517
IP address blocks:        2602:f83b::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:20:45:b4:78:e7:c0:87:17:91:ec:c3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Sep  6 16:46:16 2024 GMT
            Not After : Dec  5 17:46:16 2024 GMT
        Subject: CN=e1df286f-8856-4aae-b921-7ae23e53f94e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e1:ff:31:e2:7c:d9:31:af:da:bc:b0:30:92:
                    aa:db:0d:1c:e7:1d:89:50:b0:65:73:0d:c1:0d:c2:
                    9a:40:5b:55:c5:e6:2d:ad:ec:83:55:81:d4:a0:9b:
                    96:ba:a6:3f:ca:4f:7c:9f:f5:22:b5:93:75:22:bf:
                    21:0c:7e:d6:1d:ab:64:46:f0:27:c6:61:7b:5d:97:
                    d1:e3:dc:90:83:d0:3d:98:fa:e0:79:5a:72:2e:e4:
                    c5:a8:14:a2:7b:c3:ca:63:19:03:d7:c0:5d:f6:bc:
                    83:55:dd:eb:c7:e6:d6:35:f8:bf:3e:0f:b1:be:2e:
                    72:a4:94:4c:36:94:71:53:75:30:38:55:89:a2:85:
                    2e:c5:e4:e4:fd:05:7c:0d:c0:9a:e5:89:46:69:5d:
                    b0:53:b6:b3:bc:b9:ba:91:3b:e3:4e:8c:91:6c:51:
                    a0:10:bb:79:dc:33:82:12:65:67:61:05:cc:ac:22:
                    98:76:4a:71:4f:f1:a1:b4:46:a7:4c:0c:04:06:97:
                    fd:d6:28:35:75:74:3e:c3:37:be:16:e8:34:c0:4a:
                    0a:ab:20:a2:44:4c:49:17:b2:47:38:b4:25:41:5b:
                    00:2f:8b:e1:19:cc:67:f4:76:be:4d:02:3b:44:e6:
                    2b:75:d6:2d:78:10:a4:0f:3b:03:2d:bf:50:8b:74:
                    5b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8F:09:E2:BC:AB:56:EA:27:3C:ED:18:2A:A1:18:EF:EF:B7:03:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/56ef51ad-5c96-3514-901e-7d87c5eec06b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:bf:b0:5a:ec:78:64:bd:54:e8:5c:c4:e2:34:78:d6:dd:33:
         3c:91:f5:11:f4:82:1f:63:b8:a1:6a:9d:37:c9:39:fe:d6:ab:
         df:1e:98:a4:28:3d:07:22:e8:bc:53:e6:c8:65:ab:bb:ea:1d:
         09:2f:17:4d:bc:ef:f3:c0:04:65:ed:e0:2c:eb:41:b1:16:80:
         e5:1b:09:eb:3f:9a:c1:27:ca:56:28:2f:03:7d:70:87:09:a3:
         8e:c4:88:30:02:60:08:2c:3c:69:72:a3:6c:a7:c3:15:d6:ea:
         c2:66:29:13:23:d4:8a:e6:fb:5e:71:32:53:f9:9b:77:c2:f7:
         8c:35:55:84:cb:c9:ab:7b:4f:5e:e8:3e:11:ae:7d:03:06:a7:
         92:5f:1c:01:bd:96:98:21:21:84:47:0d:e1:21:10:41:a8:6d:
         70:9a:7c:53:53:00:1a:c6:be:b3:81:e2:86:9e:49:32:5e:7a:
         eb:26:b4:e5:1f:83:f2:75:f2:df:9a:d9:c6:a6:a5:c8:d0:0c:
         9d:5c:16:cc:1d:9c:b4:a3:fa:25:70:44:a5:0c:0c:b1:55:cb:
         a2:3c:12:cf:09:87:32:e4:75:4d:d9:25:64:49:1a:d7:37:9d:
         3e:73:71:d9:41:fb:f7:57:2b:2e:a0:b7:26:7c:a0:f3:72:9f:
         73:ae:37:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:29 2024 by rpki-client on console-fra.rpki-client.org