Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5d053f32-5485-34e5-9703-b389b2c5414d.roa
File:                     5d053f32-5485-34e5-9703-b389b2c5414d.roa (raw, json)
Hash identifier:          pWF+lNWw3HNSlB794hA51HO17v2srjfMoqMr+zSmc7M=
Subject key identifier:   39:DE:15:79:26:49:81:96:26:AB:D9:AE:78:27:07:8D:BB:BF:94:0B
Certificate issuer:       /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Certificate serial:       010D0C9F4328584769D0E20BB132509AF87B7300
Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5d053f32-5485-34e5-9703-b389b2c5414d.roa
Signing time:             Thu 03 Oct 2024 01:00:31 +0000
ROA not before:           Thu 03 Oct 2024 01:00:31 +0000
ROA not after:            Wed 01 Jan 2025 02:00:31 +0000
asID:                     8987
IP address blocks:        2602:f9e7:26::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:d0:e2:0b:b1:32:50:9a:f8:7b:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
        Validity
            Not Before: Oct  3 01:00:31 2024 GMT
            Not After : Jan  1 02:00:31 2025 GMT
        Subject: CN=695a39c6-215b-4f84-b5cb-fe5f16106639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:97:c0:c0:db:91:ae:52:4e:65:c6:04:4c:1a:
                    3d:71:05:cd:7e:5b:f9:cc:90:a2:d6:67:95:b8:09:
                    43:78:33:e1:9e:7e:ac:60:d7:4e:85:f1:53:a7:f9:
                    93:ef:4f:7b:4e:3a:fb:c8:b1:27:b6:0d:22:0d:fc:
                    ae:30:c6:07:86:c6:ee:4f:a6:f7:7c:86:e1:a8:59:
                    de:47:79:5e:9b:56:5b:8a:bb:31:ac:1a:93:0a:1a:
                    f3:4b:2b:19:95:23:4c:a7:41:cd:51:fd:0b:f8:4d:
                    67:c8:5f:d6:ee:19:dd:45:87:f0:f7:da:98:94:db:
                    e6:ed:d7:ef:a0:b5:7a:b9:e0:ee:9e:0c:c7:22:62:
                    8d:09:54:ff:10:59:0a:fc:9c:4b:d5:21:b0:e8:0d:
                    5d:0a:ed:ec:b0:a7:ef:d4:12:99:5c:84:73:44:70:
                    bc:38:e8:5f:81:f8:06:2b:95:87:d5:7a:b7:d0:88:
                    95:74:8c:09:f4:ce:02:9d:58:d4:f1:03:48:14:a9:
                    18:13:ce:8d:1e:21:e3:a4:de:f2:69:8b:ee:05:1e:
                    8b:53:11:fe:9a:2f:e7:b3:c0:9a:ff:1c:ae:7f:39:
                    e5:4b:85:5d:a4:a6:54:ee:bc:fe:fe:ba:48:78:e1:
                    e2:a4:fc:5b:74:c6:f4:50:5e:9f:6c:e2:82:7f:8a:
                    f0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:DE:15:79:26:49:81:96:26:AB:D9:AE:78:27:07:8D:BB:BF:94:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5d053f32-5485-34e5-9703-b389b2c5414d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl

            X509v3 Authority Key Identifier:
                keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9e7:26::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:9f:d7:b0:2f:68:e1:a6:87:8d:76:f3:d3:2a:d9:89:58:b9:
         8b:94:a1:af:7e:de:5f:57:d3:aa:4d:6c:a4:68:45:76:60:28:
         02:fa:9b:f8:f4:66:80:7a:e9:4b:6a:27:01:57:28:22:73:bf:
         e0:da:81:d8:b4:78:80:be:5a:5b:3d:1a:e2:92:a6:02:55:a5:
         d0:46:68:a4:5d:14:c0:e4:56:10:5e:61:57:f4:c2:3f:62:d3:
         50:e0:e4:58:ec:1e:67:4c:c7:a1:39:71:34:49:7d:92:7a:e4:
         27:9a:9e:8e:51:57:b3:21:a8:3d:3a:1c:16:5e:ea:bc:45:1e:
         44:4e:2c:d8:5a:db:ea:d3:5e:a1:d0:6a:9f:45:e8:71:d5:26:
         ae:3d:c1:36:e1:70:d8:7f:99:fb:1c:9b:9e:7d:37:60:59:dd:
         d1:fc:87:14:c6:0f:b9:06:2f:94:54:c9:a5:3c:b2:a7:53:42:
         db:22:a7:0a:f2:51:db:81:c6:11:ff:15:d0:38:19:9e:12:6e:
         f5:31:32:fb:61:4b:1a:26:40:21:ba:01:78:62:40:4b:0d:cd:
         e9:ca:e6:46:7a:16:68:ba:89:0a:54:e9:15:74:08:f2:f2:7d:
         bf:82:01:d2:55:cc:3a:c7:79:d5:99:32:63:37:a6:83:c9:b1:
         3c:f3:03:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:40 2024 by rpki-client on console-fra.rpki-client.org