Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/1ca84ad7-79ce-3b76-8faa-9891fde9301f.roa
File:                     1ca84ad7-79ce-3b76-8faa-9891fde9301f.roa (raw, json)
Hash identifier:          Gi6hZY05IYWrA2Ac4Eww5wydhp194EuUGVN8DVEj5a4=
Subject key identifier:   DD:7B:71:6E:AE:8B:A0:3E:49:36:D6:24:4D:1B:AE:63:81:A4:15:3A
Certificate issuer:       /CN=c9b2f783-ae49-438b-a994-34e0ab78157d
Certificate serial:       010D0C9F43285847B961788872913ED7C7A66280
Authority key identifier: 38:65:96:E0:5E:8A:27:9F:15:10:B0:A6:5E:25:73:F2:60:57:56:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/1ca84ad7-79ce-3b76-8faa-9891fde9301f.roa
Signing time:             Thu 31 Oct 2024 13:00:41 +0000
ROA not before:           Thu 31 Oct 2024 13:00:41 +0000
ROA not after:            Wed 29 Jan 2025 14:00:41 +0000
asID:                     16628
IP address blocks:        2602:ffbc::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/c9b2f783-ae49-438b-a994-34e0ab78157d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/c9b2f783-ae49-438b-a994-34e0ab78157d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:61:78:88:72:91:3e:d7:c7:a6:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b2f783-ae49-438b-a994-34e0ab78157d
        Validity
            Not Before: Oct 31 13:00:41 2024 GMT
            Not After : Jan 29 14:00:41 2025 GMT
        Subject: CN=c4b5aaa5-90c8-48f9-b091-54da0b1e3bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0b:70:aa:6e:25:f1:89:ec:a3:ef:50:07:ec:
                    26:7f:c0:13:4f:9a:5c:5c:3d:e1:2b:e1:82:05:28:
                    3f:e3:9e:2b:d7:69:3a:68:f3:da:54:7f:f2:52:10:
                    7a:67:b1:5a:06:7d:f7:d8:7b:c8:af:16:b8:54:75:
                    cf:35:59:6e:a1:6b:da:b4:d8:6a:4a:4f:ed:7a:35:
                    c5:23:90:fc:49:34:b1:19:8e:77:ea:ed:3b:0d:31:
                    aa:34:21:d6:c1:0a:51:26:3a:6b:14:3d:3c:50:92:
                    fe:bf:f9:51:b7:8e:57:22:59:7d:52:f8:16:bc:23:
                    ab:b8:53:f3:91:52:be:7d:bd:4e:82:07:94:73:5e:
                    51:b2:ff:46:16:65:6d:78:a9:a8:07:ea:00:77:77:
                    84:7c:6c:1e:ce:5f:88:e1:e2:ba:fe:15:69:ed:6f:
                    33:4c:a7:ae:41:de:e9:a1:e0:a1:f0:84:2b:f2:89:
                    22:3e:b1:37:eb:7d:69:b8:f5:e9:79:ec:6b:de:75:
                    f0:56:ad:f7:00:a2:41:49:03:f9:dd:9f:60:a9:82:
                    ff:e2:98:ba:41:89:20:21:fd:84:c6:e8:b5:97:ab:
                    00:c8:14:66:e6:ea:7e:15:e3:47:76:b2:0f:af:a5:
                    b2:0c:f0:39:99:69:53:fb:17:ea:a3:77:4a:ca:1f:
                    72:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:7B:71:6E:AE:8B:A0:3E:49:36:D6:24:4D:1B:AE:63:81:A4:15:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/1ca84ad7-79ce-3b76-8faa-9891fde9301f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/c9b2f783-ae49-438b-a994-34e0ab78157d.crl

            X509v3 Authority Key Identifier:
                keyid:38:65:96:E0:5E:8A:27:9F:15:10:B0:A6:5E:25:73:F2:60:57:56:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffbc::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:ed:66:43:94:93:79:7a:6a:3a:b2:8f:59:52:5c:d3:d9:50:
         50:0a:1b:2e:98:dd:ba:ce:15:31:2e:0d:00:b5:29:e9:89:48:
         d2:fb:6d:86:61:9d:c5:5e:85:a5:6e:1d:89:67:6b:f6:ad:28:
         dc:fe:f0:6b:d0:67:fb:9c:d6:4d:70:de:83:6c:30:b9:64:a0:
         85:05:39:6d:87:6a:32:f7:30:a9:98:d1:3a:8e:01:8f:16:0c:
         d9:73:61:21:4d:a3:6d:ca:2d:65:41:90:f9:90:bb:d9:8e:71:
         67:48:d6:e5:95:49:6c:5a:a9:3a:1c:67:d1:88:00:56:a0:8e:
         8f:9e:4a:33:63:14:15:88:7b:1a:00:5b:a0:29:6d:6c:40:ca:
         cd:81:6e:d5:a6:f1:2a:58:ba:9c:75:2f:79:58:36:b4:89:bd:
         28:46:d0:ef:f1:99:6c:c0:8e:55:70:a3:95:8b:49:a7:1e:f8:
         a6:41:8f:ce:5e:ba:14:b1:6c:a6:0c:23:50:09:38:1e:84:45:
         10:88:d8:b9:fd:ac:ec:3f:82:bc:90:6f:fc:7e:aa:e9:dd:e5:
         c8:80:77:0d:b8:1d:b7:07:ad:60:a6:f5:d1:6b:83:02:df:ce:
         87:e9:99:e9:fd:3c:40:6b:1b:0f:4a:7b:7c:ec:40:06:04:d9:
         27:a9:42:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:56 2024 by rpki-client on console-fra.rpki-client.org