Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/5b7d3556-28e1-360c-9a9e-a01bb7111857.roa
File:                     5b7d3556-28e1-360c-9a9e-a01bb7111857.roa (raw, json)
Hash identifier:          kcblbMoK7lewVCoxWWg+hYmztAyKxTlYBXoYxhaF6+A=
Subject key identifier:   99:B5:CB:A1:A1:E2:5E:04:52:AB:D5:FE:FD:2E:C4:5A:D2:5B:F6:CA
Certificate issuer:       /CN=50f21827-6d64-4880-9e46-c3d13313c975
Certificate serial:       010D0C9F43285847D569FCD98C5BA17423990D80
Authority key identifier: EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/5b7d3556-28e1-360c-9a9e-a01bb7111857.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     23347
IP address blocks:        2602:f921::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:69:fc:d9:8c:5b:a1:74:23:99:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50f21827-6d64-4880-9e46-c3d13313c975
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=37e72bd5-bb9e-4160-b3c3-79eab77ec1f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5e:34:ed:90:85:15:66:3c:e1:5c:f9:44:91:
                    fd:8b:21:e4:f7:e4:5d:11:44:71:d3:16:46:13:40:
                    50:ea:b7:3a:48:9b:19:1b:85:7e:20:4d:d6:28:31:
                    5e:44:88:93:05:ea:4a:6c:a9:bc:82:e5:13:bc:c9:
                    94:7c:2e:8b:4f:35:ce:5e:72:f4:7c:c6:30:54:5f:
                    5a:40:66:d5:c6:b2:76:a7:f5:ab:86:25:f1:9a:cd:
                    de:08:69:d4:1e:06:d2:a4:fa:53:c8:d1:9c:53:29:
                    e0:56:63:45:66:d3:61:d8:22:5b:18:3b:b4:0a:62:
                    c4:a3:86:63:51:70:c9:8b:61:5f:c9:5c:48:f5:14:
                    ae:5f:51:fb:1e:ad:01:4b:f4:74:8b:dd:d3:ee:97:
                    3a:43:49:ed:f0:26:b8:0c:cb:54:f7:f8:12:e5:0e:
                    14:14:83:7c:c7:b3:21:65:af:5b:51:d5:01:67:2a:
                    bc:e4:bc:da:15:eb:a9:79:ee:4b:af:82:e3:67:93:
                    a5:a3:2a:ec:4a:05:0c:a1:cd:8e:13:c0:bd:63:ec:
                    ee:ec:85:39:d7:06:52:14:08:9d:bd:6f:e5:2a:2d:
                    18:cf:8f:fc:81:14:1b:60:4d:d8:5e:07:f8:63:5e:
                    48:06:6a:e0:02:8e:ee:b0:7a:1d:42:17:ba:18:a0:
                    38:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B5:CB:A1:A1:E2:5E:04:52:AB:D5:FE:FD:2E:C4:5A:D2:5B:F6:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/5b7d3556-28e1-360c-9a9e-a01bb7111857.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl

            X509v3 Authority Key Identifier:
                keyid:EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f921::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:59:f6:90:d8:90:a3:83:10:4b:09:a9:ad:83:f5:1c:78:44:
         02:0d:e6:85:e5:a3:08:ba:a8:89:83:7a:25:57:dd:a5:67:10:
         35:97:71:c8:3d:de:e1:b5:a8:5f:83:5e:af:f6:64:93:cb:2a:
         6b:50:03:e3:06:b4:24:33:f2:c3:35:27:45:11:da:46:f6:85:
         0e:4d:09:33:8d:50:2e:1b:bb:8c:2f:3a:0e:c5:bd:ff:b1:d5:
         1e:d6:f6:be:7f:0c:5b:be:fb:6a:fd:aa:00:9b:d0:1e:a7:10:
         d5:57:1b:9c:5d:07:58:c5:2c:16:aa:99:0b:19:f5:00:1a:7b:
         25:36:77:8a:8a:b6:82:54:b5:19:a5:14:89:74:f4:24:36:61:
         81:70:df:c0:29:f3:e4:11:ed:4b:2e:0c:6a:73:04:56:bf:39:
         67:4f:0d:2f:e1:6b:36:dd:90:be:80:2b:77:41:d4:fb:b1:db:
         a0:37:19:16:0f:68:f2:e7:13:29:21:6f:21:31:e6:32:2e:ce:
         9e:a4:b4:a3:60:e5:10:df:89:91:46:e8:01:9b:5a:92:da:33:
         ce:45:5d:4f:79:40:02:2e:f1:39:db:36:7b:15:78:4d:b5:b0:
         3a:c8:86:85:70:89:e3:da:52:6a:5c:7c:87:de:63:2b:05:6c:
         da:f7:7c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:31 2024 by rpki-client on console-ams.rpki-client.org