Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/85f2ee15-c93c-36b9-b51d-dba0e55b61b1.roa
File:                     85f2ee15-c93c-36b9-b51d-dba0e55b61b1.roa (raw, json)
Hash identifier:          G6HUuJgO7oMYpjQt4h2b8zMs1AbLjBty0ZOErbd9c4c=
Subject key identifier:   D9:A3:03:91:B4:90:AA:94:4F:0A:92:B3:CA:C5:F5:53:DB:B6:A4:02
Certificate issuer:       /CN=ab1101f4-a527-459b-8c16-d78b261e6de3
Certificate serial:       010D0C9F432858471E7062EC0D0681C89EC10F00
Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/85f2ee15-c93c-36b9-b51d-dba0e55b61b1.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        2602:277:d00::/47 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:62:ec:0d:06:81:c8:9e:c1:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=c9ffc248-ecc6-4c31-9356-1256543a97b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2d:45:2f:7c:59:eb:4f:6e:fa:3f:87:33:6b:
                    30:6f:d1:27:18:39:19:88:f3:5b:0c:9c:1a:a2:bb:
                    1d:f3:65:83:b9:eb:35:45:bd:e3:48:33:81:13:40:
                    12:12:05:a3:b8:0d:e8:de:ba:1f:d0:6c:64:e2:c8:
                    db:36:9a:f0:23:35:76:ff:53:6b:79:3a:17:6d:2b:
                    74:eb:35:b5:77:65:07:e0:9d:ac:10:00:f2:62:01:
                    83:b3:45:e6:97:77:24:86:13:93:6f:90:8f:a0:58:
                    07:35:62:83:93:a0:ed:53:ec:a1:1f:02:20:67:2f:
                    85:97:40:fd:db:05:45:cc:9b:82:d7:de:7d:e1:4d:
                    c9:33:c4:75:83:d4:82:ae:54:a1:c9:16:5a:b6:97:
                    da:c0:52:dc:e3:29:57:e9:2e:eb:7b:2e:4b:13:a5:
                    5a:cb:a1:cc:c3:e4:5f:a9:c5:b2:df:7c:45:a8:78:
                    b3:6d:c8:b2:88:46:a6:24:b8:a1:87:10:2f:b6:76:
                    78:70:ac:0e:18:b8:7d:3e:88:da:97:1d:d9:f5:16:
                    28:98:2d:aa:60:3f:46:84:e5:05:b4:69:09:3c:31:
                    38:16:d7:0b:bb:70:19:d7:ea:c8:40:11:49:3e:00:
                    c6:4f:cd:f2:57:97:3c:5c:f8:ef:8d:6a:cc:e5:a8:
                    57:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A3:03:91:B4:90:AA:94:4F:0A:92:B3:CA:C5:F5:53:DB:B6:A4:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/85f2ee15-c93c-36b9-b51d-dba0e55b61b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl

            X509v3 Authority Key Identifier:
                keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:277:d00::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:1d:72:ab:61:ba:57:3f:35:ab:47:b2:d9:c8:50:53:28:f8:
         bf:db:40:29:37:91:2e:19:7e:b6:2a:6a:f8:2a:e7:29:c8:35:
         6d:ca:ee:97:9c:c2:83:59:65:f6:91:d1:eb:a1:7c:c1:85:4b:
         8c:16:f1:93:fe:b3:2d:55:d9:a1:98:d4:ad:8f:23:06:dd:b5:
         88:69:5a:d5:f7:17:63:9b:4a:49:4c:e1:20:02:af:7d:fe:c5:
         be:64:d0:ec:80:0a:5e:e9:cf:c5:c0:f6:33:c2:b0:db:e1:8a:
         38:b7:bf:51:5f:32:d7:9d:ff:c0:08:60:ce:43:ef:68:d4:e3:
         5d:61:e7:10:ce:d7:4c:98:73:dc:9e:77:40:1d:ee:dd:fb:4e:
         1b:e9:82:0d:05:77:31:53:f6:35:b5:65:3a:27:47:3f:5b:d9:
         64:fe:89:5f:89:d7:9d:df:97:1a:49:34:b2:8f:f0:52:1c:48:
         1f:4f:72:5f:43:5a:ff:8e:12:dc:7a:22:01:da:38:30:61:dc:
         34:b8:e8:0c:9a:e3:ce:fa:f2:aa:43:32:88:c5:e7:5a:09:24:
         dd:5f:62:c6:37:2a:37:eb:3c:df:fa:ab:bd:d1:a0:ee:85:1a:
         ec:d9:7b:95:d0:b9:ff:27:30:b6:d7:a9:39:24:98:ac:84:56:
         24:73:19:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:41 2024 by rpki-client on console-fra.rpki-client.org