Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/99072b6c-3150-3cc4-8cca-40f9b7524062.roa
File:                     99072b6c-3150-3cc4-8cca-40f9b7524062.roa (raw, json)
Hash identifier:          KkEaPrvxZQU5SZTRjJ1FqUBeoY18kH7Ef4Yg6qEtS94=
Subject key identifier:   DE:D2:1D:25:93:D8:8B:71:E1:D3:66:C8:EB:5E:84:5C:C0:BD:F1:E6
Certificate issuer:       /CN=cc9bfce1-5e74-4c92-954d-8728969d8835
Certificate serial:       010D0C9F43285847B9616AA55C57A2F6FBA53100
Authority key identifier: 59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/99072b6c-3150-3cc4-8cca-40f9b7524062.roa
Signing time:             Thu 31 Oct 2024 13:00:41 +0000
ROA not before:           Thu 31 Oct 2024 13:00:41 +0000
ROA not after:            Wed 29 Jan 2025 14:00:41 +0000
asID:                     51999
IP address blocks:        2602:fbe9::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:61:6a:a5:5c:57:a2:f6:fb:a5:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9bfce1-5e74-4c92-954d-8728969d8835
        Validity
            Not Before: Oct 31 13:00:41 2024 GMT
            Not After : Jan 29 14:00:41 2025 GMT
        Subject: CN=f9f5d864-45ca-487e-8c0c-43c86b1fe716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:01:b8:4b:d1:3b:aa:92:91:c4:91:db:f5:08:
                    e0:77:f7:62:f5:9a:2c:57:a3:28:33:9c:98:55:4d:
                    0f:72:fe:ed:6b:de:57:85:fa:bd:15:d6:14:fa:b7:
                    dc:9c:d8:9f:44:8f:22:72:f2:0e:c5:b5:e3:9e:44:
                    24:29:8e:f9:71:52:c8:10:6b:fc:85:1f:ff:de:e2:
                    11:27:9b:3d:4d:81:e6:79:62:aa:00:d7:26:0f:cb:
                    e3:59:9c:21:2d:bd:98:57:ac:f6:e2:03:a6:ef:5b:
                    a4:87:b2:79:b3:24:c8:73:fc:40:e5:c4:17:08:a7:
                    d9:c5:44:13:2b:5d:5c:6d:fb:69:a9:c5:00:9b:a6:
                    f8:22:5d:9d:cf:f3:6f:d0:9e:f6:26:95:c6:81:a0:
                    3f:87:8b:76:ba:83:9b:81:a3:05:82:60:33:0a:fa:
                    48:99:b2:e7:23:6b:37:e4:88:8b:59:6a:a4:61:c7:
                    76:8d:99:53:68:56:41:9b:aa:17:f0:7b:d5:17:51:
                    cb:6f:2c:cd:11:33:af:b9:34:8a:1c:fd:db:3a:f6:
                    bf:7d:81:20:3a:e2:8c:52:65:83:ac:30:b4:79:9a:
                    8b:71:50:87:d6:26:03:32:91:42:36:a9:26:65:8d:
                    c4:34:e5:76:47:48:95:e5:de:49:6a:32:42:90:8b:
                    27:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D2:1D:25:93:D8:8B:71:E1:D3:66:C8:EB:5E:84:5C:C0:BD:F1:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/99072b6c-3150-3cc4-8cca-40f9b7524062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.crl

            X509v3 Authority Key Identifier:
                keyid:59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbe9::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:ae:1d:a5:33:7d:59:99:7a:bb:9d:e3:d0:a2:e1:eb:a0:d6:
         d7:6d:db:3d:a5:21:ce:be:64:a4:dd:bb:32:b1:84:13:0a:8b:
         56:c5:52:74:54:f6:a1:83:f3:22:bd:69:ca:35:94:9d:d9:de:
         fb:a8:3d:75:ba:2e:e7:81:9a:6b:90:f2:c6:b2:8b:2f:a1:3b:
         7d:1c:f0:df:1f:38:5b:cc:aa:1b:53:fe:d6:b5:37:e0:0a:8b:
         e1:bc:6c:7b:35:9b:e4:b3:53:a9:50:d3:c0:e5:1d:c3:0c:44:
         36:23:f2:27:cd:86:90:a7:f2:70:f3:ca:20:d8:65:2b:1f:62:
         99:a8:21:66:73:1a:88:0b:8e:32:9d:1f:fd:57:d3:10:5f:c8:
         8a:83:86:eb:8b:04:92:68:8f:2c:df:78:cc:35:21:32:1a:e1:
         b4:53:7b:1c:2d:82:2f:e8:e2:86:fe:29:84:a0:b4:07:3c:ba:
         b9:8c:0d:e7:43:fc:05:e1:ee:e2:78:eb:5e:b8:07:63:a6:db:
         d2:a2:98:25:be:50:b1:72:db:7e:ec:b3:1f:88:80:9f:fd:6c:
         a3:ca:ae:b9:d0:59:92:39:10:34:65:b9:cf:3a:a4:94:6d:a9:
         04:4a:60:1f:7f:84:b1:48:84:9c:85:4c:b1:3a:26:43:15:66:
         a4:f4:fe:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:22 2024 by rpki-client on console-fra.rpki-client.org