Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/2bc2e026-ed3b-3b6a-b54e-b115e2343099.roa
File:                     2bc2e026-ed3b-3b6a-b54e-b115e2343099.roa (raw, json)
Hash identifier:          r1yTgthRubkQ0ula7dIBl7uV1Av1vTB1dS6emy3yj/g=
Subject key identifier:   A8:A1:CE:05:93:36:5B:03:CB:E0:ED:A9:3D:51:A5:8D:A6:F3:08:9E
Certificate issuer:       /CN=91a20fbd-d241-4454-b2ba-4938f807efb0
Certificate serial:       010D0C9F43285847DDCA0AF49BD455D67BFCFAB0
Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/2bc2e026-ed3b-3b6a-b54e-b115e2343099.roa
Signing time:             Wed 13 Nov 2024 14:00:39 +0000
ROA not before:           Wed 13 Nov 2024 14:00:39 +0000
ROA not after:            Tue 11 Feb 2025 14:00:39 +0000
asID:                     26768
IP address blocks:        2602:2a4:9b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dd:ca:0a:f4:9b:d4:55:d6:7b:fc:fa:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0
        Validity
            Not Before: Nov 13 14:00:39 2024 GMT
            Not After : Feb 11 14:00:39 2025 GMT
        Subject: CN=df03a33b-5350-48ec-a834-dfb86f87a724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:34:24:6a:fe:db:90:7b:3b:66:70:64:92:16:
                    ca:fd:0e:36:f6:9f:a5:02:9f:65:93:64:d7:fc:e1:
                    2a:fa:41:49:41:28:4b:b7:e8:42:6a:5b:7b:79:de:
                    b5:5f:90:f9:ab:0f:29:ad:3b:76:15:ce:d8:bb:26:
                    9a:ff:a5:a2:1f:62:fa:99:92:ec:57:8b:29:7c:27:
                    9a:0a:dc:fd:ce:c9:28:6e:19:b6:04:ed:de:85:e8:
                    15:82:66:65:26:1f:8b:89:72:e8:e0:4b:1c:ea:53:
                    5f:51:ed:f0:9f:fe:90:1c:b7:b2:a7:28:31:52:39:
                    09:47:c5:e3:c0:fe:d1:95:0c:e7:b5:2c:80:04:17:
                    00:ab:28:57:7b:45:1a:7a:4b:d5:18:e8:f2:3c:44:
                    2e:28:d7:a6:4a:4f:25:0e:01:5c:20:ab:53:ac:a4:
                    9d:48:b7:c2:ea:b4:c4:2c:e1:23:03:00:e0:31:4d:
                    de:fd:fa:42:6a:5f:aa:7f:a1:4c:21:fe:98:ce:06:
                    20:3d:34:65:eb:31:60:15:b1:69:58:65:ff:ae:6e:
                    d5:0c:83:ec:17:ab:02:5f:b2:ca:05:dc:fb:d9:1e:
                    88:11:c8:81:a5:a6:3d:a1:3a:25:8f:f1:9d:26:5c:
                    70:03:c3:cd:2b:56:cd:87:33:26:ae:d6:66:bd:cf:
                    b1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A1:CE:05:93:36:5B:03:CB:E0:ED:A9:3D:51:A5:8D:A6:F3:08:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/2bc2e026-ed3b-3b6a-b54e-b115e2343099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a4:9b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:6f:54:bb:32:35:b3:67:57:45:c8:f5:69:01:12:bc:a7:b3:
         ef:c8:a3:44:a9:1f:62:52:f5:ac:b6:4a:aa:54:5a:ef:41:5a:
         6b:41:c4:cd:46:2f:33:08:cc:49:3f:56:70:7e:b7:7a:93:3c:
         6d:ef:2f:7f:b0:26:84:0d:3a:c6:1e:ec:8a:2d:ea:50:75:65:
         af:63:82:87:ba:f4:7f:e1:38:1c:79:86:70:81:35:15:93:49:
         1d:3a:32:a6:93:21:a8:53:e7:a8:d7:7e:1e:11:30:5e:f9:a3:
         81:03:61:88:9d:ff:71:82:ea:9d:59:25:4b:89:37:cd:12:b2:
         03:d6:3a:77:bd:99:e6:dc:a7:a4:9a:ce:0e:61:5a:70:66:9d:
         9f:01:4c:6a:d6:54:5f:c0:01:75:34:a1:39:1c:ed:ac:19:ac:
         8b:a5:63:a1:65:11:46:38:10:50:fe:62:34:37:89:94:c7:84:
         d8:0e:37:4c:d8:5c:67:90:24:ee:77:c8:e7:90:ca:b6:65:7a:
         14:93:2a:ac:0e:9d:ad:5e:5f:39:3b:47:60:d8:ce:72:2b:39:
         23:33:ac:e8:03:99:db:a7:41:35:e4:87:80:31:90:33:dc:7e:
         73:c2:9b:70:75:17:20:7a:a7:1b:0d:a6:65:2f:0d:24:81:87:
         2e:11:dc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:27 2024 by rpki-client on console-ams.rpki-client.org