Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/2e7fedc6-4231-3453-9c5a-bd24e5304959.roa
File:                     2e7fedc6-4231-3453-9c5a-bd24e5304959.roa (raw, json)
Hash identifier:          PBNdz0DIRfTLl5bykTu1/xlUFJE1QBsJwdKgwxBJ4oo=
Subject key identifier:   EA:BB:1A:9A:82:A8:31:7B:73:BA:FF:A6:C7:DE:82:22:08:7C:17:F9
Certificate issuer:       /CN=7a2be303-4525-4433-b220-b1c6b5052945
Certificate serial:       010D0C9F432858474B1B525D767634EEF9082E18
Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/2e7fedc6-4231-3453-9c5a-bd24e5304959.roa
Signing time:             Sun 22 Sep 2024 01:00:32 +0000
ROA not before:           Sun 22 Sep 2024 01:00:32 +0000
ROA not after:            Sat 21 Dec 2024 02:00:32 +0000
asID:                     64269
IP address blocks:        2604:28c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4b:1b:52:5d:76:76:34:ee:f9:08:2e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945
        Validity
            Not Before: Sep 22 01:00:32 2024 GMT
            Not After : Dec 21 02:00:32 2024 GMT
        Subject: CN=8550ef96-5891-4dee-916e-be75f35f1fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:88:33:15:b7:1e:59:14:a3:46:f7:98:4a:48:
                    7d:10:39:4a:ec:00:2a:88:15:e7:54:1c:db:b9:0c:
                    2e:0e:66:12:16:38:37:62:01:2d:3c:6b:5e:35:fe:
                    a4:59:66:64:51:22:ba:3e:f4:4e:a2:1b:6d:5a:cd:
                    7e:e8:2a:44:4c:9d:e7:4d:17:79:af:70:3c:7e:fc:
                    39:28:11:97:5c:8d:df:70:bf:c8:4a:21:70:7d:c5:
                    7d:a8:04:21:e2:18:1c:cb:c3:ef:14:e4:cd:4d:b8:
                    07:0d:2a:90:fd:56:ad:2e:ba:e0:4e:94:f7:e3:8c:
                    e2:d5:2e:fe:44:5b:2e:34:78:47:e7:d1:6c:19:6b:
                    a7:c0:43:3d:54:f2:7f:07:55:a2:15:b0:f5:ae:61:
                    1a:18:e6:bb:da:b0:22:38:ad:02:ac:c8:6a:79:34:
                    37:52:62:b1:66:d8:d2:50:dd:0e:a9:b7:f2:de:fe:
                    f5:45:77:ab:b6:4c:a7:a6:7d:87:3e:90:0b:4d:5b:
                    f6:14:23:ef:57:49:36:16:9d:6d:41:5d:5f:15:3e:
                    b0:1e:8d:c9:f5:22:bd:a4:0f:bc:12:ff:76:67:81:
                    87:58:44:0a:ac:a8:33:b6:46:3c:d0:d6:a2:8e:0d:
                    f3:22:6e:9f:d4:cf:c8:e6:cc:42:bc:f3:cb:27:a7:
                    cf:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:BB:1A:9A:82:A8:31:7B:73:BA:FF:A6:C7:DE:82:22:08:7C:17:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/2e7fedc6-4231-3453-9c5a-bd24e5304959.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl

            X509v3 Authority Key Identifier:
                keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:28c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:d0:3b:b6:25:1d:bd:70:5d:bf:44:7e:69:5b:2d:70:58:0f:
         8a:bc:0f:70:6f:e9:9e:d3:61:09:01:a9:cf:bc:44:4c:84:00:
         a0:30:ab:45:8b:08:29:44:5e:92:04:86:d7:53:25:ac:ed:e8:
         21:d3:08:27:dc:d6:32:74:ee:1e:80:04:e4:0d:2b:fc:4d:b2:
         01:e4:79:9e:94:fe:f4:e5:f2:df:6d:9c:4a:36:2d:41:fd:39:
         45:14:c4:ef:22:4a:5c:49:11:c3:c7:33:75:ad:18:f6:ff:32:
         94:7a:c3:0f:a3:a5:21:29:a1:72:c6:06:86:d9:34:1b:3b:9b:
         7e:6d:ba:7e:15:e2:9b:52:3f:b5:4b:f1:1f:46:2b:68:39:23:
         af:b0:27:d6:b8:a1:c3:e7:8d:0f:92:65:f9:d0:7a:9f:e8:66:
         0b:9c:a0:0c:08:36:f6:af:60:d9:77:5e:58:f8:9a:e8:26:20:
         f7:59:2a:95:24:12:4b:b8:18:fe:a9:08:29:99:6f:9b:d2:53:
         30:26:f2:d0:bd:31:34:b3:0d:a1:11:98:37:61:f3:23:69:98:
         15:8c:1f:65:57:45:6e:27:71:4b:ff:57:3d:d2:6a:b8:82:6c:
         46:9f:64:f7:36:6e:e4:45:4b:a3:d7:bc:77:c1:f0:4c:2c:eb:
         11:68:de:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:50 2024 by rpki-client on console-ams.rpki-client.org