Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/c925892a-4d1f-31f7-bee4-e57cc123193c.roa
File:                     c925892a-4d1f-31f7-bee4-e57cc123193c.roa (raw, json)
Hash identifier:          wfx7SloaYTSuy3FUpji6plF1P8B77PREtH7fVbw+qPA=
Subject key identifier:   08:A0:7A:C3:C5:35:20:CE:7E:51:C3:04:06:7B:11:C2:68:19:2D:88
Certificate issuer:       /CN=07cb17d4-9502-4d38-b51a-02ae7bf3137b
Certificate serial:       010D0C9F4328584793B117237198E04A0F37A4E0
Authority key identifier: C0:7D:F3:29:1A:91:8D:CD:FA:37:63:19:EE:28:22:CE:B5:88:34:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/c925892a-4d1f-31f7-bee4-e57cc123193c.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     14618
IP address blocks:        2602:fc8b:aa::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/07cb17d4-9502-4d38-b51a-02ae7bf3137b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/07cb17d4-9502-4d38-b51a-02ae7bf3137b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:17:23:71:98:e0:4a:0f:37:a4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07cb17d4-9502-4d38-b51a-02ae7bf3137b
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=ba5da6c3-8135-47a2-87e8-ea72f9f5ce90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:78:92:0e:8c:2f:e9:14:f0:7f:a3:95:1c:30:
                    4f:6a:f0:ef:5b:48:e6:73:69:4f:b9:e1:f1:cd:d2:
                    46:cd:01:b9:bc:61:6b:6b:46:d6:f7:fc:71:e6:a7:
                    eb:28:81:40:df:04:ea:84:22:f8:92:36:bd:81:2a:
                    ce:bc:ae:40:0a:f9:9e:c2:13:99:ac:89:41:c3:91:
                    b6:47:9f:52:1d:c5:3f:15:48:e6:91:ac:d6:4a:8c:
                    6b:d1:24:0a:26:18:f9:57:3c:bf:0c:19:65:12:d4:
                    24:70:c1:75:48:32:17:05:de:42:5a:90:79:01:4f:
                    b8:90:fa:83:38:a0:08:8f:25:fd:b0:0d:a4:89:32:
                    e9:d1:55:dd:81:3c:5e:3c:f4:9d:6b:5d:51:12:8e:
                    3b:95:c1:a5:0c:d3:2a:75:7e:19:46:d8:4e:bb:00:
                    d8:89:27:43:95:21:cf:28:0b:04:e9:9a:61:ce:12:
                    24:fd:04:a8:9a:3d:88:13:0d:59:d0:ed:3f:50:97:
                    bf:c0:32:f1:88:a0:42:56:91:f5:50:a5:69:d6:5b:
                    5d:6b:4f:ff:6c:89:d7:8b:bf:a9:2a:bf:f7:68:90:
                    ee:85:cc:a9:56:7d:f6:5c:11:41:cc:b9:fe:92:2b:
                    30:ee:c0:86:35:fd:44:dc:d6:e8:c1:95:97:84:cd:
                    50:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A0:7A:C3:C5:35:20:CE:7E:51:C3:04:06:7B:11:C2:68:19:2D:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/c925892a-4d1f-31f7-bee4-e57cc123193c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/07cb17d4-9502-4d38-b51a-02ae7bf3137b.crl

            X509v3 Authority Key Identifier:
                keyid:C0:7D:F3:29:1A:91:8D:CD:FA:37:63:19:EE:28:22:CE:B5:88:34:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc8b:aa::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:fe:e7:4e:32:74:17:f1:6f:b7:33:6d:36:01:8f:5d:cc:05:
         f9:85:a8:b7:2c:07:92:29:82:c0:bd:9b:e3:ff:38:7d:ad:5b:
         08:5b:a3:0f:b0:43:e4:6e:d2:a8:9e:13:31:08:4b:af:86:6d:
         1f:25:35:09:56:c3:5c:60:36:5b:5f:78:59:c5:c3:02:b5:2a:
         4c:42:53:6c:32:cc:fc:d4:51:a0:d4:ca:8e:bf:ae:33:32:37:
         78:7e:02:e1:37:9f:e0:bb:17:bc:8f:f4:61:29:d9:28:99:d3:
         1c:32:27:04:99:39:a8:30:f4:68:65:fd:81:36:8d:8c:01:f6:
         6a:fe:24:8f:65:4b:de:73:ca:c6:f6:ae:39:06:87:8e:e9:7c:
         20:e3:6b:44:ea:94:68:ec:e8:ab:c3:0e:29:61:7c:83:07:f1:
         c2:bb:f1:dd:15:ec:01:df:6f:ad:1f:4b:e2:a4:a4:46:0a:a7:
         35:87:68:09:0b:2a:97:26:c4:57:0a:46:2b:c9:62:aa:48:3b:
         a6:60:75:7a:02:6c:2d:11:c7:0a:bb:38:fa:f8:94:1d:03:28:
         5c:0e:71:e6:ef:4d:ef:ed:ea:01:5a:06:34:5c:86:d7:bd:30:
         0a:ab:96:57:56:27:f5:ad:4a:42:97:cb:fe:07:79:e8:17:4f:
         4d:97:c4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:44 2024 by rpki-client on console-fra.rpki-client.org