Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/510edbfe-a47f-3d4f-8304-c51cb445dfeb.roa
File:                     510edbfe-a47f-3d4f-8304-c51cb445dfeb.roa (raw, json)
Hash identifier:          oQQHfKbP8ZqDUkg1LBBK4yHHljyHJYhs9fQrn70985o=
Subject key identifier:   31:7B:46:4B:69:2A:3D:75:E5:86:33:83:27:A0:CF:DE:F6:58:ED:68
Certificate issuer:       /CN=07516521-ca1d-4a06-bb11-289a5545b790
Certificate serial:       010D0C9F43285847C34486CC16B9ED76B30C6F00
Authority key identifier: 11:D6:05:C3:5D:E0:5F:3A:30:EB:26:2C:A7:6A:62:75:4E:4C:CD:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/510edbfe-a47f-3d4f-8304-c51cb445dfeb.roa
Signing time:             Mon 04 Nov 2024 02:00:36 +0000
ROA not before:           Mon 04 Nov 2024 02:00:36 +0000
ROA not after:            Sun 02 Feb 2025 02:00:36 +0000
asID:                     64647
IP address blocks:        2602:fabc::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/07516521-ca1d-4a06-bb11-289a5545b790.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/07516521-ca1d-4a06-bb11-289a5545b790.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c3:44:86:cc:16:b9:ed:76:b3:0c:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07516521-ca1d-4a06-bb11-289a5545b790
        Validity
            Not Before: Nov  4 02:00:36 2024 GMT
            Not After : Feb  2 02:00:36 2025 GMT
        Subject: CN=f3099eb0-da0a-41bb-9d41-1bdb93db46fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:34:3e:17:18:c3:93:d1:55:6f:6a:7b:94:91:
                    ba:f0:3d:4b:60:1a:a0:60:5d:91:76:6d:d7:61:c8:
                    45:34:41:20:9f:07:52:6b:6a:a5:e6:47:59:40:6e:
                    a5:6a:86:e2:9e:bf:ff:e1:ff:b0:70:df:f4:6a:04:
                    02:62:d9:e7:47:52:3b:44:9c:59:b4:29:4e:0d:74:
                    6f:58:d4:d7:84:f7:1b:df:c5:6f:20:03:e8:69:2a:
                    e1:fb:99:5d:a5:55:a0:81:ba:96:d6:88:c0:0d:3c:
                    6d:9a:e2:ce:f2:6f:ec:64:63:55:39:36:9e:11:4a:
                    4d:2b:a6:d5:d8:e5:73:49:8e:10:d4:cd:b0:a0:f5:
                    c5:57:d2:8c:29:39:a0:c6:0e:1f:c7:08:65:37:b6:
                    b0:b2:b3:c2:15:39:b4:ed:27:9d:5f:9d:3b:db:b9:
                    f6:41:2b:3c:66:28:69:c4:74:bc:9a:17:ce:b1:1b:
                    4a:8d:d4:96:63:16:40:b1:29:e1:28:d3:d6:23:6c:
                    cd:5f:67:63:27:6e:1c:55:98:f0:b6:2b:f2:3e:13:
                    9d:83:20:ae:7e:d9:3d:20:68:1e:7b:03:c2:fb:f9:
                    01:a1:2b:9d:9a:2f:b7:34:27:92:03:85:0e:41:fc:
                    f5:99:01:9a:f5:0c:bc:eb:e0:55:f7:9b:f5:19:6a:
                    84:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7B:46:4B:69:2A:3D:75:E5:86:33:83:27:A0:CF:DE:F6:58:ED:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/510edbfe-a47f-3d4f-8304-c51cb445dfeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/07516521-ca1d-4a06-bb11-289a5545b790.crl

            X509v3 Authority Key Identifier:
                keyid:11:D6:05:C3:5D:E0:5F:3A:30:EB:26:2C:A7:6A:62:75:4E:4C:CD:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fabc::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:c9:82:93:2c:5c:cd:92:7a:6a:c8:cc:b1:d3:7b:f8:6f:9d:
         2e:c0:94:b7:de:b7:0a:a5:a0:b9:b2:c7:57:e9:69:fe:9f:45:
         d6:2d:64:0c:8b:55:e2:67:88:91:e6:86:db:37:73:9d:9c:99:
         e7:51:ee:f6:6f:68:c7:66:15:5b:11:78:90:3f:f6:d3:d8:ef:
         0b:7d:48:78:f5:2f:ee:21:a8:1d:a2:cf:e1:0d:7e:74:cc:03:
         88:75:1e:77:35:07:e4:e5:6c:7b:2d:29:b8:ee:36:7b:6a:a4:
         ab:bc:5a:56:1a:f7:f6:1f:03:3c:67:38:39:8a:2b:f4:01:ac:
         65:ff:22:f5:46:7a:5a:2b:17:0f:97:50:c2:36:12:47:db:d0:
         f9:3b:f6:73:2c:13:f9:68:5b:31:7e:12:9f:9e:f3:17:49:ce:
         d7:d5:5f:12:08:3c:c5:35:ed:6d:5f:7a:78:93:5c:85:83:02:
         06:84:15:3d:63:18:95:89:fc:05:94:e2:8e:5e:ba:b8:4d:20:
         5c:2d:dc:6f:10:16:d7:49:13:62:06:a1:7f:60:e5:7a:21:ae:
         3b:ae:f1:43:53:bb:7e:b6:68:35:f3:9a:77:f0:5e:73:78:b6:
         a4:21:32:88:2f:cf:5c:db:a2:df:dc:b4:22:cd:9d:62:22:1e:
         f1:c0:22:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:31:27 2024 by rpki-client on console-ams.rpki-client.org