Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/f4d8a2fb-b1ee-3843-85c5-8cd472065071.roa
File:                     f4d8a2fb-b1ee-3843-85c5-8cd472065071.roa (raw, json)
Hash identifier:          E5iWSAZoeaXjWS4sIi5bdpFn+kwZ5YOFwVMVj89Ti5g=
Subject key identifier:   54:80:2A:FB:5E:04:1E:6E:54:BB:83:3E:35:81:07:BB:64:0B:04:C3
Certificate issuer:       /CN=7ff6878d-3b7e-4c67-a91a-e21f1042f9e8
Certificate serial:       010D0C9F4328584737907A8C2D83D067FB46FC80
Authority key identifier: 48:84:03:73:7A:40:DD:51:C9:F1:4B:CD:11:48:90:6D:E1:DD:0C:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/f4d8a2fb-b1ee-3843-85c5-8cd472065071.roa
Signing time:             Sun 15 Sep 2024 01:00:30 +0000
ROA not before:           Sun 15 Sep 2024 01:00:30 +0000
ROA not after:            Sat 14 Dec 2024 02:00:30 +0000
asID:                     55254
IP address blocks:        2602:ffcd::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:37:90:7a:8c:2d:83:d0:67:fb:46:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ff6878d-3b7e-4c67-a91a-e21f1042f9e8
        Validity
            Not Before: Sep 15 01:00:30 2024 GMT
            Not After : Dec 14 02:00:30 2024 GMT
        Subject: CN=9b143ee7-2722-4c44-84d6-f81fd872944a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4d:38:06:1d:22:55:fc:8f:42:92:91:90:33:
                    e9:71:36:21:ec:94:d8:d4:dc:ea:20:d8:f4:de:1c:
                    b3:ad:9f:9a:0c:85:c7:69:9d:06:a6:5b:ba:05:89:
                    71:c1:c9:ba:53:b2:12:f5:8f:da:ee:5e:af:5c:02:
                    02:2a:ad:8c:7e:43:1e:64:6b:73:c7:4b:74:ba:1d:
                    ae:da:7c:60:4e:9c:0c:56:8d:b7:5f:01:99:ef:4b:
                    bc:7e:72:75:88:56:67:6d:a7:67:40:df:0a:a0:7d:
                    94:f0:d6:f2:2a:88:a7:b7:04:18:5b:94:31:91:0d:
                    16:70:7a:ae:61:78:ec:25:95:97:71:e8:12:69:20:
                    3f:01:04:63:96:67:3f:6c:f9:a5:bc:86:6a:8d:f6:
                    8f:31:ae:4a:e6:0d:14:f4:54:ae:e3:05:47:f5:9a:
                    49:a5:6b:94:9c:7b:2c:e2:38:0b:63:e9:cf:c6:ca:
                    b0:fd:f6:45:8f:83:74:d4:2b:2b:dc:70:3d:38:9d:
                    81:1c:77:76:70:d4:5c:60:d2:89:33:db:f8:ab:01:
                    85:d9:f4:89:bc:dc:3c:7e:19:c1:e2:aa:91:ba:fb:
                    22:46:67:0e:d8:0b:41:70:2b:82:b7:d5:1c:c3:37:
                    42:15:78:1c:fb:21:4b:58:1e:2a:3d:df:28:a7:eb:
                    ef:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:80:2A:FB:5E:04:1E:6E:54:BB:83:3E:35:81:07:BB:64:0B:04:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/f4d8a2fb-b1ee-3843-85c5-8cd472065071.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.crl

            X509v3 Authority Key Identifier:
                keyid:48:84:03:73:7A:40:DD:51:C9:F1:4B:CD:11:48:90:6D:E1:DD:0C:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffcd::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:e5:e7:4a:a5:8d:dd:2b:f2:27:6b:d0:20:f8:35:09:3d:80:
         da:59:a4:29:cd:30:21:7a:bd:12:41:9b:36:1d:95:5c:7c:b4:
         e1:27:2f:21:cc:56:74:08:20:cd:b7:88:f5:47:5b:e6:1d:a8:
         39:42:0e:09:a4:b4:46:2b:df:a5:e3:da:48:ab:13:17:14:77:
         f4:f5:8a:4a:e9:95:a8:1d:b3:c1:fe:69:7c:f7:13:b5:49:f1:
         c3:39:bd:07:46:df:ce:2e:07:50:29:89:41:27:74:f9:bf:c8:
         e1:6c:e4:f6:b4:7a:8b:69:89:c3:74:d1:83:a9:ba:9f:53:9a:
         9a:23:4d:dc:2e:df:2f:c2:5c:73:c3:37:76:8e:59:ba:03:68:
         9b:ca:96:fe:8e:db:33:14:23:28:a6:e3:2c:90:09:96:ab:cd:
         b6:5f:d0:94:6d:f6:12:63:b0:c4:18:d2:81:a2:5b:ae:30:22:
         73:e2:e7:a9:f5:2a:b9:18:8b:15:ba:10:97:72:98:a3:e0:56:
         aa:18:79:27:30:32:bf:e0:0b:70:f1:11:02:36:d1:37:fc:8e:
         83:cf:b5:b6:e2:be:d8:84:0f:4c:b6:f7:66:27:b7:76:84:c2:
         4b:0b:3a:b1:69:ee:1d:64:c4:a9:9e:06:06:27:99:87:6a:35:
         79:9b:96:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:39 2024 by rpki-client on console-fra.rpki-client.org