Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/e5f6bf23-93c1-32ac-8db5-c571a06c7fea.roa
File:                     e5f6bf23-93c1-32ac-8db5-c571a06c7fea.roa (raw, json)
Hash identifier:          pUPBRg7WdoQQWX482MzdeFYSMMiNnKbwwJQdzURlwr0=
Subject key identifier:   2D:C2:9B:CB:95:64:22:BB:91:AB:8D:85:0B:57:14:C8:4B:AC:BC:24
Certificate issuer:       /CN=b12072dc-8b29-49de-800e-2439a1f4bf97
Certificate serial:       010D0C9F4328584776610964225EC08B11010C10
Authority key identifier: 6D:B1:33:B9:4A:B8:51:0A:7D:49:27:70:A4:61:57:7D:39:5A:F4:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/e5f6bf23-93c1-32ac-8db5-c571a06c7fea.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     399737
IP address blocks:        2602:f9dc::/40 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/b12072dc-8b29-49de-800e-2439a1f4bf97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/b12072dc-8b29-49de-800e-2439a1f4bf97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:61:09:64:22:5e:c0:8b:11:01:0c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b12072dc-8b29-49de-800e-2439a1f4bf97
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=8a8271d9-5994-4626-a458-67414eda4eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e5:2f:50:9d:14:11:9e:53:a7:2c:ed:d4:e9:
                    b2:72:28:a0:59:ec:cc:2f:4a:42:51:05:cf:7d:51:
                    22:83:71:00:f8:d3:7a:7c:d7:90:42:bd:46:16:b9:
                    d5:30:df:c1:1b:df:2e:29:ad:9f:b4:c7:9d:61:86:
                    4e:b3:24:58:e1:7a:25:ab:6e:cd:f8:75:77:43:08:
                    09:bb:81:fd:25:ea:a2:5f:71:9e:19:ef:a8:7d:5b:
                    02:19:e5:82:b9:4f:7c:cd:b9:8b:22:80:2d:c1:0d:
                    3a:14:4c:01:66:4f:02:b2:9c:0b:a2:1c:81:55:42:
                    b0:c4:87:7c:fc:63:9d:15:f6:25:75:7a:2a:d0:89:
                    2e:78:12:d6:ad:dd:73:87:0a:c7:b7:6b:0b:2b:35:
                    c9:49:48:ca:3a:f6:85:b1:ae:d4:9e:79:98:cd:41:
                    c4:49:9e:01:a0:30:13:62:d3:7b:07:64:ce:32:39:
                    bc:22:cf:de:49:6e:55:aa:9f:5e:9d:17:57:b7:a4:
                    89:ee:f3:06:7b:d5:26:a0:79:ee:94:16:21:7f:f3:
                    cb:58:73:a6:73:e0:2d:61:fb:70:6c:a4:ab:fa:96:
                    b5:e2:14:aa:e4:b5:ff:1a:1e:7d:33:ed:b0:ce:e3:
                    db:9f:0c:5a:fb:f3:45:7a:58:0e:55:08:0a:02:53:
                    d0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C2:9B:CB:95:64:22:BB:91:AB:8D:85:0B:57:14:C8:4B:AC:BC:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/e5f6bf23-93c1-32ac-8db5-c571a06c7fea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/b12072dc-8b29-49de-800e-2439a1f4bf97.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B1:33:B9:4A:B8:51:0A:7D:49:27:70:A4:61:57:7D:39:5A:F4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9dc::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:bd:9d:98:c4:98:ec:4b:04:76:e5:d0:fb:cc:b0:dc:82:1e:
         15:ce:4a:b7:b9:b9:dc:4b:1a:70:34:3e:a5:c1:c0:ea:9c:a4:
         7c:c1:2b:37:2c:4f:46:a0:61:48:a7:8c:11:40:07:49:27:b8:
         7c:51:07:72:3f:f2:09:74:46:23:8c:40:95:e9:98:81:2c:42:
         ba:4d:92:95:0b:14:5c:52:53:59:5c:21:f1:05:d3:58:04:aa:
         68:28:89:c1:a8:92:69:f4:48:d4:07:43:e5:97:72:1d:58:41:
         52:11:84:61:09:6d:7f:37:d2:97:d3:ef:72:14:91:ba:25:95:
         4c:e5:8d:60:3f:d0:88:8f:78:69:13:5d:c9:14:86:6c:9a:1e:
         a7:3f:49:a9:51:b3:ba:0b:64:98:20:a8:65:98:fa:2d:db:bf:
         7f:78:8d:96:a9:03:95:73:97:65:15:85:e0:16:dd:10:6c:d3:
         46:86:29:28:35:67:e5:33:b6:02:25:e9:3f:6d:b5:7e:b1:77:
         5a:15:7b:c9:ec:9f:d3:f2:4b:04:7e:f6:11:ef:d1:d4:7d:72:
         81:41:b1:c2:e1:57:fd:06:41:23:a1:db:c0:a9:80:45:ed:b5:
         67:9c:65:6e:32:64:cb:3f:6d:6c:ba:b0:89:d0:ba:18:73:fe:
         67:20:8a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:43 2024 by rpki-client on console-ams.rpki-client.org