Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/fdeead2d-3023-34cd-b41b-0f952146b093.roa
File:                     fdeead2d-3023-34cd-b41b-0f952146b093.roa (raw, json)
Hash identifier:          JN2w7gGc5lH098mMvgrjVKM0PMehLvNWCw/H4/KI2ko=
Subject key identifier:   21:89:2B:B0:47:B8:D6:6C:72:18:44:8C:EF:81:97:0E:34:42:52:69
Certificate issuer:       /CN=5d613e84-be93-4d7a-a56c-57a378f2c325
Certificate serial:       010D0C9F432858475910B1EB9AEBD809C1083940
Authority key identifier: 83:D9:7E:E5:89:0D:94:72:A3:71:AF:6B:D0:14:D0:CC:74:D3:1D:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/fdeead2d-3023-34cd-b41b-0f952146b093.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     23188
IP address blocks:        2605:7d00::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:b1:eb:9a:eb:d8:09:c1:08:39:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d613e84-be93-4d7a-a56c-57a378f2c325
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=5505a7b9-0560-4839-8d5c-73ae7cec9f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:8c:0b:64:0d:08:e0:67:cc:1a:71:f8:0e:f1:
                    a0:45:c6:4b:5f:d1:68:a1:b0:ac:e2:4c:e5:f6:68:
                    96:4b:22:23:7d:a4:30:13:05:ab:c2:ed:7b:20:ca:
                    b6:7c:97:98:1f:b9:7e:df:4d:82:f9:e5:ba:b8:67:
                    37:38:0c:d1:13:29:01:5e:fb:da:41:40:af:ec:44:
                    58:c3:66:72:05:51:b4:ba:f0:34:a9:40:a0:37:a0:
                    c3:dd:74:b3:21:1f:bb:a0:b8:a8:db:4c:55:72:4b:
                    7e:d8:50:78:6e:14:2c:8e:e1:e3:c7:5e:fa:a8:d4:
                    28:4e:21:4c:69:2c:c0:9b:45:63:8f:21:f5:5b:93:
                    fe:12:c4:7b:ea:e9:73:4c:5c:bb:d3:3e:44:c6:01:
                    77:32:f7:1c:9a:2e:ab:06:5c:88:db:4b:54:63:ce:
                    5a:93:c6:73:ea:2c:f4:21:f1:65:19:bb:f3:0a:2a:
                    05:77:98:db:27:aa:58:71:ac:b3:9e:55:b3:f2:45:
                    26:e8:e2:b1:4c:bb:44:7a:99:9a:67:24:65:27:f0:
                    e8:20:17:9e:8a:63:8c:8a:a8:a1:12:c9:1a:84:39:
                    b1:fb:f0:34:d5:85:65:3b:8f:9d:33:30:1c:56:78:
                    f1:1c:6f:91:79:dd:a4:44:6b:aa:6c:df:ee:f0:83:
                    e8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:89:2B:B0:47:B8:D6:6C:72:18:44:8C:EF:81:97:0E:34:42:52:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/fdeead2d-3023-34cd-b41b-0f952146b093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.crl

            X509v3 Authority Key Identifier:
                keyid:83:D9:7E:E5:89:0D:94:72:A3:71:AF:6B:D0:14:D0:CC:74:D3:1D:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7d00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:bf:b2:f2:98:82:11:bc:2e:df:59:2e:4d:9d:4a:1e:0f:06:
         4f:cd:ac:9e:e9:40:27:e6:1d:2c:b9:f8:3d:a3:bc:83:5e:34:
         81:2b:8c:fb:25:58:6c:cb:08:17:6e:57:bf:3b:ab:04:1f:ea:
         ec:1b:d1:30:94:ab:a8:a6:2e:dd:74:38:fb:a1:28:8f:1d:00:
         81:07:8a:b3:61:80:f7:9f:d0:8d:e9:bf:0e:97:7b:6f:4f:9f:
         71:61:97:c7:92:22:b1:1a:7b:fa:f0:92:7c:39:50:e3:56:0a:
         05:9f:71:fe:1f:e2:f3:02:3c:42:44:62:6b:b7:c2:15:50:93:
         d0:b0:71:a9:1f:b6:2f:67:0f:a3:79:5a:df:60:48:9b:0d:f3:
         b4:4e:46:38:1e:15:d5:bd:3a:0d:96:74:5d:b3:5c:1f:b7:59:
         db:2e:a0:a1:63:0b:b9:e7:17:e6:6d:02:bd:3f:4d:27:7f:51:
         e8:a7:70:3c:b5:f5:9b:58:99:9a:2b:6a:63:1c:01:85:cf:e9:
         22:1f:89:04:a6:18:64:17:d0:a2:bc:4c:79:a7:82:6a:05:0c:
         c4:e1:7f:92:b8:c4:81:b0:f0:89:09:77:13:58:a6:d2:3d:11:
         d3:3b:8c:49:a2:6d:2b:82:83:27:b9:70:7e:43:e2:8b:dd:60:
         b0:8f:9d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:37 2024 by rpki-client on console-fra.rpki-client.org