Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/cfb364cd-df84-3bd4-942c-077ee7ca99a9.roa
File:                     cfb364cd-df84-3bd4-942c-077ee7ca99a9.roa (raw, json)
Hash identifier:          uKc+JuaabKxgXwm542H9TL5zUIl3rT0folbfVIAahZY=
Subject key identifier:   2C:53:66:A1:9A:B8:8E:AD:40:DC:95:B4:B1:F4:0D:0A:DB:94:C3:1A
Certificate issuer:       /CN=553f7a6d-a8af-4a8d-94c5-858b0b23ab9a
Certificate serial:       010D0C9F43285847E23FAA7436E129EB3FC90AC0
Authority key identifier: 2E:15:F5:D4:69:C6:E2:78:C0:E1:5D:15:43:02:AF:9C:83:71:BA:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/cfb364cd-df84-3bd4-942c-077ee7ca99a9.roa
Signing time:             Fri 15 Nov 2024 04:20:55 +0000
ROA not before:           Fri 15 Nov 2024 04:20:55 +0000
ROA not after:            Thu 13 Feb 2025 04:20:55 +0000
asID:                     8796
IP address blocks:        2602:f7c2::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e2:3f:aa:74:36:e1:29:eb:3f:c9:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553f7a6d-a8af-4a8d-94c5-858b0b23ab9a
        Validity
            Not Before: Nov 15 04:20:55 2024 GMT
            Not After : Feb 13 04:20:55 2025 GMT
        Subject: CN=b76dcf67-642f-441a-8204-9c948b8d565a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:44:f2:59:df:9e:0f:f1:d0:9d:7b:af:98:b3:
                    fa:43:e7:fa:1f:35:01:b3:44:7c:11:c3:8a:0f:4a:
                    1d:49:f9:f8:9e:a3:cf:7a:1c:0e:5b:70:ff:9f:a9:
                    45:35:18:de:4c:99:50:7c:33:35:74:41:f2:0b:66:
                    2c:6b:a9:f8:61:be:8a:00:e3:f3:6f:0d:d9:5c:b8:
                    65:7b:9e:1a:17:b6:91:50:83:53:55:7a:62:92:7b:
                    6f:ae:da:d2:b8:d4:d3:ff:d1:e8:17:0f:a3:51:da:
                    7a:27:87:53:4e:03:4c:37:fe:59:8f:3b:d8:cf:f0:
                    4e:9c:e7:1b:2a:ee:e4:5a:ec:5d:1f:01:d0:1a:9f:
                    58:12:61:25:bf:f1:33:b6:ee:50:b4:68:79:d5:ea:
                    22:e2:fc:24:6f:30:41:12:e1:ca:20:6c:ae:a5:b7:
                    e4:fc:82:2d:07:76:1d:49:e0:63:2f:ad:b4:5b:5a:
                    7f:76:23:99:24:31:66:16:fb:e0:0a:1f:8c:f9:9e:
                    57:dd:59:af:ff:c2:1c:94:38:14:e3:00:44:74:ff:
                    99:1e:76:de:db:2c:14:b1:cf:a4:ac:8f:bf:5f:19:
                    0e:bc:1c:c8:6a:2b:ec:26:0d:76:18:a3:b5:11:05:
                    ee:9f:d9:57:14:05:e0:e7:fc:51:27:c5:2c:a0:bd:
                    1c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:53:66:A1:9A:B8:8E:AD:40:DC:95:B4:B1:F4:0D:0A:DB:94:C3:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/cfb364cd-df84-3bd4-942c-077ee7ca99a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.crl

            X509v3 Authority Key Identifier:
                keyid:2E:15:F5:D4:69:C6:E2:78:C0:E1:5D:15:43:02:AF:9C:83:71:BA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7c2::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:9a:36:1a:18:c1:e8:75:c3:ec:cf:89:f1:9f:fa:6a:da:77:
         f4:92:cf:f5:17:d4:ed:09:80:d9:9e:35:14:63:6f:ba:2e:82:
         a6:7f:84:ae:0d:99:7d:76:7b:19:f1:d6:46:fd:9e:62:62:c7:
         97:c8:40:a0:a2:96:3f:55:80:93:2a:cc:0d:c0:a9:b0:2f:64:
         0a:d6:ad:54:f8:27:1b:6f:2a:88:0b:66:54:d6:44:6b:8b:41:
         26:af:cb:e6:56:1f:2b:70:6c:95:c8:1c:54:e9:9e:03:b9:a6:
         9c:8c:36:da:de:79:eb:70:5c:c0:54:a4:a8:4a:d6:10:06:f2:
         f0:a3:e8:e4:fc:62:42:e2:fe:23:59:10:e6:39:8c:1e:59:fa:
         1c:51:93:62:54:19:a7:57:c8:cb:89:b2:d8:a6:66:03:b7:26:
         99:e1:59:ab:59:f4:12:5d:53:d6:76:95:a8:a7:19:37:3c:c4:
         63:4c:89:90:85:e2:0d:4b:6a:9b:c6:e6:96:c1:19:d5:27:51:
         c6:e1:af:9c:11:d9:4e:cd:27:01:45:a0:de:f6:e0:0d:a3:8f:
         24:9b:aa:c2:eb:b5:07:20:ea:f2:1b:3a:f3:6a:07:8b:77:d2:
         1e:73:79:05:7b:f9:89:f3:bd:28:d9:d8:ac:0d:d7:8f:5a:14:
         9c:ce:97:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:01:51 2024 by rpki-client on console-fra.rpki-client.org