Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/b004e50a-505a-30ab-94ed-1ef0daa64ae8.roa
File:                     b004e50a-505a-30ab-94ed-1ef0daa64ae8.roa (raw, json)
Hash identifier:          7eGYDqEYiBnRLql/iHSsYKjlkgSSqXQfgWLdcvXaMzs=
Subject key identifier:   75:68:CB:E5:C2:47:99:24:55:67:B9:3D:95:E0:68:FC:F3:1F:0F:22
Certificate issuer:       /CN=813aad25-25fa-4b5c-bb84-15fabea23f87
Certificate serial:       010D0C9F432858479AABF65EFB52B202EA56E0A0
Authority key identifier: 5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/b004e50a-505a-30ab-94ed-1ef0daa64ae8.roa
Signing time:             Sun 20 Oct 2024 13:00:42 +0000
ROA not before:           Sun 20 Oct 2024 13:00:42 +0000
ROA not after:            Sat 18 Jan 2025 14:00:42 +0000
asID:                     400936
IP address blocks:        2602:2d1:400::/38 maxlen: 38

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:ab:f6:5e:fb:52:b2:02:ea:56:e0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=813aad25-25fa-4b5c-bb84-15fabea23f87
        Validity
            Not Before: Oct 20 13:00:42 2024 GMT
            Not After : Jan 18 14:00:42 2025 GMT
        Subject: CN=7849acb9-5048-4851-81e8-773f09180b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:33:4b:6f:3b:12:da:f5:2f:72:85:67:04:0c:
                    79:5d:5a:98:94:6e:00:8a:87:c2:c6:fc:b2:c9:86:
                    a4:a9:7c:25:8c:68:3c:8b:7e:4c:00:3e:62:98:64:
                    67:f3:43:bc:e5:2b:90:13:cc:31:3f:af:cc:ca:fb:
                    ae:ad:67:b0:e5:b5:13:60:e0:00:e1:e3:13:ee:0b:
                    1f:a5:a5:b9:16:aa:f5:6f:dc:13:cd:59:1c:56:96:
                    da:04:1d:a8:12:51:12:24:b9:f8:fc:0e:92:96:d6:
                    33:e8:cb:a5:6d:bf:43:8f:85:80:2f:af:89:05:99:
                    36:aa:49:eb:1e:4f:1d:29:76:b8:be:a4:69:19:2a:
                    24:a7:4d:aa:38:a8:e7:57:c8:08:4c:a7:9f:41:46:
                    36:6e:7b:a8:49:64:c0:13:23:95:c1:de:32:d1:a9:
                    2e:48:13:9c:2a:0a:96:4c:22:b5:28:ac:bc:06:09:
                    ea:b5:0a:17:d4:0a:2e:89:67:99:18:5c:c4:94:18:
                    51:72:30:d9:e6:20:c7:b0:93:9d:7a:c3:25:cf:07:
                    01:07:9f:b8:db:c9:03:a8:44:61:d5:98:41:8e:c7:
                    0d:3f:af:fb:07:a7:30:a2:32:7d:be:a3:23:68:86:
                    8a:77:7c:89:e6:42:fa:eb:21:c7:cd:73:29:82:12:
                    11:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:68:CB:E5:C2:47:99:24:55:67:B9:3D:95:E0:68:FC:F3:1F:0F:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/b004e50a-505a-30ab-94ed-1ef0daa64ae8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl

            X509v3 Authority Key Identifier:
                keyid:5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2d1:400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:26:e5:bd:cf:65:c1:85:40:51:79:8d:dc:c3:3a:42:64:89:
         ac:55:16:09:e5:f8:53:48:6f:97:7f:fe:b5:52:43:5f:70:38:
         70:d4:f8:86:f9:0c:a5:94:36:c9:38:60:c1:53:e3:21:42:f3:
         e1:a5:f9:6a:2b:de:af:07:1b:29:6d:d9:37:e2:e4:96:6b:81:
         41:0a:46:69:53:71:1e:2f:70:65:48:e7:39:ae:67:54:57:36:
         bf:31:69:e4:0a:ff:6b:5b:10:8f:89:c1:6f:ea:bd:97:7f:67:
         4d:34:b4:f8:df:81:8a:66:a5:b6:60:0a:04:94:3a:12:10:e7:
         9f:6a:02:fe:45:8c:b7:16:6c:a1:7d:7d:c6:72:3a:c1:5c:01:
         84:e0:33:66:ae:cc:fe:e6:22:50:69:a2:13:9e:a7:ff:f4:33:
         05:30:79:59:24:1d:00:eb:40:df:b9:6f:d8:52:6c:27:46:e7:
         f2:71:24:fa:86:06:4c:82:a0:21:89:16:9e:4c:a9:61:01:69:
         a7:19:9b:39:d8:a1:70:4f:55:36:51:bd:00:4d:cf:12:d8:5e:
         7f:fa:6d:f7:79:dd:72:e9:79:cf:06:9f:20:72:bb:9d:02:9e:
         b2:a3:d4:92:02:29:ba:88:bc:99:dd:c5:42:13:bb:cd:1f:7f:
         95:1b:ae:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:22:17 2024 by rpki-client on console-ams.rpki-client.org