Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/23fbc0e5-a66a-390c-ade4-63c07acf6025.roa
File:                     23fbc0e5-a66a-390c-ade4-63c07acf6025.roa (raw, json)
Hash identifier:          RHqyI6rE2hNaX6Iu46aMR4Zkt4DMz+urshfjMlpAZHM=
Subject key identifier:   CE:BB:22:B9:78:6F:81:F9:F1:8C:B5:14:CF:45:D0:33:6B:89:82:E6
Certificate issuer:       /CN=007561fe-4b04-417a-b423-349b8b4b047d
Certificate serial:       010D0C9F43285847CFD4AD53D56BC074D4132580
Authority key identifier: 6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/23fbc0e5-a66a-390c-ade4-63c07acf6025.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     19651
IP address blocks:        2602:f9ec:fad::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:ad:53:d5:6b:c0:74:d4:13:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007561fe-4b04-417a-b423-349b8b4b047d
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=bd5b9dcf-5cbb-4612-949c-b703be914a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:38:0a:eb:60:38:0f:6b:58:af:b6:79:8a:c5:
                    2d:80:b3:83:8a:4d:5c:5e:2b:59:09:9a:5f:0f:51:
                    11:3c:0f:b0:58:b1:8b:26:1c:73:c2:4e:d0:ec:67:
                    8a:a5:bd:a1:b2:37:ce:79:57:c0:be:98:8f:9b:94:
                    80:70:28:83:21:eb:d8:8b:76:89:a6:0c:8d:7e:a4:
                    75:ed:cd:63:40:36:49:7e:39:11:ec:53:c4:54:fb:
                    10:7d:65:45:e1:4e:bd:16:b7:3d:70:4f:3f:1b:d2:
                    79:c9:20:9a:c2:97:3b:9e:02:0c:99:b1:33:2b:fd:
                    c9:26:9f:a0:7e:02:b7:d2:f4:de:78:3a:b3:c6:40:
                    ac:9e:11:52:33:03:a2:56:d2:e2:95:d7:38:11:49:
                    ff:c2:ba:dd:f0:59:aa:a7:ff:d8:ed:f0:34:84:f0:
                    15:82:79:7f:ab:c3:e8:e1:eb:cd:a8:76:28:b6:e1:
                    79:51:84:da:4a:9b:2b:69:18:1d:6b:ee:39:c3:00:
                    63:50:36:77:a1:b3:65:11:13:1c:16:49:dd:02:ea:
                    26:b5:12:9d:c8:3c:c9:0e:32:28:db:63:d0:d4:b9:
                    a3:c4:24:e4:1c:93:4c:25:10:54:ae:b1:02:d1:0b:
                    c4:ba:47:9e:04:f9:ba:15:db:02:27:29:45:36:16:
                    a2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:BB:22:B9:78:6F:81:F9:F1:8C:B5:14:CF:45:D0:33:6B:89:82:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/23fbc0e5-a66a-390c-ade4-63c07acf6025.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ec:fad::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:73:ff:b1:df:cc:8f:cf:56:1b:19:f9:fe:fa:92:5f:6b:b1:
         72:a3:61:31:5a:37:67:a7:28:2b:58:a7:2b:16:3b:b4:13:ad:
         50:5a:ae:93:e8:c9:9e:a1:6d:b4:dc:e7:87:f5:28:84:43:b8:
         54:e9:2c:e6:56:6b:60:dd:76:22:a3:fc:e1:95:43:3c:a2:24:
         20:ce:5a:75:f6:6b:a2:93:00:b3:f8:9a:14:76:65:f3:25:76:
         54:aa:59:da:cb:d2:26:13:03:af:b0:21:50:9f:9b:42:e5:ab:
         1d:b3:c9:f0:91:09:4c:6b:e5:07:e3:20:b7:79:81:c4:2a:b8:
         80:44:94:3c:51:af:23:78:f6:e5:48:09:1e:a9:59:02:08:64:
         d0:5a:43:0f:b0:f7:58:78:d1:ea:83:17:2a:5a:05:84:b4:71:
         76:a5:ae:8c:14:92:9f:bc:10:20:4f:8e:b4:f7:a8:44:b8:e4:
         c4:fa:10:87:16:c2:29:80:44:51:ec:de:11:ce:9f:b9:7f:21:
         bf:0b:2c:f6:d6:67:ce:8f:cd:05:1e:38:2c:f1:1f:67:03:21:
         96:3d:4f:6e:44:fe:31:37:54:4b:cc:55:1b:83:34:b3:45:07:
         43:26:74:a4:2e:2f:81:08:28:f4:bb:67:89:dc:e7:9a:59:2e:
         e2:8b:f4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:38:05 2024 by rpki-client on console-ams.rpki-client.org