Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc531289-e97e-4da3-a7d9-a36ddfc34cdf/57d164f6-e56b-3dfa-8c77-a5f9ae7ec960.roa
File:                     57d164f6-e56b-3dfa-8c77-a5f9ae7ec960.roa (raw, json)
Hash identifier:          bNPEVV0b1ICMBYLVMo360Xv6y0ghVqs+MNYrBtuhQjo=
Subject key identifier:   F5:7C:ED:BC:9D:D3:B4:87:AB:99:37:20:94:77:73:83:07:3C:9A:C9
Certificate issuer:       /CN=bc531289-e97e-4da3-a7d9-a36ddfc34cdf
Certificate serial:       010D0C9F43285847D999EEE046EB241C3BF9A400
Authority key identifier: 0B:90:22:7D:07:1F:F7:BB:3E:CA:84:48:84:2D:38:AB:65:6A:FD:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc531289-e97e-4da3-a7d9-a36ddfc34cdf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc531289-e97e-4da3-a7d9-a36ddfc34cdf/57d164f6-e56b-3dfa-8c77-a5f9ae7ec960.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     394446
IP address blocks:        2602:fd1a::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc531289-e97e-4da3-a7d9-a36ddfc34cdf/bc531289-e97e-4da3-a7d9-a36ddfc34cdf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc531289-e97e-4da3-a7d9-a36ddfc34cdf/bc531289-e97e-4da3-a7d9-a36ddfc34cdf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc531289-e97e-4da3-a7d9-a36ddfc34cdf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:99:ee:e0:46:eb:24:1c:3b:f9:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc531289-e97e-4da3-a7d9-a36ddfc34cdf
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=d20acbd2-62ef-41f8-ad28-d1657e08776a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f8:17:83:30:4b:b8:90:2f:28:ac:b5:9c:46:
                    7b:f0:eb:26:91:87:01:7b:7b:04:7e:17:9d:50:85:
                    f6:40:fe:58:37:d3:a6:1c:c4:3f:74:b9:e0:d9:7a:
                    9d:b7:0c:62:46:33:3d:45:e9:d5:38:38:49:81:3a:
                    34:7e:b9:b1:65:d6:98:02:e0:8c:83:99:16:ad:0f:
                    d0:41:7a:57:c0:dd:69:96:01:eb:9f:b1:6d:82:57:
                    03:6e:ff:98:49:0b:26:67:90:61:59:b3:d7:04:a5:
                    f7:48:e9:30:52:08:36:9f:43:22:dc:0d:ca:d2:82:
                    14:df:1c:d5:74:86:1e:2f:6f:e2:23:71:61:d8:f0:
                    70:f9:6c:f2:5f:db:8d:69:bc:0b:5c:3c:a6:69:60:
                    35:2b:a4:2a:46:a4:6c:0e:ce:85:2f:a3:55:c0:d5:
                    12:a5:a9:74:70:9a:af:72:1d:54:75:0a:11:ac:cf:
                    4f:fc:6f:56:48:01:5d:81:19:58:72:d0:88:0c:a8:
                    9f:96:74:67:13:17:d0:5e:5c:96:84:08:4e:ff:ec:
                    1a:df:01:92:c3:bd:0c:fa:cc:06:ed:dc:e2:f2:40:
                    ca:da:a8:d5:c6:23:95:dc:a0:7e:24:f6:7b:c9:8e:
                    be:a3:27:ad:62:c6:75:6e:89:02:a1:75:68:a5:6f:
                    ea:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:7C:ED:BC:9D:D3:B4:87:AB:99:37:20:94:77:73:83:07:3C:9A:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc531289-e97e-4da3-a7d9-a36ddfc34cdf/57d164f6-e56b-3dfa-8c77-a5f9ae7ec960.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc531289-e97e-4da3-a7d9-a36ddfc34cdf/bc531289-e97e-4da3-a7d9-a36ddfc34cdf.crl

            X509v3 Authority Key Identifier:
                keyid:0B:90:22:7D:07:1F:F7:BB:3E:CA:84:48:84:2D:38:AB:65:6A:FD:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc531289-e97e-4da3-a7d9-a36ddfc34cdf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd1a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:51:ee:76:c0:32:34:91:c2:7e:ce:45:ef:b5:1e:c2:60:75:
         66:0d:a3:9a:fa:39:ae:a6:bd:8f:94:5e:ab:f3:1a:2b:46:8e:
         e4:98:13:fb:27:aa:4c:2a:96:8b:97:43:7b:77:44:26:97:7e:
         43:6e:f9:32:e5:ed:69:b0:79:ba:58:c9:d0:5e:01:af:1e:8f:
         5d:35:e0:b1:12:c0:42:22:f1:ca:3e:9f:ad:c7:a3:97:ff:07:
         87:42:69:7d:fc:1e:e4:d2:29:7e:a3:bc:30:9d:a0:a7:88:c2:
         24:e3:6f:bf:91:56:f8:ff:ee:b5:66:d5:c0:cf:04:38:04:53:
         03:34:8f:38:1f:9d:49:5b:e8:f9:b1:08:b7:3c:bd:6c:99:7d:
         f7:fa:c0:13:4a:2c:96:61:41:8a:29:23:9b:17:66:36:e2:a2:
         b4:07:16:42:50:aa:c4:1c:e8:02:f3:d3:a8:1b:e8:38:c0:c8:
         47:d9:99:f0:6c:50:12:30:2f:6d:28:f2:cf:da:0a:a2:2e:1c:
         5b:e8:b0:7f:59:98:87:be:cb:83:7c:22:2b:70:44:f5:5e:fe:
         87:eb:a2:35:25:4c:29:b8:46:5d:b0:03:72:86:06:4c:f1:b4:
         17:57:e0:be:6b:17:8e:5e:76:ac:8a:6d:ec:f0:3a:f0:42:26:
         04:86:a0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:01:58 2024 by rpki-client on console-fra.rpki-client.org