Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/755eca47-6eba-4778-8dff-927bd8a57a91/f43d3efe-127c-36ce-b036-7fdeb7e9cd5c.roa
File:                     f43d3efe-127c-36ce-b036-7fdeb7e9cd5c.roa (raw, json)
Hash identifier:          77lVDk+1gIO07zOiakiiDzgEeYefL1orhXj08dnchnI=
Subject key identifier:   0C:D0:3A:00:89:A4:03:D3:3B:9C:C5:4E:4E:8D:11:A4:74:83:C1:AB
Certificate issuer:       /CN=755eca47-6eba-4778-8dff-927bd8a57a91
Certificate serial:       010D0C9F432858479EDBCF3E1FEE6D1FE599E9C0
Authority key identifier: 69:BC:6C:6F:04:F5:B8:77:E4:3E:99:31:33:B3:7B:C5:A6:CB:ED:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/755eca47-6eba-4778-8dff-927bd8a57a91.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/755eca47-6eba-4778-8dff-927bd8a57a91/f43d3efe-127c-36ce-b036-7fdeb7e9cd5c.roa
Signing time:             Tue 22 Oct 2024 01:00:31 +0000
ROA not before:           Tue 22 Oct 2024 01:00:31 +0000
ROA not after:            Mon 20 Jan 2025 02:00:31 +0000
asID:                     25644
IP address blocks:        2602:f85d::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/755eca47-6eba-4778-8dff-927bd8a57a91/755eca47-6eba-4778-8dff-927bd8a57a91.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/755eca47-6eba-4778-8dff-927bd8a57a91/755eca47-6eba-4778-8dff-927bd8a57a91.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/755eca47-6eba-4778-8dff-927bd8a57a91.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9e:db:cf:3e:1f:ee:6d:1f:e5:99:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=755eca47-6eba-4778-8dff-927bd8a57a91
        Validity
            Not Before: Oct 22 01:00:31 2024 GMT
            Not After : Jan 20 02:00:31 2025 GMT
        Subject: CN=755bc188-474b-478e-b306-f5a627baf284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:10:26:6a:69:ae:2a:c0:bd:e4:f9:5a:c8:13:
                    eb:4c:2d:75:1b:50:a2:28:40:48:c7:9e:24:1f:f2:
                    07:5d:f2:19:25:36:7d:bd:0f:ab:5b:1d:a8:31:fd:
                    c9:c9:1e:3b:7e:84:53:ed:39:4d:9f:26:8f:5f:5b:
                    65:7d:7c:8d:fe:5d:74:06:68:7b:45:ce:58:77:36:
                    94:1c:a7:1d:65:31:eb:da:94:07:83:ba:8f:a2:79:
                    5d:9c:81:3b:12:0c:5d:c9:1e:ce:60:be:e3:ba:b3:
                    28:2e:92:68:17:a8:e8:69:57:8f:28:dd:1a:77:fc:
                    80:b9:9d:3f:a6:f3:0d:d5:a8:81:29:97:5e:7b:cd:
                    a7:87:62:39:cb:b1:7f:05:0c:08:8e:b7:ba:47:1b:
                    46:b8:79:bf:13:25:3e:4a:20:ca:c8:d5:02:bc:ba:
                    fd:4b:6c:3e:c4:ef:4c:e3:03:7c:97:98:67:c8:da:
                    0c:0a:15:04:39:7a:af:31:17:95:6a:4a:76:45:d2:
                    2d:5a:f0:82:5c:4d:3d:57:5c:68:2d:eb:5b:10:c1:
                    d4:e6:33:e8:23:3d:ed:cf:fa:0e:7a:d3:94:9a:1f:
                    c8:02:b2:55:fd:d1:4b:3e:c7:68:cb:e4:15:da:1a:
                    a9:5b:bf:33:c0:96:39:dc:83:98:87:7a:a5:e0:9c:
                    ce:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D0:3A:00:89:A4:03:D3:3B:9C:C5:4E:4E:8D:11:A4:74:83:C1:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/755eca47-6eba-4778-8dff-927bd8a57a91/f43d3efe-127c-36ce-b036-7fdeb7e9cd5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/755eca47-6eba-4778-8dff-927bd8a57a91/755eca47-6eba-4778-8dff-927bd8a57a91.crl

            X509v3 Authority Key Identifier:
                keyid:69:BC:6C:6F:04:F5:B8:77:E4:3E:99:31:33:B3:7B:C5:A6:CB:ED:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/755eca47-6eba-4778-8dff-927bd8a57a91.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f85d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:1f:4b:77:6a:80:e4:db:a3:52:45:44:ce:4a:41:3d:66:30:
         de:b9:9f:49:f6:d5:53:2e:a5:ca:37:52:10:65:31:ce:ed:39:
         4e:ef:15:8c:d7:0f:6f:fd:1c:68:fd:38:46:b0:43:5d:cc:e1:
         b4:42:1c:3d:ca:d3:6d:e8:79:3c:04:a9:94:c0:60:75:f3:6c:
         04:5a:db:8c:73:7c:7d:66:be:eb:4c:72:98:f7:9c:da:81:4d:
         b3:09:5f:75:60:2a:0d:97:d8:75:bb:82:69:8a:bf:ef:a8:e8:
         b2:a8:5d:78:db:1a:e3:e7:8c:dd:6d:44:ce:c3:b7:fb:20:b7:
         6c:87:f2:76:42:2c:9c:58:1e:02:80:c8:60:cf:41:9a:30:cc:
         b4:ec:e8:dc:33:5c:32:24:ba:73:68:a8:f0:b5:3b:b0:01:bd:
         e5:a9:5e:8c:87:94:4a:9e:9d:5f:95:1d:19:74:26:22:73:48:
         cb:27:5b:19:8b:c0:02:72:82:96:4c:b3:7d:c8:54:c4:0c:02:
         8f:32:52:03:cb:b2:f2:4e:cb:48:9e:46:5c:45:10:55:e8:79:
         e8:98:cc:2f:80:3b:24:56:8d:f8:ea:3f:62:66:c8:92:37:c3:
         85:b6:08:a3:c8:ca:71:20:29:28:0a:f6:12:3d:92:da:2b:9e:
         d3:dd:27:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:34 2024 by rpki-client on console-ams.rpki-client.org