Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/5486ade0-fc94-3e8d-89dc-e03fab376ea9.roa
File:                     5486ade0-fc94-3e8d-89dc-e03fab376ea9.roa (raw, json)
Hash identifier:          eV/DotBRZL1qQ2CBxGHlm+bcvApJ3xgh5q3KcGjCQ80=
Subject key identifier:   DA:AC:CF:3A:AD:D2:58:E8:C0:0C:07:08:27:23:F8:4B:2C:1E:CC:96
Certificate issuer:       /CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9
Certificate serial:       010D0C9F43285847C503CC8BBE56624BFD94D480
Authority key identifier: BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/5486ade0-fc94-3e8d-89dc-e03fab376ea9.roa
Signing time:             Mon 04 Nov 2024 17:01:51 +0000
ROA not before:           Mon 04 Nov 2024 17:01:51 +0000
ROA not after:            Sun 02 Feb 2025 17:01:51 +0000
asID:                     153371
IP address blocks:        2602:f7b1::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c5:03:cc:8b:be:56:62:4b:fd:94:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9
        Validity
            Not Before: Nov  4 17:01:51 2024 GMT
            Not After : Feb  2 17:01:51 2025 GMT
        Subject: CN=5d117c60-edda-42cf-a4ed-3771c006cec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bb:e6:92:d4:0e:c1:63:2c:1f:93:3d:c8:ea:
                    b4:80:f9:31:46:44:14:d1:64:29:be:ac:96:ef:91:
                    63:1f:01:c9:37:9e:f2:a7:9e:44:b4:03:e3:2e:d9:
                    9d:f4:f2:0d:cc:4c:42:32:6f:74:68:74:ae:5d:be:
                    93:df:80:f2:87:40:05:bf:ac:3a:1b:f3:25:0e:ca:
                    34:28:4c:d1:63:05:e9:bd:16:de:81:d9:52:15:75:
                    b1:9f:5f:70:be:98:42:91:95:21:e6:ca:cb:b2:cd:
                    cb:34:55:0a:e4:d4:d3:4c:52:32:9a:72:f1:aa:73:
                    88:e9:3a:88:36:92:bf:60:1e:08:70:79:94:8e:9a:
                    af:62:a1:7e:7b:e4:99:c6:41:7a:61:5e:41:c9:fc:
                    bf:1e:0e:b9:e4:9a:2b:d2:5d:e1:25:45:16:d2:5d:
                    b8:d7:98:6b:cc:39:32:95:48:cf:2a:c2:87:0c:f0:
                    2c:d2:62:0a:bc:e6:d5:81:17:76:e0:cf:07:6b:07:
                    36:2c:40:02:71:70:1e:04:a4:2f:ba:41:c7:19:1a:
                    ba:80:5f:a5:bc:31:19:9d:51:ff:0b:b2:ec:26:f3:
                    90:76:fd:d9:23:c8:68:22:81:34:87:20:0c:cd:40:
                    4b:5e:29:b6:74:74:24:c3:0c:e9:81:44:25:8c:89:
                    27:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AC:CF:3A:AD:D2:58:E8:C0:0C:07:08:27:23:F8:4B:2C:1E:CC:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/5486ade0-fc94-3e8d-89dc-e03fab376ea9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl

            X509v3 Authority Key Identifier:
                keyid:BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7b1::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:1e:2d:ec:c2:93:c4:ff:0e:37:0e:f9:db:e2:7e:60:da:ef:
         53:77:1f:03:d4:51:ef:71:49:ad:f8:e2:e9:f0:a1:25:b0:41:
         49:d9:d5:9a:af:4a:01:f7:4c:34:e9:38:a1:01:92:3d:98:40:
         0a:57:ee:cd:e6:24:25:07:d0:d7:9a:a5:af:41:c3:31:3f:7f:
         13:77:c4:de:bf:37:f9:b2:f0:af:60:32:cc:d5:7b:47:f2:75:
         bc:57:02:14:ae:6d:af:a4:e3:a5:18:aa:b6:00:08:2a:c5:65:
         9d:ff:35:6b:a2:10:67:d9:f2:63:f3:49:e3:c3:89:22:a7:fb:
         e2:7a:83:6d:46:d4:5e:62:d5:b9:33:24:c8:ae:66:55:54:f8:
         2b:dd:d5:33:01:b5:2b:ad:19:fc:1a:15:a0:95:6c:44:fb:33:
         47:87:a3:26:0a:f0:17:a2:e0:bc:47:ee:e3:a4:89:ff:1f:17:
         a6:2b:bb:c8:d5:ff:1c:7e:66:63:04:b2:79:a4:ff:73:78:de:
         d5:be:57:3b:96:a3:1b:05:2f:36:96:6f:e7:ee:08:b5:a0:8b:
         ed:be:a4:d7:79:8c:fa:1a:94:1d:87:61:6e:9c:78:23:ad:9c:
         f6:67:cd:b5:ed:ab:9b:9e:2e:77:6d:32:d5:1d:d9:7a:2a:79:
         8e:e4:98:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:25 2024 by rpki-client on console-fra.rpki-client.org