Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22/f5410f09-d2c6-34c8-bf69-b6d91440538b.roa
File:                     f5410f09-d2c6-34c8-bf69-b6d91440538b.roa (raw, json)
Hash identifier:          PTf7e4mrLGyLzZG5wjS7EHUptCZyXBX0ODyAZ6meUaw=
Subject key identifier:   1E:EC:D5:E7:5E:0F:45:39:B1:B5:61:25:9B:02:D1:39:D7:6A:86:C1
Certificate issuer:       /CN=cbb9348f-0e74-4fb3-9ea9-84626962cb22
Certificate serial:       010D0C9F432858473095FEA2402163FAB8E64C80
Authority key identifier: 44:2F:BF:B1:80:1F:E6:EB:A4:8F:A7:37:42:BA:68:31:1F:3B:47:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22/f5410f09-d2c6-34c8-bf69-b6d91440538b.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     53763
IP address blocks:        2602:f9f7::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22/cbb9348f-0e74-4fb3-9ea9-84626962cb22.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22/cbb9348f-0e74-4fb3-9ea9-84626962cb22.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:fe:a2:40:21:63:fa:b8:e6:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbb9348f-0e74-4fb3-9ea9-84626962cb22
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=a96183f2-4a39-4e3e-94e4-fa77247a8374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:56:2f:1e:37:52:8e:0a:63:65:d2:1b:b4:42:
                    39:9b:d0:cf:e2:25:11:49:a6:c9:25:85:56:84:a0:
                    c0:9d:65:26:e6:15:4a:01:3a:84:94:ea:cb:c3:12:
                    91:ee:3a:a9:40:85:33:a0:6f:84:3c:90:00:41:de:
                    8a:a4:16:6b:07:ea:9c:ed:6b:b2:57:b8:1a:28:8c:
                    35:94:c0:04:91:2a:11:de:94:8b:ef:c8:66:b8:05:
                    d2:0f:7e:9d:3e:12:13:aa:87:7f:a5:7a:5e:4a:4e:
                    03:5a:0f:b6:fd:61:f7:e3:2f:fd:6d:e9:96:c0:9c:
                    32:86:40:f7:71:12:bb:b0:61:27:77:0c:15:63:0e:
                    26:ac:32:e6:4a:d8:85:e2:76:15:a6:6b:52:fc:63:
                    3e:c9:38:fe:c1:5f:14:7d:22:dd:85:c7:18:75:63:
                    ee:d8:34:d9:f3:31:6e:a5:7c:36:a3:7f:77:89:99:
                    a4:2f:4b:fc:3b:ef:7d:8d:85:fe:ff:0c:dc:50:6d:
                    e9:12:ff:fb:c8:ed:48:16:99:f3:6b:a8:44:30:2c:
                    f9:66:a1:89:0c:b2:25:91:dd:0f:48:f6:3b:07:8b:
                    7f:dc:19:12:55:1e:45:e6:77:5c:69:e7:fb:42:60:
                    9f:5e:92:e5:6a:b9:0c:ea:c4:2d:8b:6d:d1:0b:53:
                    9d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:EC:D5:E7:5E:0F:45:39:B1:B5:61:25:9B:02:D1:39:D7:6A:86:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22/f5410f09-d2c6-34c8-bf69-b6d91440538b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22/cbb9348f-0e74-4fb3-9ea9-84626962cb22.crl

            X509v3 Authority Key Identifier:
                keyid:44:2F:BF:B1:80:1F:E6:EB:A4:8F:A7:37:42:BA:68:31:1F:3B:47:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f7::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:29:07:58:5b:eb:12:f7:96:30:38:b7:05:45:0d:02:5b:b4:
         29:4b:bf:99:60:76:c2:b3:52:a1:cf:e7:9b:ca:17:30:7a:8c:
         33:6b:8a:0f:1a:41:29:09:c8:e9:7e:34:46:35:c1:3b:97:a3:
         0d:80:46:3d:12:47:bd:79:91:49:02:8c:60:36:a9:16:f7:5b:
         d1:f9:9b:40:0c:f9:11:46:39:1a:21:c4:85:b3:05:f0:27:b6:
         21:1f:de:81:a8:4b:ae:68:eb:d2:c3:99:ad:23:aa:99:2c:cb:
         2a:3f:7c:a6:03:23:00:82:59:1f:76:88:f2:43:c5:43:e7:0f:
         54:ca:fd:4d:ce:3f:6a:40:40:bb:08:d3:59:1d:98:2b:e3:14:
         16:09:05:08:c4:97:49:59:5e:23:96:26:ca:15:93:78:9d:ce:
         33:f2:48:c1:b9:a8:7b:da:c1:2c:43:67:68:cb:ba:84:99:9b:
         03:2e:8b:e2:d6:21:6b:ec:97:69:a3:31:b2:eb:55:e8:4a:6f:
         1e:52:91:b0:93:be:f6:ca:3c:84:19:b1:fe:ab:de:9e:a2:dd:
         83:ec:8c:7d:de:cf:63:23:31:01:4f:0b:ab:2a:dc:10:18:b0:
         85:e8:cb:26:1d:09:01:c2:12:33:7d:2a:16:4d:99:45:30:4e:
         b6:13:db:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:44 2024 by rpki-client on console-fra.rpki-client.org