Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/19442399-fe73-3481-a9c6-bd5d99a8df2c.roa
File:                     19442399-fe73-3481-a9c6-bd5d99a8df2c.roa (raw, json)
Hash identifier:          l+61R8hpRQFoEAhMeHA5KBoAVCOed+Ff6KZUccADSBY=
Subject key identifier:   4D:AD:5B:C6:C2:9F:1C:22:E4:F2:C7:07:80:87:97:4B:3B:BF:2D:95
Certificate issuer:       /CN=07516521-ca1d-4a06-bb11-289a5545b790
Certificate serial:       010D0C9F432858477660F45BFF539D178097EF80
Authority key identifier: 11:D6:05:C3:5D:E0:5F:3A:30:EB:26:2C:A7:6A:62:75:4E:4C:CD:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/19442399-fe73-3481-a9c6-bd5d99a8df2c.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     64249
IP address blocks:        2602:fabc::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/07516521-ca1d-4a06-bb11-289a5545b790.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/07516521-ca1d-4a06-bb11-289a5545b790.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:60:f4:5b:ff:53:9d:17:80:97:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07516521-ca1d-4a06-bb11-289a5545b790
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=af5c32ac-87fb-4302-9eb2-aa652e7ff18f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d9:e3:65:59:b0:3c:7e:62:0b:9d:15:c7:de:
                    18:ab:ac:a9:0c:2f:29:61:9f:37:33:ae:c1:58:a8:
                    45:05:da:64:f4:15:29:8b:4a:2d:92:0f:2a:11:ac:
                    57:68:30:3c:a8:1a:69:02:a3:d0:a5:7c:38:63:7c:
                    90:34:83:c1:69:3a:95:0d:23:f1:2a:98:c3:8e:db:
                    56:b3:e0:14:16:80:64:92:19:c4:0a:5a:4a:b1:df:
                    e1:2b:87:b1:ea:d0:98:16:a0:d7:ba:ee:6e:19:67:
                    7e:b3:14:a7:7d:44:2c:06:f2:55:5d:a3:6e:92:d4:
                    c6:6d:00:63:b1:49:f4:a2:8d:b3:97:8a:3e:20:b2:
                    28:55:d2:31:0b:3c:9e:f8:04:94:25:8e:ce:b2:ba:
                    0c:a2:ac:70:2d:ef:49:f6:b3:6b:58:10:01:68:2b:
                    11:c6:2b:43:93:98:bf:d9:50:4a:bc:7a:40:d7:05:
                    96:6a:10:81:3a:01:38:2d:0a:18:4f:6e:c2:6d:95:
                    41:25:e0:33:7d:44:93:d7:68:9c:cc:dc:6d:5d:9e:
                    d7:02:7d:52:57:f6:2f:d9:0d:e8:37:93:6b:13:67:
                    e8:97:5e:d4:1e:08:eb:f9:2e:05:da:2f:5f:1d:24:
                    71:92:42:d4:95:80:ca:ae:3b:32:1a:44:0b:96:e9:
                    a8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AD:5B:C6:C2:9F:1C:22:E4:F2:C7:07:80:87:97:4B:3B:BF:2D:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/19442399-fe73-3481-a9c6-bd5d99a8df2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/07516521-ca1d-4a06-bb11-289a5545b790.crl

            X509v3 Authority Key Identifier:
                keyid:11:D6:05:C3:5D:E0:5F:3A:30:EB:26:2C:A7:6A:62:75:4E:4C:CD:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fabc::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:e8:2e:95:66:62:5d:6d:c3:95:c8:de:2d:79:43:c8:ee:9e:
         f9:9b:d6:f8:07:f8:e2:7a:59:64:92:6c:a9:be:5c:04:15:83:
         a2:93:e9:30:f6:c4:83:65:ce:57:0d:2d:01:6c:87:b0:ff:35:
         21:e3:34:65:e5:59:fd:e5:ba:ec:dd:f0:e5:2b:27:c5:c7:12:
         9d:4b:3e:20:3c:42:78:45:8f:f6:dc:67:94:a7:1e:4e:78:dc:
         1e:0b:10:b9:2a:a1:24:10:f2:fb:03:2c:32:1e:cc:8e:3a:38:
         a5:d1:dd:8c:a5:2a:66:1e:9c:eb:f0:23:ac:9d:91:86:41:0b:
         7c:80:5f:b6:18:e0:32:a0:31:66:37:bc:71:07:15:76:d6:52:
         4f:db:fb:8d:43:3b:5c:32:91:ba:d2:d2:c2:fb:d7:fa:03:09:
         16:99:cb:7c:d4:ad:d8:4f:1f:7c:c7:4c:57:c3:0e:c6:ab:cd:
         10:c1:60:dd:61:7d:da:a0:35:a4:2b:f5:23:ac:e9:bb:25:1a:
         1c:97:6b:9f:b6:28:26:32:7d:ef:9b:60:e9:d3:4c:6d:34:35:
         00:97:d7:d0:48:06:3e:8d:ab:27:b8:a8:19:ab:91:8a:66:fd:
         51:e9:37:af:11:52:6c:d6:69:f3:2f:f9:06:2e:7b:97:28:0b:
         d2:a0:72:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:17 2024 by rpki-client on console-ams.rpki-client.org