Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/0197a9e6-d271-3b8a-99d2-ee2c9bed2b5a.roa
File:                     0197a9e6-d271-3b8a-99d2-ee2c9bed2b5a.roa (raw, json)
Hash identifier:          LcOlYINnqrlee+ep62E7MKBvGYNbBOzouoITyQYgZsI=
Subject key identifier:   5A:68:7F:C9:27:D3:F8:DF:E5:AD:CA:43:D8:05:8C:28:C3:09:4A:24
Certificate issuer:       /CN=1fb5932e-f862-443b-a719-26a612c2f112
Certificate serial:       010D0C9F43285847C4AA186090D62568D1723600
Authority key identifier: F5:AB:0F:90:6F:99:E6:9A:92:D2:B6:31:82:2C:59:81:14:79:AC:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/0197a9e6-d271-3b8a-99d2-ee2c9bed2b5a.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     17326
IP address blocks:        2602:fd2a::/36 maxlen: 52

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/1fb5932e-f862-443b-a719-26a612c2f112.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/1fb5932e-f862-443b-a719-26a612c2f112.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:18:60:90:d6:25:68:d1:72:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fb5932e-f862-443b-a719-26a612c2f112
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=ddef8c0c-2304-44c5-8194-ae27fef4c7fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c1:f1:3e:7d:77:f9:01:05:60:a3:e1:a8:60:
                    82:1d:ef:a1:43:97:57:7d:b2:25:7f:09:f6:33:08:
                    74:42:18:0c:46:77:aa:54:40:4d:63:38:f1:4d:ff:
                    7d:95:ea:fe:e1:bc:28:b8:e6:1a:75:e8:a3:dd:4a:
                    64:38:64:e3:8a:92:4e:a0:f7:45:61:8f:af:86:6c:
                    e8:19:28:47:03:be:d4:39:c4:20:e3:be:77:bf:be:
                    42:4e:2b:b8:fc:fa:e1:8d:6c:eb:b9:5b:2b:95:75:
                    61:cd:25:29:90:85:82:a1:3f:bd:4f:71:34:34:b7:
                    72:da:03:07:ad:85:f1:63:53:a7:c7:4e:e1:3d:ce:
                    96:19:11:db:6a:03:67:ce:30:1c:73:60:13:4d:47:
                    d0:dd:77:4d:78:82:51:d6:ae:82:7e:65:3f:9d:32:
                    74:5d:ff:9e:b0:49:29:4e:c5:eb:f6:ac:89:8d:ef:
                    5f:1d:89:12:71:a9:87:98:fe:60:12:f2:53:bc:f0:
                    59:64:dd:f6:1d:0b:fd:19:1d:99:0c:63:c5:f4:67:
                    ec:ef:5f:8a:74:18:e3:a4:39:61:26:35:b9:0b:75:
                    6d:9e:b9:14:a2:99:cd:1b:52:f0:3d:76:8e:1e:48:
                    f9:cd:c0:b1:19:11:fd:2e:6b:05:93:16:e3:c3:d2:
                    66:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:68:7F:C9:27:D3:F8:DF:E5:AD:CA:43:D8:05:8C:28:C3:09:4A:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/0197a9e6-d271-3b8a-99d2-ee2c9bed2b5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/1fb5932e-f862-443b-a719-26a612c2f112.crl

            X509v3 Authority Key Identifier:
                keyid:F5:AB:0F:90:6F:99:E6:9A:92:D2:B6:31:82:2C:59:81:14:79:AC:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd2a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:a2:79:1e:2b:19:3d:66:4b:ce:8d:9b:04:22:eb:eb:e1:04:
         a4:33:c6:ad:b2:f4:56:77:ac:55:79:72:c0:97:ff:1a:cc:f1:
         5f:71:d8:5d:af:d3:57:02:4a:2c:61:d7:f9:5f:4b:fa:e4:49:
         51:21:ae:5f:9f:3c:8e:c9:9e:24:4b:57:5c:ff:51:fc:d8:dc:
         82:9c:c2:89:33:f4:55:3d:55:d8:5f:c9:db:90:60:82:9b:3d:
         24:8a:ec:db:05:73:8b:49:d6:31:73:53:0b:ee:5b:f2:94:3d:
         c7:76:88:43:68:58:bc:d6:ba:cf:e8:ea:9f:41:e4:26:5c:5d:
         e7:7d:44:a8:df:e8:84:9c:ff:16:ea:d3:a6:38:79:f4:c2:e1:
         79:40:1e:78:4a:0c:4e:65:f7:75:1e:53:34:47:91:c2:21:0e:
         23:82:c6:b6:81:ed:9e:61:30:e3:ae:e4:a8:9c:6f:09:b0:8b:
         56:c7:8b:d2:19:c7:fc:bf:ae:c4:cf:b7:12:86:11:f6:b0:fd:
         83:67:a6:ac:9d:c8:de:02:ea:d3:5b:aa:b6:07:46:6c:c7:be:
         79:16:87:1a:35:87:cc:c1:d2:49:10:e6:9a:41:ea:04:e3:60:
         44:18:84:79:73:01:58:50:40:dc:7b:a8:79:46:01:e4:6d:36:
         26:0a:92:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:36:11 2024 by rpki-client on console-fra.rpki-client.org