Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6/b702a54f-cb84-3f3d-8844-5043f149c734.roa
File:                     b702a54f-cb84-3f3d-8844-5043f149c734.roa (raw, json)
Hash identifier:          IV0k8SlsHd9tp/Sv6S6AsZ0rybGUlC+WKNh7Uc0UYsE=
Subject key identifier:   CC:DE:48:D2:5B:D4:F3:8B:F6:58:05:FF:F5:6F:4A:BD:BA:92:78:71
Certificate issuer:       /CN=5225c725-faab-43c9-8d24-f49817b762c6
Certificate serial:       010D0C9F432858471775BAF550961C6659D21980
Authority key identifier: D3:58:CF:0E:07:D3:BA:0E:95:94:CE:DC:C6:66:F8:1B:6A:EC:35:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6/b702a54f-cb84-3f3d-8844-5043f149c734.roa
Signing time:             Tue 03 Sep 2024 13:00:42 +0000
ROA not before:           Tue 03 Sep 2024 13:00:42 +0000
ROA not after:            Mon 02 Dec 2024 14:00:42 +0000
asID:                     207722
IP address blocks:        2602:fb09:fff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6/5225c725-faab-43c9-8d24-f49817b762c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6/5225c725-faab-43c9-8d24-f49817b762c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:17:75:ba:f5:50:96:1c:66:59:d2:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5225c725-faab-43c9-8d24-f49817b762c6
        Validity
            Not Before: Sep  3 13:00:42 2024 GMT
            Not After : Dec  2 14:00:42 2024 GMT
        Subject: CN=99e927f8-ad12-4b8e-bd85-ef703ab741b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fa:ca:77:34:a0:99:62:d9:a9:ca:72:06:1b:
                    8f:31:58:49:ad:2b:24:79:4b:04:38:fe:a9:4d:3f:
                    e4:eb:ef:f7:49:05:2b:19:fe:12:4d:7f:37:b1:95:
                    1e:7f:3e:b2:03:c9:a1:d4:bf:2c:b0:0b:9f:5a:7e:
                    78:d4:df:2e:c9:a8:cc:cd:b1:84:c8:e2:bc:f1:a3:
                    cf:90:dc:dd:6d:e5:dc:8e:24:66:85:88:84:2a:04:
                    5a:a1:07:29:6f:97:4a:db:94:17:2e:ec:76:cc:b9:
                    29:3f:74:62:cf:18:00:00:9d:b4:36:86:b9:c4:06:
                    f8:fe:6f:37:0a:56:f4:f6:63:27:86:e1:06:57:27:
                    52:0f:6f:d8:e3:28:b9:e0:81:1a:29:94:05:74:3c:
                    0c:15:b1:f3:3a:b0:d8:46:37:ae:ba:e2:ce:ed:b2:
                    7d:a6:66:1e:c7:d3:06:50:0b:77:0c:af:f4:85:d6:
                    9d:4d:f0:bc:cc:ed:43:50:da:35:ec:e6:d5:54:5b:
                    23:30:ca:7e:40:70:d7:56:75:60:41:15:51:e3:c3:
                    b5:78:c1:6e:fb:d9:ba:9d:18:c5:2b:0d:9b:05:93:
                    87:e0:47:5d:9f:7e:f6:3e:1b:a7:f9:99:f0:2b:55:
                    f8:f7:e0:df:68:16:d3:67:8a:ce:e6:eb:c9:fa:a6:
                    80:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:DE:48:D2:5B:D4:F3:8B:F6:58:05:FF:F5:6F:4A:BD:BA:92:78:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6/b702a54f-cb84-3f3d-8844-5043f149c734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6/5225c725-faab-43c9-8d24-f49817b762c6.crl

            X509v3 Authority Key Identifier:
                keyid:D3:58:CF:0E:07:D3:BA:0E:95:94:CE:DC:C6:66:F8:1B:6A:EC:35:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5225c725-faab-43c9-8d24-f49817b762c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb09:fff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:fc:20:a1:18:17:af:dd:db:55:c3:d0:39:cd:88:90:cd:9d:
         49:cd:c5:53:6c:ff:98:f5:ac:c1:6b:78:db:54:71:b0:63:53:
         eb:68:0d:b2:8b:0c:3d:03:24:5b:41:27:13:27:2e:5a:3d:d4:
         99:93:35:a6:7f:e7:18:bb:e5:7e:63:d2:4c:70:a3:09:2e:c0:
         8d:27:e7:7a:e0:bd:f6:4c:c4:16:43:1c:15:0f:c3:0c:7e:34:
         a9:9e:f9:87:51:f8:5d:4a:a1:fd:0d:05:ba:fb:17:67:25:64:
         f4:e0:ea:46:aa:54:fa:85:1f:f3:4a:80:00:a7:85:dc:a2:3a:
         5e:46:07:bf:06:1e:b6:68:0d:9f:f8:03:af:8a:6a:85:13:fc:
         32:70:01:9c:37:d5:d0:d9:ff:5d:75:f6:a7:d2:71:13:c3:62:
         4e:03:c3:dc:80:fc:06:f5:a9:0d:f9:07:aa:83:25:f0:ae:03:
         8e:31:3c:f2:3e:6f:0a:7b:ac:d8:29:10:2b:36:e5:55:de:04:
         a6:78:91:c2:d4:40:c3:77:bc:12:91:4c:7e:92:72:50:60:de:
         4d:09:f0:93:c5:ec:35:fb:09:9b:21:fe:e2:41:e9:dd:82:74:
         14:73:2d:93:a0:61:76:fd:da:17:62:79:0e:af:4f:e8:1b:6b:
         c0:d9:bb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:24 2024 by rpki-client on console-ams.rpki-client.org