Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/28ef451c-529a-3b07-b5b7-3615896ec10c.roa
File:                     28ef451c-529a-3b07-b5b7-3615896ec10c.roa (raw, json)
Hash identifier:          whMRGmDeiodMkr9TUvQXpTV46rZvCcoCvn2Gx0Wv8n0=
Subject key identifier:   82:02:C0:B3:2F:1E:03:46:FC:53:9D:0C:62:55:07:C7:9B:58:FF:B2
Certificate issuer:       /CN=007561fe-4b04-417a-b423-349b8b4b047d
Certificate serial:       010D0C9F4328584722D6BFE679A64864DA486300
Authority key identifier: 6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/28ef451c-529a-3b07-b5b7-3615896ec10c.roa
Signing time:             Sat 07 Sep 2024 14:50:08 +0000
ROA not before:           Sat 07 Sep 2024 14:50:08 +0000
ROA not after:            Fri 06 Dec 2024 15:50:08 +0000
asID:                     19651
IP address blocks:        2602:f9ec:134::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:d6:bf:e6:79:a6:48:64:da:48:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007561fe-4b04-417a-b423-349b8b4b047d
        Validity
            Not Before: Sep  7 14:50:08 2024 GMT
            Not After : Dec  6 15:50:08 2024 GMT
        Subject: CN=ad74f806-a372-468d-aee3-a70d0224b84b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0a:40:9a:c0:c5:6e:10:4f:18:81:86:73:3c:
                    0f:36:db:54:db:39:47:d8:b4:4a:86:af:92:39:df:
                    e8:bd:80:e7:c4:19:ff:09:e7:ec:66:c4:d9:ae:59:
                    2a:37:4b:1d:f2:27:f6:96:5b:14:76:c0:32:9a:e9:
                    09:a1:e3:da:fc:b5:aa:14:c0:3e:98:48:dd:df:6f:
                    91:29:b6:38:0b:56:8c:1a:32:c7:ad:cb:93:f3:e3:
                    da:94:ba:88:8b:e2:ab:6b:e5:83:3b:a5:9f:98:5e:
                    d5:eb:2d:13:67:2f:b2:1f:6b:7d:ea:81:21:a1:4d:
                    83:80:f1:aa:1e:9d:9d:dd:d1:d6:f0:6e:52:89:52:
                    db:dc:5b:ee:5b:33:f5:54:c5:54:42:50:22:c7:3a:
                    c2:f0:0a:3b:5c:cd:b2:47:63:8f:69:18:7f:06:8e:
                    8e:5f:cf:3e:0b:f1:37:5e:e8:c3:c0:80:70:b1:13:
                    1d:0f:b7:44:eb:54:6f:09:7c:dd:f4:e9:05:52:c1:
                    1a:73:eb:f2:ab:fc:de:62:a4:0c:d7:20:0f:e7:cc:
                    02:48:db:b5:25:46:ea:a3:41:08:09:43:ca:13:5a:
                    50:95:ac:81:13:f0:9d:3c:15:d4:5d:06:64:11:cf:
                    cf:8f:85:f5:d9:57:01:56:4f:d6:da:4b:c3:d4:b1:
                    e0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:02:C0:B3:2F:1E:03:46:FC:53:9D:0C:62:55:07:C7:9B:58:FF:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/28ef451c-529a-3b07-b5b7-3615896ec10c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ec:134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:12:aa:c3:d5:d2:bb:ad:c4:ec:27:db:f3:4f:51:96:59:05:
         9c:e4:45:e8:01:64:ce:02:f9:ff:5f:76:01:85:3e:ed:e8:ad:
         e2:a5:20:c1:dd:48:54:17:35:4a:70:78:47:30:43:50:b2:f7:
         2c:c1:44:d7:79:1a:c1:a3:5c:0a:78:4a:b7:9f:5a:85:87:f4:
         ce:3a:37:ef:4a:17:f1:e6:f7:cf:94:93:e8:98:f2:86:72:87:
         de:1a:24:fd:fb:c2:67:4b:cd:3c:44:c0:2f:23:d4:0f:e4:c7:
         c0:ea:b8:36:ec:9a:78:33:a5:62:16:2d:9b:92:2b:47:b3:bc:
         bf:a6:ef:88:83:9a:f4:c3:48:ba:48:45:25:16:77:7b:0f:d8:
         57:e6:fe:b2:98:2f:f5:f5:86:d3:ad:21:70:6c:5a:9e:39:93:
         7d:c6:ae:76:7d:ee:da:78:a8:6e:ce:98:71:06:8a:44:55:92:
         43:13:ec:63:61:d0:97:24:e3:2f:fc:e7:c1:dd:a5:b4:83:3d:
         f7:df:f6:21:1c:0c:77:07:f9:b4:57:58:23:ab:db:9a:50:54:
         89:dd:18:65:d1:24:fc:42:e4:01:b4:b2:86:4a:51:e6:7c:11:
         ab:86:15:c9:96:69:10:39:5e:be:98:6f:c7:02:71:02:db:1d:
         a8:9f:ea:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:38:05 2024 by rpki-client on console-ams.rpki-client.org