Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/45a8c2e1-cfab-35fa-875c-15616e13c3d9.roa
File:                     45a8c2e1-cfab-35fa-875c-15616e13c3d9.roa (raw, json)
Hash identifier:          6k7JtnWsaxzy4MQ5mzfyO6kBkPp9hnQeZlMS0qslWkk=
Subject key identifier:   1B:02:F9:54:9C:B3:67:D7:27:51:50:56:DD:4F:1C:7B:5D:0F:0C:97
Certificate issuer:       /CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
Certificate serial:       010D0C9F43285847BC2C256B7274C5C8505AFF60
Authority key identifier: CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/45a8c2e1-cfab-35fa-875c-15616e13c3d9.roa
Signing time:             Fri 01 Nov 2024 13:00:41 +0000
ROA not before:           Fri 01 Nov 2024 13:00:41 +0000
ROA not after:            Thu 30 Jan 2025 14:00:41 +0000
asID:                     396908
IP address blocks:        2602:f956::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bc:2c:25:6b:72:74:c5:c8:50:5a:ff:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
        Validity
            Not Before: Nov  1 13:00:41 2024 GMT
            Not After : Jan 30 14:00:41 2025 GMT
        Subject: CN=fcf80ead-203c-424d-abf4-198a1588a1e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:22:52:de:e4:a2:ae:c4:e7:b5:cf:e6:ae:30:
                    7b:f0:a2:fb:1a:ea:0d:a6:c7:3e:2e:dd:9a:1e:db:
                    6b:ce:15:b5:de:40:01:2d:53:73:01:40:9a:09:f0:
                    79:59:36:61:20:2a:1a:9e:dc:13:27:a5:1f:60:ee:
                    cf:12:11:75:f2:7e:13:27:a9:8b:fa:a7:e8:4c:e0:
                    b2:7c:40:05:41:16:0c:b5:66:06:3e:dc:4b:6c:6d:
                    47:cb:20:b9:cf:b3:da:ba:d8:c8:c8:c1:2c:58:84:
                    0c:ac:06:b3:95:6b:68:df:7a:4b:2c:1c:36:b1:ce:
                    af:a7:df:f9:b6:78:0c:35:7a:ed:3e:5c:2c:a8:ed:
                    11:32:94:9e:06:49:4d:d2:51:62:e3:68:37:79:6c:
                    f4:f1:f9:c6:59:46:dc:f6:a1:33:65:d2:82:21:6a:
                    8c:65:df:cd:e3:6c:be:58:89:67:e0:f8:52:cb:64:
                    fd:a8:93:32:13:f0:06:ad:21:aa:38:bf:61:80:0d:
                    3f:bf:3b:ce:80:a3:37:b6:e4:e1:ec:d5:95:2d:fa:
                    bc:04:33:3d:58:b4:5c:17:b7:ac:5a:b5:54:8a:ca:
                    72:1f:90:4c:aa:0f:6b:bd:21:25:bd:75:7d:37:29:
                    cd:40:07:59:e4:4b:0e:6e:24:3c:22:3a:c0:1f:51:
                    16:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:02:F9:54:9C:B3:67:D7:27:51:50:56:DD:4F:1C:7B:5D:0F:0C:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/45a8c2e1-cfab-35fa-875c-15616e13c3d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl

            X509v3 Authority Key Identifier:
                keyid:CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f956::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:5b:20:0a:55:b6:b2:f3:f9:bf:8b:7b:de:e2:84:3a:01:d0:
         d2:2d:ff:ea:cd:b1:d5:35:2a:75:ba:10:7d:b9:9b:2f:11:e7:
         17:f6:79:a9:58:18:16:c9:f6:c9:7b:bc:9f:6b:d8:49:99:df:
         da:ab:1b:47:ec:39:f9:d0:95:a9:de:00:93:0c:2a:44:41:ee:
         91:bb:f7:24:06:08:62:e7:53:90:df:d9:8e:dd:2b:13:06:49:
         bd:a2:5c:6f:06:5d:c1:b7:cc:bb:3c:88:d1:a2:6c:4e:3f:2a:
         c8:58:2f:96:1b:5d:8e:5f:60:b3:53:98:16:70:18:36:1d:41:
         71:6f:0e:d0:ff:0c:82:77:2c:11:cd:ca:23:28:76:dd:a9:06:
         b0:b7:02:1b:d4:9e:58:76:ac:80:9b:7b:f7:71:66:d4:b4:11:
         83:ad:31:3c:fc:cc:da:33:ba:43:67:9e:86:ca:d7:78:c1:48:
         9c:3f:33:a4:0e:bf:42:3f:78:93:26:83:07:e3:bf:23:54:4f:
         96:39:76:dd:5d:55:30:07:fc:d3:a9:c5:c4:84:2b:a8:ec:9e:
         61:f9:1e:61:6e:8f:74:30:40:58:b8:5a:cf:73:9a:dd:56:18:
         f3:54:4d:da:4a:79:54:64:63:5c:a8:f7:20:16:4b:37:7b:2d:
         66:97:ef:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:34 2024 by rpki-client on console-fra.rpki-client.org