Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/60eb5078-363b-324d-91a4-7c996050a432.roa
File:                     60eb5078-363b-324d-91a4-7c996050a432.roa (raw, json)
Hash identifier:          3l3gNEbsgmDV+ljEIpdq1DfJFdQ6UVpdgkYrqsH0898=
Subject key identifier:   C2:AD:26:70:D4:E4:5C:CA:F1:01:5E:B7:9A:20:83:A8:4E:91:97:75
Certificate issuer:       /CN=1fb5932e-f862-443b-a719-26a612c2f112
Certificate serial:       010D0C9F43285847C4AA18515C0C066C237E4BD0
Authority key identifier: F5:AB:0F:90:6F:99:E6:9A:92:D2:B6:31:82:2C:59:81:14:79:AC:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/60eb5078-363b-324d-91a4-7c996050a432.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     17326
IP address blocks:        2602:fd2a::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/1fb5932e-f862-443b-a719-26a612c2f112.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/1fb5932e-f862-443b-a719-26a612c2f112.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:18:51:5c:0c:06:6c:23:7e:4b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fb5932e-f862-443b-a719-26a612c2f112
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=78b0f3db-3a14-4d54-ad00-325ccef38753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:da:7c:77:85:3b:50:e8:b9:48:8d:dd:51:bd:
                    ae:72:27:c3:14:6d:36:7c:07:c3:19:ee:09:8e:81:
                    cc:12:61:c5:c5:96:eb:54:8b:6e:58:f5:d6:45:d9:
                    b4:d3:89:82:9b:48:64:4d:cd:fa:90:c7:47:66:b6:
                    c9:21:cd:f4:92:bb:c0:ce:87:20:39:55:1c:6a:0e:
                    85:c0:40:e6:ed:78:8f:d4:8b:2e:fb:0f:45:cc:05:
                    ec:b2:b0:3f:79:50:a5:c6:4a:7c:bc:f1:99:68:b7:
                    1d:36:ba:d7:a5:10:8e:f3:28:b5:da:2e:80:04:f7:
                    34:64:11:cd:20:50:a9:b9:09:51:8c:50:8a:57:7f:
                    4d:42:bb:b2:85:9d:24:76:ec:01:86:32:c2:3a:27:
                    54:0d:4f:67:d5:df:0f:ea:1f:b9:7e:a7:da:be:28:
                    3d:21:79:97:72:13:18:3c:24:8b:d8:b7:f8:d4:36:
                    b7:14:48:d2:d1:80:1e:6b:38:1a:00:36:f1:27:d1:
                    33:92:66:62:d3:34:5e:6c:34:6c:70:49:4b:9e:25:
                    a4:a1:e0:02:d2:94:bc:e2:89:40:50:b2:55:14:8f:
                    54:da:72:56:c1:f4:01:ba:ac:f2:ee:b4:d2:f2:33:
                    81:02:80:57:67:ef:5b:a2:e8:80:68:02:50:b7:22:
                    e1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:AD:26:70:D4:E4:5C:CA:F1:01:5E:B7:9A:20:83:A8:4E:91:97:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/60eb5078-363b-324d-91a4-7c996050a432.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/1fb5932e-f862-443b-a719-26a612c2f112.crl

            X509v3 Authority Key Identifier:
                keyid:F5:AB:0F:90:6F:99:E6:9A:92:D2:B6:31:82:2C:59:81:14:79:AC:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd2a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:8e:36:ad:42:58:f7:42:85:dc:88:d7:08:61:af:cf:70:79:
         16:c7:5e:90:7b:73:f5:e1:54:1e:85:4e:1f:c9:46:63:7d:b5:
         ce:98:45:67:d9:e1:97:69:41:63:a0:81:e2:8f:48:5e:cc:de:
         84:11:b1:42:b7:68:b2:28:be:ae:58:26:22:ca:2a:89:1b:ee:
         bd:8e:45:f6:88:6d:0a:99:8e:78:18:b5:70:75:e6:a1:27:b9:
         e9:5e:4e:1b:0a:40:33:d4:2f:74:35:3a:b7:a1:3b:8e:4d:20:
         57:02:af:83:08:49:cf:6d:34:f4:7e:44:f6:81:24:14:bd:aa:
         21:f9:2d:8b:b8:4a:33:54:6c:e1:93:f6:f8:fa:a1:1f:f1:66:
         b7:ae:2c:c4:ab:20:08:9b:a0:5d:e0:1a:7e:79:8b:c6:e2:7b:
         82:1d:80:e4:32:c5:e2:47:3c:06:61:6a:2b:e3:ad:a2:a8:ec:
         d6:23:a4:d7:d0:28:3e:af:b6:5d:79:3a:96:52:d5:c2:ea:2d:
         b1:be:03:eb:5f:be:ab:8d:fd:cd:e1:ac:1c:84:1d:fd:85:be:
         18:22:e6:d4:77:fd:2c:b7:6e:0f:3c:71:7f:dd:cc:90:a9:d1:
         06:71:61:77:6f:82:ef:42:67:e5:36:cd:75:4a:4d:63:3f:68:
         ee:b4:70:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:36:11 2024 by rpki-client on console-fra.rpki-client.org