Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/cbb798b5-f008-3eba-a520-295a66a84610.roa
File:                     cbb798b5-f008-3eba-a520-295a66a84610.roa (raw, json)
Hash identifier:          pPsrPFIB9Vzl1fO9nGr1U5bk7hXom2jE5IxIWOcq8tw=
Subject key identifier:   16:19:46:16:84:13:61:4B:64:66:E8:EC:52:45:97:B0:CE:71:60:C0
Certificate issuer:       /CN=5541e022-414f-45f5-9426-a7643db1ec8d
Certificate serial:       010D0C9F43285847B3CC15FADD4A7C9049AFFB00
Authority key identifier: F5:72:66:9B:FA:2B:D5:E4:58:2E:1F:EA:1A:CA:67:24:96:6B:3F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/cbb798b5-f008-3eba-a520-295a66a84610.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     149020
IP address blocks:        2602:fa08:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:15:fa:dd:4a:7c:90:49:af:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5541e022-414f-45f5-9426-a7643db1ec8d
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=9268a11a-f849-4312-8b33-da219a721f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7d:c1:49:74:34:8f:f2:68:5a:3b:54:b2:21:
                    9b:d8:7f:75:27:38:46:e4:48:92:82:ef:c6:73:3c:
                    a9:5f:72:ec:cf:5e:a1:b4:4b:98:b4:75:50:af:e4:
                    dc:b1:e5:52:2a:7d:ab:1d:f4:fc:31:aa:d0:d2:cf:
                    02:e7:d3:91:93:98:64:21:86:6e:8d:cc:07:0c:23:
                    32:83:74:79:83:7e:61:bd:9b:33:80:3c:38:1b:35:
                    ed:78:3d:d6:ef:79:04:ab:dd:a7:17:8c:be:66:47:
                    fe:9f:18:e3:38:08:bd:67:d9:0d:6c:e9:be:2e:63:
                    f0:8f:4a:63:37:ed:30:6e:fc:98:ab:b1:f0:22:59:
                    c8:a3:d0:84:ba:36:f1:d7:9d:23:c7:9b:3f:3f:ee:
                    61:91:d8:e6:67:da:df:01:19:46:7c:f9:2f:69:cd:
                    f0:9e:7c:8a:6d:d7:41:4b:4e:b7:ac:bf:31:cb:63:
                    56:ff:e3:d0:be:dd:8b:a8:97:47:93:d9:fa:51:3a:
                    fe:9d:8f:5f:42:16:7b:49:6b:15:57:56:24:a0:62:
                    14:34:12:e0:cb:c3:76:bb:5a:66:65:a0:90:7f:aa:
                    02:e6:5f:35:b7:11:f0:cf:6e:0c:00:e7:ec:b6:18:
                    e0:43:66:cd:f5:cc:03:0f:7a:24:d4:5e:bd:8d:66:
                    cd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:19:46:16:84:13:61:4B:64:66:E8:EC:52:45:97:B0:CE:71:60:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/cbb798b5-f008-3eba-a520-295a66a84610.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.crl

            X509v3 Authority Key Identifier:
                keyid:F5:72:66:9B:FA:2B:D5:E4:58:2E:1F:EA:1A:CA:67:24:96:6B:3F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa08:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:bb:25:21:26:3e:ea:9f:4a:7a:52:d8:0c:cc:f8:e2:02:0b:
         ea:0a:84:24:48:f3:89:f3:b7:97:9e:ac:16:64:f7:6a:ca:54:
         06:f2:60:d1:7d:f2:d7:4e:cd:25:60:4a:59:18:48:1f:a1:0b:
         36:3f:b7:dd:e0:35:12:b9:38:ef:e4:d5:97:73:24:5d:1c:84:
         5a:23:d5:3b:0d:61:dd:68:d8:8a:6e:55:ad:6c:eb:a5:31:13:
         13:be:56:c4:c6:0e:c0:ba:c6:7a:54:8c:bc:8b:15:6b:20:2f:
         7c:24:9c:0c:cd:9a:c3:41:89:1f:24:3b:26:3d:78:00:1b:df:
         a6:7e:cc:07:17:46:f4:28:2a:15:43:a2:ba:42:ec:74:54:bf:
         0a:14:f6:df:59:4d:bb:2e:91:ac:0b:47:82:33:38:b2:8c:a4:
         c9:fe:7d:4a:df:50:13:b2:d5:a1:b3:75:ac:4a:6a:b1:4e:f7:
         65:61:0b:fc:b2:bc:1a:03:c9:fc:40:30:e0:a7:c6:b3:c3:f7:
         91:72:ef:9d:ce:a4:dd:7a:83:24:e9:18:3e:9a:42:e8:7e:c5:
         e8:2a:04:ac:04:f7:a9:62:5b:93:fb:6e:dd:6a:25:4f:fe:e4:
         89:6c:33:85:06:85:84:3d:0c:b9:97:a0:9c:4d:49:88:dd:37:
         e3:3e:9c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:27:11 2024 by rpki-client on console-ams.rpki-client.org