Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/c062b811-5af4-3d93-883f-cd801dbdc422.roa
File:                     c062b811-5af4-3d93-883f-cd801dbdc422.roa (raw, json)
Hash identifier:          nxUYU6TOfMImsYfkNZogcSI2X8vPeR/ZlCh96G/RlHo=
Subject key identifier:   33:3D:64:E2:3D:46:0C:66:CE:AC:A9:E3:B1:16:B9:42:E4:87:CB:4E
Certificate issuer:       /CN=68b39235-773a-4108-9528-465304a966b3
Certificate serial:       010D0C9F43285847537B6E4EAAC951CA4FDC3000
Authority key identifier: BE:B7:8E:0F:E3:65:3F:5A:C9:05:7A:62:4C:DC:7B:71:AE:FE:45:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/c062b811-5af4-3d93-883f-cd801dbdc422.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     63296
IP address blocks:        2605:fa40::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:6e:4e:aa:c9:51:ca:4f:dc:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b39235-773a-4108-9528-465304a966b3
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=2439adcd-197c-41da-84a0-798a43008686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fa:e0:7d:fc:ab:8e:fa:54:22:cc:02:ac:fe:
                    12:d0:b6:e1:49:5d:24:73:66:ca:a3:71:33:6c:84:
                    97:75:01:8b:27:ba:8f:90:59:31:a0:47:29:f1:d5:
                    62:e2:80:6a:50:2e:7d:8a:03:16:54:a3:a2:cc:07:
                    0f:4c:da:fd:a4:99:bd:24:2b:55:11:ff:cf:64:75:
                    2e:1c:17:a8:7d:25:50:86:a9:a8:c8:06:f3:c4:30:
                    1d:18:b3:76:14:3f:af:32:ac:2c:77:43:3e:c2:df:
                    d3:78:15:59:98:87:01:c5:3f:71:fb:ea:e9:86:36:
                    e0:23:81:68:f9:ee:9f:76:7d:04:79:cb:d6:d4:c2:
                    b9:f6:14:90:f1:ff:7e:51:a7:4b:f8:3e:fb:e4:f4:
                    49:76:4d:8d:97:b8:fc:42:99:d5:ce:14:df:d1:0a:
                    9b:7c:ca:10:42:8d:33:52:42:c4:a2:71:b4:b8:1a:
                    52:b2:9f:9d:d7:a7:79:86:ee:5b:75:fb:6a:61:84:
                    16:89:fd:a4:70:5b:65:c5:b0:cc:d7:22:f4:65:07:
                    e7:3b:0e:67:11:85:88:22:90:3f:90:a3:8e:01:ae:
                    7b:af:cf:d1:5e:d5:df:99:de:15:c7:e2:80:19:0a:
                    e3:41:cd:29:58:2d:20:a9:c1:26:67:d8:e0:7b:4e:
                    41:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:3D:64:E2:3D:46:0C:66:CE:AC:A9:E3:B1:16:B9:42:E4:87:CB:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/c062b811-5af4-3d93-883f-cd801dbdc422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.crl

            X509v3 Authority Key Identifier:
                keyid:BE:B7:8E:0F:E3:65:3F:5A:C9:05:7A:62:4C:DC:7B:71:AE:FE:45:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:fa40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:88:e5:9b:91:9a:5c:3a:e7:75:fc:a1:b7:22:3d:0e:6a:58:
         4c:c1:f6:9c:87:3c:e4:9f:91:1f:1c:9e:ce:15:a2:5d:1c:94:
         2d:1d:ab:bb:0d:ea:04:37:05:63:f4:4e:49:e0:47:48:4b:26:
         cb:2b:b3:47:20:2a:ff:f2:6b:da:89:35:b9:7b:4c:6f:cb:8f:
         07:2f:13:af:d5:9a:ad:be:7c:8b:24:3d:10:09:bc:0a:7b:4c:
         a9:df:e5:66:79:9f:ea:3d:ac:dd:d7:95:29:f3:38:5d:8a:30:
         80:c1:87:06:18:23:3d:04:a1:f9:40:47:da:33:34:ab:7f:bb:
         fe:da:59:e2:40:48:23:f1:b6:b9:a8:1a:e3:41:81:48:7b:b9:
         db:c9:be:53:cb:56:1d:23:8c:c2:4f:bb:63:5f:ce:79:23:5c:
         94:ec:57:fd:ec:d9:69:ad:d9:69:8c:2b:c0:57:43:30:ec:cc:
         4b:2f:74:60:b3:ec:b1:9a:4a:91:45:47:81:33:39:4b:8f:d1:
         90:16:ea:10:5f:6e:de:74:58:05:a3:d8:a4:a1:e5:c7:5a:6a:
         d2:ef:72:16:a1:39:23:cf:25:99:e7:f3:25:2e:cf:02:54:5c:
         2d:a4:d3:cf:45:b4:9f:bb:2e:f2:68:fd:b9:7d:cc:05:eb:b4:
         81:6b:6d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:42:15 2024 by rpki-client on console-ams.rpki-client.org