Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/5c7ba998-12dc-3785-a77e-5b12a5d09da6.roa
File:                     5c7ba998-12dc-3785-a77e-5b12a5d09da6.roa (raw, json)
Hash identifier:          vd7EdrttDmI9D1Vnf6/y4J5xt0/b9W0P1LZM+Auf5EQ=
Subject key identifier:   EE:9D:20:83:D6:7D:89:4B:16:7F:C8:8A:2B:88:1F:58:F6:88:A4:48
Certificate issuer:       /CN=fdb3fee9-0b00-4a8d-b320-e293b627bb04
Certificate serial:       010D0C9F43285847EFEF8DFF60D35DD0A3A6A680
Authority key identifier: CC:35:8E:E1:5C:06:77:2C:6D:89:CE:C4:0A:D4:AA:E4:28:D9:21:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/5c7ba998-12dc-3785-a77e-5b12a5d09da6.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     13737
IP address blocks:        2602:f9ad::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/fdb3fee9-0b00-4a8d-b320-e293b627bb04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/fdb3fee9-0b00-4a8d-b320-e293b627bb04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:8d:ff:60:d3:5d:d0:a3:a6:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdb3fee9-0b00-4a8d-b320-e293b627bb04
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=00f53a5d-2252-4e27-9720-c74599defffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0d:01:12:da:04:c7:a6:ff:42:76:9b:77:ef:
                    f1:e2:96:1e:8d:b9:68:b3:ef:ab:4c:8f:be:f9:28:
                    09:dc:00:58:29:9c:ad:3c:a2:32:72:7c:70:32:d0:
                    5b:f0:c7:87:ca:97:d2:04:3a:71:e9:f1:c5:f6:d0:
                    e4:30:9f:0c:12:21:23:37:60:62:99:16:20:b8:f1:
                    73:62:e6:48:3f:83:26:62:27:a4:21:f9:55:c1:77:
                    8b:77:70:ce:43:42:96:aa:43:c3:20:7a:86:cc:87:
                    69:3a:52:b0:02:57:23:36:0e:bf:50:64:06:1b:c4:
                    1f:3f:f3:d9:b1:97:8d:c1:28:0f:af:fa:7e:cc:de:
                    55:3c:e9:73:60:d1:5f:03:5e:cf:9f:cf:af:ac:df:
                    1b:cb:36:d8:54:24:11:cc:bd:f4:12:1a:c3:3d:55:
                    ba:fd:ef:f4:68:26:51:8d:42:04:aa:cf:d7:5e:5b:
                    92:7c:04:a7:26:2b:e9:88:3b:ce:d2:68:16:f5:a6:
                    32:0f:33:ef:9c:e2:b1:18:e6:58:d3:ef:3f:c6:08:
                    9c:f2:be:ab:5c:18:91:23:0b:9a:7c:02:54:b7:fd:
                    c2:8c:e3:23:ed:ed:ff:19:68:4a:bc:1e:32:76:1b:
                    71:fc:12:ae:26:0e:c7:b3:da:15:58:69:ab:b1:42:
                    97:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9D:20:83:D6:7D:89:4B:16:7F:C8:8A:2B:88:1F:58:F6:88:A4:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/5c7ba998-12dc-3785-a77e-5b12a5d09da6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/fdb3fee9-0b00-4a8d-b320-e293b627bb04.crl

            X509v3 Authority Key Identifier:
                keyid:CC:35:8E:E1:5C:06:77:2C:6D:89:CE:C4:0A:D4:AA:E4:28:D9:21:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ad::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:7a:4d:9c:6a:bb:e2:03:9c:f1:43:6d:61:c7:79:99:ed:10:
         ae:11:83:6c:48:09:50:90:c4:72:1a:86:14:2b:cf:90:a1:18:
         4b:c8:95:34:9c:57:d2:f3:94:6e:b7:b9:ef:85:61:3c:61:4c:
         4a:61:97:b4:24:2c:a8:aa:15:68:3d:fe:58:50:8b:10:cf:f1:
         bc:82:30:15:b2:f9:e8:20:7d:8d:db:c7:9c:05:33:7b:56:cb:
         41:7a:fb:2d:e7:9c:4a:aa:a3:e8:5f:95:8e:47:e3:08:22:50:
         8c:ba:18:4a:cd:c6:1f:66:28:2a:95:95:20:2c:79:7e:e7:c5:
         6b:67:f1:a3:ba:2d:7e:12:c0:c0:c9:00:50:99:47:21:09:07:
         af:5d:62:65:0e:8b:18:8b:57:68:75:b8:4a:3c:39:cf:90:de:
         17:15:0a:bc:63:7a:d1:8b:ce:d1:81:de:99:9b:2d:86:4e:99:
         ee:e8:88:ee:9c:a6:eb:69:c0:bd:b6:e1:2a:69:c8:b7:4f:ab:
         6f:58:7b:e4:8c:09:f3:3f:eb:fc:fc:da:34:03:f8:ea:74:10:
         b8:a5:98:07:da:7e:66:e1:46:63:07:59:6f:c6:dc:2a:94:b7:
         58:ea:b9:58:9c:2b:b0:64:ff:e9:13:99:5b:a8:49:7e:66:de:
         07:3c:af:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:58 2024 by rpki-client on console-fra.rpki-client.org