Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/52e1bd1c-544b-3a83-b8fa-98ab93b65f53.roa
File:                     52e1bd1c-544b-3a83-b8fa-98ab93b65f53.roa (raw, json)
Hash identifier:          abxEPtJA3MTFroQ8qaxqbnuF0UnC2D599bblKWZzGB4=
Subject key identifier:   88:27:EF:D1:7F:00:A3:51:21:A8:41:DD:1F:A8:25:DE:F5:A2:75:E3
Certificate issuer:       /CN=9ababe4f-43a3-4db9-8e35-b85a7e592168
Certificate serial:       010D0C9F4328584782F1011D5569BE818EC4F880
Authority key identifier: 23:5E:2D:51:36:B3:25:5E:9F:20:37:D6:36:11:40:2A:4A:0F:E4:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/52e1bd1c-544b-3a83-b8fa-98ab93b65f53.roa
Signing time:             Sat 12 Oct 2024 01:00:32 +0000
ROA not before:           Sat 12 Oct 2024 01:00:32 +0000
ROA not after:            Fri 10 Jan 2025 02:00:32 +0000
asID:                     26801
IP address blocks:        2602:fddd::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/9ababe4f-43a3-4db9-8e35-b85a7e592168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/9ababe4f-43a3-4db9-8e35-b85a7e592168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:82:f1:01:1d:55:69:be:81:8e:c4:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ababe4f-43a3-4db9-8e35-b85a7e592168
        Validity
            Not Before: Oct 12 01:00:32 2024 GMT
            Not After : Jan 10 02:00:32 2025 GMT
        Subject: CN=2037d7fd-1d44-45c4-b954-89477993af81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b7:68:de:70:76:06:90:95:d8:08:70:05:5a:
                    ca:a1:59:04:dc:36:d4:83:4f:6f:30:4b:33:b1:3a:
                    30:11:9f:1e:bc:4d:6c:0e:e9:d1:b3:29:fc:da:33:
                    74:33:30:6d:35:d1:5b:a6:9e:b6:9d:b9:8f:a6:0b:
                    c0:37:92:98:b4:41:81:b4:fb:13:cb:3a:d0:33:0f:
                    43:6b:4e:56:40:31:21:55:22:d5:4f:2f:06:1d:5d:
                    c6:19:76:d4:d9:04:54:9f:1d:07:47:3a:3a:44:6d:
                    7b:e0:35:b2:5c:f7:63:6b:be:36:fe:2d:bf:88:db:
                    04:34:27:06:9e:95:45:99:41:38:f3:10:67:c9:56:
                    09:0f:34:87:f9:6f:91:76:0f:5a:97:e1:62:f0:12:
                    b9:25:04:5e:95:7b:35:a1:a1:de:6a:af:c8:30:8f:
                    96:fb:69:32:6d:d1:32:8d:48:b7:36:2d:54:6c:ef:
                    59:d0:5e:85:01:cf:3b:7a:e2:77:01:f8:fd:01:65:
                    0c:4b:f2:dd:06:07:13:a6:c6:a8:b9:6d:6b:c7:55:
                    1c:6b:ac:fa:a3:cc:c6:f7:aa:cc:1f:7f:ec:c5:c5:
                    35:8a:aa:24:04:f5:e7:8d:45:9b:1f:b6:b9:95:8e:
                    e1:a2:84:94:9c:1b:45:7e:d1:69:d6:91:d9:77:62:
                    9f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:27:EF:D1:7F:00:A3:51:21:A8:41:DD:1F:A8:25:DE:F5:A2:75:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/52e1bd1c-544b-3a83-b8fa-98ab93b65f53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/9ababe4f-43a3-4db9-8e35-b85a7e592168.crl

            X509v3 Authority Key Identifier:
                keyid:23:5E:2D:51:36:B3:25:5E:9F:20:37:D6:36:11:40:2A:4A:0F:E4:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fddd::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:d2:5a:0e:c7:0d:a2:0c:ea:c1:21:c9:53:4a:01:8b:e7:a7:
         31:69:a0:d6:34:3b:9c:00:fa:83:b3:d6:07:71:60:bd:f8:ed:
         25:00:87:56:db:98:ff:14:40:f3:c6:bc:ff:64:46:cf:27:5a:
         d7:ef:64:b0:64:a0:c2:45:ae:40:a0:66:7a:9b:d4:c2:9f:d3:
         be:2d:83:34:e3:05:0d:c0:81:62:15:29:08:bb:c3:96:90:bd:
         45:01:94:78:3c:62:07:63:00:d6:e5:18:1e:41:b5:ca:88:2e:
         d8:3c:1e:d7:40:c8:57:a2:66:58:84:5d:33:0c:8a:a3:82:92:
         0c:17:68:e3:ae:08:28:e7:71:f1:05:96:15:17:cc:2f:40:25:
         a3:4d:87:66:13:e1:02:8f:88:42:8d:49:59:b5:bb:00:03:0d:
         cb:c2:18:50:71:fc:85:98:7e:f8:fd:ad:9b:eb:c8:b9:5e:03:
         9b:fc:bf:5d:7b:2f:b2:97:e8:1c:77:6d:be:42:a1:d3:ce:e9:
         82:d0:41:5c:ae:b7:dd:40:90:8c:aa:31:28:02:12:e2:6b:45:
         7b:fa:f4:6b:1a:00:03:c2:0a:a0:77:54:3d:a1:0d:69:3f:f0:
         9b:28:bb:63:e2:92:6a:4b:5a:00:e6:f2:cd:66:c3:fd:a6:69:
         65:9d:9b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:04 2024 by rpki-client on console-fra.rpki-client.org