Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/4570ad1f-c97b-3736-a481-a836efbbee20.roa
File:                     4570ad1f-c97b-3736-a481-a836efbbee20.roa (raw, json)
Hash identifier:          YQIU755Yc3OlxdrV8A+CiQYydTttciKhCxKpEwxGUFU=
Subject key identifier:   C8:3A:B3:6D:09:D5:82:A7:93:24:6D:E5:09:72:70:2B:75:29:32:CF
Certificate issuer:       /CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
Certificate serial:       010D0C9F4328584734C88084861604975D1AF0C0
Authority key identifier: A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/4570ad1f-c97b-3736-a481-a836efbbee20.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     48851
IP address blocks:        2602:fd59::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:80:84:86:16:04:97:5d:1a:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=c967bf65-f8af-4c21-bdb6-2efad4196aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:45:60:02:cb:6a:1c:58:da:6d:9c:a9:07:5d:
                    dc:9d:7c:01:a7:f3:cd:52:b8:a8:08:da:1e:38:04:
                    7f:18:7c:fa:f6:2d:12:f3:15:97:17:8c:0f:75:57:
                    27:56:74:bf:29:0f:c2:a3:b0:be:53:e7:8e:ba:6a:
                    5e:e5:cf:5a:f1:a1:51:3c:0b:85:10:e5:aa:2d:83:
                    98:bd:67:8b:09:75:83:2b:e1:0a:28:f4:5d:15:78:
                    38:25:22:cb:a0:68:47:d4:80:a7:66:bb:3c:24:83:
                    a4:dc:da:fd:ad:f2:fe:ac:18:52:13:74:52:c7:cf:
                    b8:72:86:16:2d:5f:41:4a:93:50:ce:25:86:ab:a3:
                    a1:72:89:54:b7:92:45:de:7f:18:77:ff:bd:9a:8d:
                    4f:e0:ae:45:b5:ee:17:2a:86:7f:e8:3a:63:73:15:
                    77:4f:24:8a:20:6a:b0:6b:87:10:3b:d9:85:48:13:
                    4b:83:a5:77:cf:03:4f:d0:99:fb:ee:4a:26:af:f1:
                    10:fc:e0:0c:e7:38:33:42:5f:c1:60:30:63:86:5d:
                    55:e5:cf:5f:1b:5c:3a:85:a8:0a:66:be:6d:59:6a:
                    80:b9:92:7e:13:d1:93:c0:61:3d:8c:80:59:ae:92:
                    be:30:93:9d:52:b1:1a:49:2f:b8:a0:c6:d8:a7:61:
                    50:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3A:B3:6D:09:D5:82:A7:93:24:6D:E5:09:72:70:2B:75:29:32:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/4570ad1f-c97b-3736-a481-a836efbbee20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl

            X509v3 Authority Key Identifier:
                keyid:A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd59::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:c1:6f:52:83:7f:d2:9a:45:fe:d9:ce:4e:24:6d:24:78:a2:
         c7:f0:18:65:29:9c:59:4b:e5:1b:66:ff:4e:4b:11:3f:d1:c5:
         3c:bd:f2:75:6f:c1:4e:ca:f9:cb:f7:0f:9f:94:c1:62:22:b0:
         04:fb:67:d2:e0:2d:2a:14:43:b2:a0:ce:f8:bd:1e:a8:86:14:
         23:1f:f6:62:87:10:c6:df:92:6d:e2:55:62:3c:ea:24:a7:99:
         ed:b2:64:f9:db:e2:f9:55:6b:39:69:08:f7:55:0f:9a:d8:ec:
         71:9c:f4:a5:63:52:2a:2a:bb:af:02:d9:8c:88:e7:c8:53:7e:
         b2:57:bd:c6:c0:84:04:3d:17:5b:5e:b0:66:b0:67:7a:29:eb:
         07:07:10:14:7a:cd:96:01:ad:db:fe:35:5b:4e:a7:34:ec:89:
         5f:1e:46:12:b5:5f:1e:81:dd:ba:34:40:49:2f:c0:8b:c1:f1:
         a2:9f:13:2d:ea:9f:94:37:b4:26:b5:27:57:56:c8:77:96:12:
         10:0c:fa:e1:76:f9:68:8e:76:10:08:13:f1:83:da:4f:1a:30:
         ee:b3:c6:7d:ee:66:e8:61:65:14:b4:c4:f9:ca:ab:9f:51:c1:
         c4:d6:e5:91:b7:d4:46:44:4e:16:4a:41:4f:7d:d8:c0:64:53:
         42:0e:51:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:28 2024 by rpki-client on console-fra.rpki-client.org