Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/cbb798b5-f008-3eba-a520-295a66a84610.roa
File:                     cbb798b5-f008-3eba-a520-295a66a84610.roa (raw, json)
Hash identifier:          mTFkt+OrXKXzu4HiXwEG/4fQvNxmZPFanO2XO6y1I2c=
Subject key identifier:   5C:C9:76:26:39:5D:53:76:33:B0:70:71:72:98:3D:2A:E8:F7:5B:B1
Certificate issuer:       /CN=5541e022-414f-45f5-9426-a7643db1ec8d
Certificate serial:       010D0C9F43285846D47561189801AA46B9FA1830
Authority key identifier: F5:72:66:9B:FA:2B:D5:E4:58:2E:1F:EA:1A:CA:67:24:96:6B:3F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/cbb798b5-f008-3eba-a520-295a66a84610.roa
Signing time:             Sat 10 Aug 2024 13:00:39 +0000
ROA not before:           Sat 10 Aug 2024 13:00:39 +0000
ROA not after:            Fri 08 Nov 2024 14:00:39 +0000
asID:                     149020
IP address blocks:        2602:fa08:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:d4:75:61:18:98:01:aa:46:b9:fa:18:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5541e022-414f-45f5-9426-a7643db1ec8d
        Validity
            Not Before: Aug 10 13:00:39 2024 GMT
            Not After : Nov  8 14:00:39 2024 GMT
        Subject: CN=b3c5335b-35e2-4b3b-a7b3-44945c4c8c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0c:24:f7:88:ed:95:ee:fe:3a:77:d1:4a:56:
                    cf:29:ee:7b:d0:6b:17:24:74:e7:54:e1:be:ad:20:
                    1a:82:81:43:3a:5f:65:70:f5:aa:73:05:db:01:c9:
                    00:78:00:0d:22:75:8e:04:d5:1e:a6:cb:4d:90:e6:
                    fb:94:b1:50:5c:81:2b:0e:9a:26:da:f2:b2:87:9f:
                    2b:cb:92:4f:1c:4a:35:55:f3:64:10:cb:e6:6a:40:
                    8d:02:25:dd:ce:8a:5f:50:15:97:79:4d:b4:f4:f7:
                    96:83:02:7a:54:2f:a5:f3:9a:72:a4:d3:c9:33:d6:
                    2d:95:6a:af:21:65:80:44:d3:1c:f9:9d:48:e3:79:
                    e9:7d:e4:a0:99:74:c1:53:ab:5c:1e:94:66:a8:2d:
                    b7:98:c1:b6:9f:bf:fb:94:ab:44:02:0a:10:2c:82:
                    e9:31:c7:50:d5:74:9f:97:99:cf:94:7b:ef:78:84:
                    ea:33:94:a4:45:76:c6:8b:52:e3:33:c4:5a:6e:cd:
                    53:cd:c4:de:0e:32:ad:0f:8c:17:d0:3d:d1:39:3c:
                    7c:56:0e:bb:47:55:c7:cd:04:79:0d:94:ba:f4:bd:
                    4b:2f:a4:8e:d7:98:1a:28:9f:67:f4:8f:cd:e2:ff:
                    05:34:a0:1e:5c:aa:10:b0:88:a8:7a:da:36:27:d2:
                    bb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C9:76:26:39:5D:53:76:33:B0:70:71:72:98:3D:2A:E8:F7:5B:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/cbb798b5-f008-3eba-a520-295a66a84610.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.crl

            X509v3 Authority Key Identifier:
                keyid:F5:72:66:9B:FA:2B:D5:E4:58:2E:1F:EA:1A:CA:67:24:96:6B:3F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa08:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:7b:5f:ed:45:2e:ce:34:ff:9f:01:60:fe:11:bb:9b:26:f8:
         95:30:d4:a0:93:50:72:c3:29:f6:f2:72:4d:e5:95:53:eb:88:
         65:0b:d3:dd:0c:6d:97:68:bb:9c:38:b4:66:02:ef:b3:82:fd:
         31:53:93:29:c9:55:8e:19:9a:c5:20:32:d6:3f:95:a2:dc:3c:
         a5:db:eb:e1:8b:a4:10:59:c7:04:92:d4:35:e1:d5:ed:53:69:
         89:00:5c:31:34:21:d5:fc:77:2d:51:f8:b5:8d:15:27:d5:4e:
         c7:0a:ed:33:4f:15:99:c0:4a:8c:2e:da:92:45:79:24:e6:ee:
         16:02:0a:ac:f4:d4:72:8b:ac:d0:0e:70:9e:39:4b:0d:b2:e7:
         8f:21:73:a4:7b:ce:40:d6:1a:a1:e0:c9:38:2f:b7:60:8b:a6:
         48:81:04:4d:fb:dd:46:f5:e3:6b:e8:8b:ed:51:ee:48:20:6f:
         51:3d:c8:f2:ba:41:68:b6:ec:a0:8c:2d:d7:03:ab:12:79:87:
         9d:0f:5f:de:15:ab:43:d2:c5:c4:6d:a6:76:fb:20:0b:1f:1a:
         ae:80:4e:e2:2d:1c:74:6d:22:1c:17:c0:29:e2:02:0c:ee:ab:
         f6:cc:6b:95:66:e3:a4:ab:1d:76:95:3c:57:1a:91:71:c3:91:
         81:1b:f9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 16:12:11 2024 by rpki-client on console-ams.rpki-client.org