Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/b37ece31-b7a6-37ec-9136-0a25a3f8b8bb.roa
File:                     b37ece31-b7a6-37ec-9136-0a25a3f8b8bb.roa (raw, json)
Hash identifier:          65HW9RaBBCjzU77Wg9En1Bohgmb1IbGSrGJu5uNpMyw=
Subject key identifier:   61:2A:89:4A:BC:FD:E1:54:43:EE:77:3A:ED:51:C4:EA:40:00:8D:8B
Certificate issuer:       /CN=8b56caea-2136-4342-baff-6f31268d4cc4
Certificate serial:       010D0C9F432858477BF669813C6FC00D20AE2320
Authority key identifier: 5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/b37ece31-b7a6-37ec-9136-0a25a3f8b8bb.roa
Signing time:             Wed 09 Oct 2024 13:00:42 +0000
ROA not before:           Wed 09 Oct 2024 13:00:42 +0000
ROA not after:            Tue 07 Jan 2025 14:00:42 +0000
asID:                     49585
IP address blocks:        2602:faaf:5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:f6:69:81:3c:6f:c0:0d:20:ae:23:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b56caea-2136-4342-baff-6f31268d4cc4
        Validity
            Not Before: Oct  9 13:00:42 2024 GMT
            Not After : Jan  7 14:00:42 2025 GMT
        Subject: CN=c8ee89cb-a3c7-4011-b04a-00e68ea454ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fb:54:8b:3d:4e:3f:3b:5c:ab:c6:81:c9:31:
                    db:3d:27:b6:df:59:35:11:4d:3a:c2:b9:dd:fa:89:
                    4e:59:31:75:77:04:71:02:23:3c:fa:d3:38:3d:fe:
                    68:09:32:a9:23:36:af:8b:a3:17:36:15:aa:c3:85:
                    78:09:3a:c0:d2:a8:83:11:06:2f:61:16:3e:48:50:
                    88:16:e2:04:cb:ed:1a:13:69:1f:1c:7b:85:f5:69:
                    f2:59:72:0b:d3:d4:b2:ea:26:4a:28:3b:28:82:63:
                    9e:3c:79:ab:77:5b:38:d0:43:2c:58:04:09:d1:71:
                    26:5c:3a:8b:18:0c:83:d7:38:40:33:7b:9e:d1:6a:
                    76:69:7e:87:b8:42:ce:c8:f4:b6:92:33:f6:df:70:
                    fd:e6:fa:6b:25:32:d9:20:bb:00:2d:c7:b8:50:2e:
                    93:91:03:a7:bf:57:76:2a:0b:81:a2:4b:03:31:80:
                    d5:f4:71:ac:18:b6:37:b1:e5:af:2d:19:83:1d:a3:
                    c7:bd:5b:4f:00:9c:5d:07:46:89:ea:0d:87:b3:84:
                    20:26:e2:55:70:1f:cc:a5:5c:81:96:63:6a:90:94:
                    2a:a4:71:cf:68:58:3e:56:27:1d:6e:e6:37:87:e7:
                    8f:58:66:68:12:93:a2:a4:b3:0e:3c:a0:96:28:0b:
                    19:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:2A:89:4A:BC:FD:E1:54:43:EE:77:3A:ED:51:C4:EA:40:00:8D:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/b37ece31-b7a6-37ec-9136-0a25a3f8b8bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.crl

            X509v3 Authority Key Identifier:
                keyid:5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faaf:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:2c:1e:ee:45:ff:69:05:09:bb:94:95:c3:4c:36:b2:e7:d3:
         04:ef:5a:b7:00:69:0b:12:dc:3b:53:31:0c:0c:9a:86:c0:e3:
         cf:fd:88:70:ba:de:4e:89:35:43:3f:53:02:bc:c8:ff:03:c2:
         d2:bf:6b:63:24:21:09:b1:0a:15:52:1c:1d:36:1e:07:e1:af:
         09:04:75:b4:0e:1a:47:54:dd:16:ea:16:29:4f:fc:59:a1:1f:
         40:61:9d:ad:21:3f:4c:0c:3c:21:76:7d:8f:e3:22:6e:fa:ac:
         40:f4:5a:57:d9:c4:74:01:fd:66:75:c8:6a:f1:30:96:e5:93:
         6f:c6:fa:73:3c:66:ad:57:eb:36:4b:99:44:39:67:94:45:0e:
         2a:be:3e:fa:61:ef:9c:9d:ef:1e:a1:8e:58:f6:3b:ae:47:0a:
         a4:59:a0:58:86:13:d4:4b:d3:8a:4c:ca:6a:49:c6:5d:47:9a:
         83:c3:37:0a:4f:39:46:ec:ef:07:df:71:cd:ee:31:f5:67:7c:
         44:0c:f1:32:25:99:22:eb:02:83:d1:b8:3b:6f:7c:80:5f:af:
         a2:37:4b:e4:05:15:d5:4d:95:da:55:3f:ab:ac:fb:49:52:94:
         bf:8c:45:ea:92:2c:24:a2:e9:7c:db:28:4c:91:38:09:d0:98:
         b8:57:eb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:01:30 2024 by rpki-client on console-fra.rpki-client.org