Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/88777c11-cebf-398b-9cd2-dcb17df89b2d.roa
File:                     88777c11-cebf-398b-9cd2-dcb17df89b2d.roa (raw, json)
Hash identifier:          CGluIELx60KhtfJyMkPg2BFtES9StiTn2zgMhMG5nPI=
Subject key identifier:   63:F1:0D:0D:4B:99:37:E0:31:75:07:FA:3E:0B:17:6E:AF:04:7D:AC
Certificate issuer:       /CN=50f21827-6d64-4880-9e46-c3d13313c975
Certificate serial:       010D0C9F43285847D569FCEFC76B65D4B4538700
Authority key identifier: EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/88777c11-cebf-398b-9cd2-dcb17df89b2d.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     62711
IP address blocks:        2602:f921::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:69:fc:ef:c7:6b:65:d4:b4:53:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50f21827-6d64-4880-9e46-c3d13313c975
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=d90f284a-f0fb-4ecb-92cc-1a4dacbb5069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0d:e7:65:ee:da:d7:e9:a4:2c:76:9d:fb:c3:
                    43:18:be:b0:fb:a8:fe:e4:34:33:8f:a3:a2:16:2a:
                    13:b4:af:61:89:d8:56:33:32:7e:28:06:ee:87:af:
                    27:49:6d:9c:24:4a:2b:d3:3b:3d:d0:ad:10:1f:2c:
                    dc:12:51:ec:a5:6f:0b:97:15:48:2a:6b:81:95:a2:
                    9f:44:9e:d4:3c:66:6d:d1:52:4d:34:5f:7c:d5:d1:
                    7e:29:df:67:08:5b:08:6b:f0:1c:d7:92:6a:38:92:
                    36:cb:53:89:26:77:4c:ac:6f:84:6f:64:1b:a6:0e:
                    0c:c9:71:39:60:2b:6f:d0:57:89:27:3a:f7:01:09:
                    be:4a:2c:92:52:db:a2:34:be:9a:b7:3c:06:aa:42:
                    f6:e5:cf:94:c6:4d:d8:f5:13:b9:fa:82:f5:54:d5:
                    52:86:9e:a0:6d:60:9c:b3:6c:9a:43:21:fc:e6:59:
                    0b:32:76:47:18:b3:33:6f:b1:d2:6a:0b:cd:44:46:
                    09:15:b6:1f:bb:5e:cd:45:55:d2:8f:85:02:88:a3:
                    1e:6c:27:ce:53:54:16:d5:60:d1:43:ea:5b:e8:0e:
                    f9:66:2b:9b:5d:d4:95:05:fc:17:4b:e7:90:8f:c1:
                    95:bb:24:05:2f:ea:3a:96:e4:90:70:35:6e:19:73:
                    8f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F1:0D:0D:4B:99:37:E0:31:75:07:FA:3E:0B:17:6E:AF:04:7D:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/88777c11-cebf-398b-9cd2-dcb17df89b2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl

            X509v3 Authority Key Identifier:
                keyid:EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f921::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:50:bb:79:fe:54:99:7e:b6:b9:ff:7a:ab:fa:04:6e:99:9e:
         e0:40:3a:14:4b:28:95:9b:3a:9c:24:1a:f7:8b:3a:34:f0:54:
         bd:d1:e0:bf:49:d0:05:ec:f7:f0:01:eb:d8:d9:52:b6:a3:d9:
         49:ef:1c:ea:48:4a:dd:cc:8c:98:55:83:4f:8c:f1:f2:73:e4:
         ec:31:08:51:d9:b5:d7:7b:e8:3e:42:02:55:c0:ae:4c:e3:b4:
         d9:43:e3:61:2d:a7:56:2e:ad:61:57:2c:6b:17:85:93:c7:7f:
         74:cd:83:7f:a5:16:3e:a8:10:d1:9e:e9:9f:e9:f2:9c:3e:8b:
         5f:6b:0e:f0:5c:27:e6:cc:0a:f8:8b:b2:0d:44:76:79:b0:f3:
         3a:58:8c:e3:2c:f3:f9:00:4a:05:5d:2b:3e:66:22:62:ae:94:
         21:c6:f8:7c:33:e9:34:e3:6f:d8:3c:ac:d0:df:98:6e:2e:43:
         2d:4f:ce:5d:96:04:5e:3a:35:61:cc:45:b4:d4:05:b3:25:90:
         ea:d8:36:42:76:b5:59:9f:ad:38:19:b0:1b:01:08:c0:35:dd:
         4a:49:16:9d:48:aa:28:b4:56:a6:c8:94:fa:b6:ee:8d:dd:24:
         2b:79:a1:ab:69:7d:62:e4:3f:e3:71:c1:6e:27:73:27:a3:a8:
         a8:4c:ef:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:37 2024 by rpki-client on console-fra.rpki-client.org