Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/07c70ea5-4cec-3d90-81d9-f1aa72890f49.roa
File:                     07c70ea5-4cec-3d90-81d9-f1aa72890f49.roa (raw, json)
Hash identifier:          7VaRlFG3KmPR16/cZZ7iOAJLM9sVQllAW/FA///xAjE=
Subject key identifier:   F8:79:42:D9:D1:5F:32:80:E5:77:A3:C6:55:92:E8:80:88:2D:3B:42
Certificate issuer:       /CN=5f4dc2ab-1e6e-4143-95f5-d63db0a7624b
Certificate serial:       010D0C9F4328584726D0757E6A7221C2B3E9CF80
Authority key identifier: 3F:69:1D:DC:7D:D3:C6:76:4C:53:4D:2B:50:0F:57:E9:64:74:F2:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/07c70ea5-4cec-3d90-81d9-f1aa72890f49.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     13737
IP address blocks:        2602:f895::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:75:7e:6a:72:21:c2:b3:e9:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f4dc2ab-1e6e-4143-95f5-d63db0a7624b
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=ba69d352-afc7-43e7-917f-ad76d1348bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ce:c8:2c:ad:f1:63:eb:0b:87:7e:fa:2f:31:
                    36:6a:14:8c:8e:cb:b2:00:65:49:9c:59:44:67:be:
                    b8:a8:d6:d7:e6:03:14:88:1b:c7:af:18:98:f8:e7:
                    db:33:f3:ac:02:57:9a:19:80:94:1d:27:e6:59:fe:
                    80:87:d5:89:9d:27:e4:69:ef:c9:fe:72:0c:5f:59:
                    ab:fe:ac:66:c2:fd:eb:15:9e:31:35:00:9d:e7:ff:
                    8a:5f:e2:09:55:df:86:f0:25:dd:1f:1d:04:a8:81:
                    bf:e4:00:2b:82:3c:24:4b:f4:46:68:3a:f5:6b:e8:
                    6d:6c:d1:0b:37:a6:39:2d:b1:06:20:f2:4f:af:44:
                    83:00:c0:83:e4:7f:b4:5f:c0:20:bc:98:80:ab:15:
                    33:e4:7e:a9:95:6a:30:64:2a:bf:a7:fa:dc:b2:a3:
                    f5:9d:59:36:6c:37:cc:79:42:91:98:7d:71:db:bf:
                    8b:1c:e6:39:cd:17:7e:b7:16:f3:1a:9c:b3:3f:2c:
                    9a:00:0a:b0:cd:c3:d8:ff:a1:69:fb:d1:f9:9f:1b:
                    66:1f:dd:b2:2e:94:86:89:46:c1:1b:ec:e6:3f:fe:
                    d1:01:f2:dc:88:56:05:1e:ed:2f:96:6c:7d:d1:f6:
                    cd:43:5e:9b:56:a6:29:1a:14:60:dd:e2:e4:61:b5:
                    95:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:79:42:D9:D1:5F:32:80:E5:77:A3:C6:55:92:E8:80:88:2D:3B:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/07c70ea5-4cec-3d90-81d9-f1aa72890f49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.crl

            X509v3 Authority Key Identifier:
                keyid:3F:69:1D:DC:7D:D3:C6:76:4C:53:4D:2B:50:0F:57:E9:64:74:F2:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f895::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:97:a6:4c:28:98:f2:12:1d:71:04:f4:72:9f:7e:d0:60:73:
         0f:d1:0c:9b:9e:af:4c:11:fe:4e:b3:b8:e1:99:fc:9c:f8:ef:
         a4:b2:6e:ad:89:b2:0f:07:52:fc:e8:94:d9:73:2d:0a:9c:11:
         b5:a5:0e:96:d8:87:cc:f7:5d:29:06:b6:6c:d8:57:9d:b7:47:
         d8:ea:9a:8b:77:6d:9b:9a:41:17:e2:57:b1:fd:e0:f7:89:c3:
         18:bb:f5:de:8a:97:33:5f:01:e1:84:2f:7c:95:ed:65:ff:df:
         04:23:6c:d8:d0:a1:40:92:ff:66:1b:10:0e:97:39:0d:84:ff:
         e2:e3:96:e7:34:a0:af:bf:7f:7a:59:0b:06:80:f9:fb:1a:5d:
         95:2c:fc:db:08:14:e6:34:fb:cd:9e:95:05:49:90:73:72:96:
         f4:5d:58:39:41:29:00:f5:a0:05:cd:71:07:bc:41:a8:38:e9:
         69:41:ff:f7:71:35:3d:78:ba:57:ea:b7:3a:6a:e1:55:47:45:
         94:e1:32:bf:3a:da:f5:fb:98:2d:98:33:25:41:32:0b:59:1a:
         d4:33:99:b6:16:d6:33:1b:bd:f0:15:fd:c6:82:58:fc:27:0c:
         a5:d5:cd:c5:08:65:2f:35:b8:10:4c:5e:12:c7:1d:51:0c:28:
         91:e0:8a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:37 2024 by rpki-client on console-fra.rpki-client.org