Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dd32674-3f85-4338-a150-48284427f86a/66c9451c-fa22-3a63-964c-ed95092ca3a0.roa
File:                     66c9451c-fa22-3a63-964c-ed95092ca3a0.roa (raw, json)
Hash identifier:          SUAJcieC7zqYJZvJpqezi1nf3tuSB4cWEe3ZhTmD6xY=
Subject key identifier:   DC:30:9A:A3:29:30:90:46:6D:6C:03:8D:DB:24:36:E4:38:E5:AA:78
Certificate issuer:       /CN=6dd32674-3f85-4338-a150-48284427f86a
Certificate serial:       010D0C9F43285847EBBF8331754C6A484D10D7D0
Authority key identifier: 67:35:B9:98:89:10:B7:14:14:C9:11:E3:DA:A4:CC:D2:9E:10:F3:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dd32674-3f85-4338-a150-48284427f86a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dd32674-3f85-4338-a150-48284427f86a/66c9451c-fa22-3a63-964c-ed95092ca3a0.roa
Signing time:             Mon 18 Nov 2024 14:00:40 +0000
ROA not before:           Mon 18 Nov 2024 14:00:40 +0000
ROA not after:            Sun 16 Feb 2025 14:00:40 +0000
asID:                     19364
IP address blocks:        2602:fa8d::/36 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dd32674-3f85-4338-a150-48284427f86a/6dd32674-3f85-4338-a150-48284427f86a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dd32674-3f85-4338-a150-48284427f86a/6dd32674-3f85-4338-a150-48284427f86a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dd32674-3f85-4338-a150-48284427f86a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:eb:bf:83:31:75:4c:6a:48:4d:10:d7:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd32674-3f85-4338-a150-48284427f86a
        Validity
            Not Before: Nov 18 14:00:40 2024 GMT
            Not After : Feb 16 14:00:40 2025 GMT
        Subject: CN=c8a38a13-aca0-41b4-808d-1fcfe03025c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:59:5d:d2:19:51:8f:2b:b7:bb:aa:93:b4:d6:
                    9f:a0:8a:0e:d2:eb:07:13:59:9d:46:50:69:f9:12:
                    95:89:3d:1a:7c:bd:ac:91:b3:18:4e:45:94:05:51:
                    0d:18:99:e2:f8:49:32:ea:1d:2a:25:54:ec:f3:ab:
                    39:f6:73:0c:c9:a5:0d:b5:b5:1e:a8:4f:69:8b:3f:
                    b6:32:74:e7:bf:9e:67:fd:76:d4:47:37:4b:f0:eb:
                    8b:ef:87:5b:5f:af:f1:49:94:58:3e:55:08:89:f3:
                    98:61:33:82:eb:e3:ae:c8:00:3e:97:03:bc:73:22:
                    96:5b:78:c2:20:61:d4:37:7a:ed:c3:62:b3:07:33:
                    ab:1f:5f:b8:51:67:6a:cf:f0:f6:86:b9:23:3a:bc:
                    cb:30:21:d5:b8:54:42:67:f5:4c:69:0c:cd:82:3a:
                    81:69:bb:c1:51:a5:92:7b:6a:5e:00:34:88:e4:46:
                    28:15:ad:42:fe:60:b8:44:c4:b1:d7:55:da:f3:0f:
                    4a:89:dd:3f:d2:2d:25:6e:19:bb:bf:e6:14:3e:2c:
                    2d:ac:92:cc:b5:80:3c:f7:6b:c2:24:00:94:df:b6:
                    3e:a4:71:e5:d1:c6:f3:0f:aa:ef:46:0e:41:67:78:
                    e3:94:df:3f:3b:46:de:03:fa:91:66:75:69:55:39:
                    24:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:30:9A:A3:29:30:90:46:6D:6C:03:8D:DB:24:36:E4:38:E5:AA:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dd32674-3f85-4338-a150-48284427f86a/66c9451c-fa22-3a63-964c-ed95092ca3a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dd32674-3f85-4338-a150-48284427f86a/6dd32674-3f85-4338-a150-48284427f86a.crl

            X509v3 Authority Key Identifier:
                keyid:67:35:B9:98:89:10:B7:14:14:C9:11:E3:DA:A4:CC:D2:9E:10:F3:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dd32674-3f85-4338-a150-48284427f86a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa8d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:09:31:2d:03:bb:82:3d:78:c6:03:ce:b0:98:3f:9f:27:d1:
         f5:76:0d:06:2c:03:08:05:67:c2:4e:54:fc:76:56:b7:60:8e:
         4f:e8:b6:54:80:d2:c5:10:fb:31:99:6c:85:d8:30:4e:de:cc:
         b3:a5:46:7f:a1:e8:13:bd:1e:ab:cc:18:96:11:3d:c0:04:53:
         4c:10:4d:77:62:65:04:2b:fc:a8:b6:8b:7b:e4:8d:fb:ff:4f:
         c3:6f:cf:d2:bd:47:ea:5c:ed:cd:3f:a7:9f:7d:0d:37:fd:5f:
         53:23:cd:13:79:06:0e:7b:46:36:c2:7f:dd:ac:0b:8f:a8:ee:
         a9:89:4e:38:8a:29:d9:d0:13:2d:a9:e8:73:d1:7a:9a:5b:75:
         7d:ea:a0:6d:75:b1:9e:b3:9d:fa:8e:95:60:ef:ce:7d:92:0c:
         43:c8:5b:1f:9c:00:ce:f0:68:56:1b:a5:38:a6:97:e9:23:63:
         2d:f0:46:93:61:66:f4:d8:50:9f:2c:b1:1c:74:06:9b:d6:40:
         71:af:0c:97:1f:28:6f:1b:05:29:1e:f8:97:d1:4c:6b:ab:0b:
         a7:7f:df:18:be:3b:62:6b:ab:07:8c:24:9a:a0:cb:c6:c7:47:
         be:3e:36:2a:22:94:55:25:fb:63:51:9a:e8:7b:8a:62:5b:29:
         8e:2d:51:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:03:25 2024 by rpki-client on console-ams.rpki-client.org