Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/0dddb317-e068-304d-a813-9a6f7126fb75.roa
File:                     0dddb317-e068-304d-a813-9a6f7126fb75.roa (raw, json)
Hash identifier:          Ux7UVidNc2dVekvubsMsWARuhRaXyxby3BRvpE9Xi9k=
Subject key identifier:   79:50:1C:D8:5C:70:78:81:9E:C0:32:AD:21:B9:A3:CB:92:B1:0C:A0
Certificate issuer:       /CN=ccdced21-8f04-4273-8f8a-07593c3968fb
Certificate serial:       010D0C9F43285847D834C3C0D1480022B2E89F80
Authority key identifier: B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/0dddb317-e068-304d-a813-9a6f7126fb75.roa
Signing time:             Mon 11 Nov 2024 14:00:39 +0000
ROA not before:           Mon 11 Nov 2024 14:00:39 +0000
ROA not after:            Sun 09 Feb 2025 14:00:39 +0000
asID:                     401243
IP address blocks:        2602:2b5::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d8:34:c3:c0:d1:48:00:22:b2:e8:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccdced21-8f04-4273-8f8a-07593c3968fb
        Validity
            Not Before: Nov 11 14:00:39 2024 GMT
            Not After : Feb  9 14:00:39 2025 GMT
        Subject: CN=57e8cd46-ddeb-435e-ab5e-0b4f293c097f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c5:7d:9f:cc:5e:f7:fa:b5:f0:c1:29:35:07:
                    dc:fc:27:cd:9c:98:93:fa:de:7b:c1:20:7d:e0:7d:
                    d5:f6:d2:f2:c0:51:52:1a:7a:47:01:e6:61:f3:bf:
                    d6:3a:c6:71:39:7c:a1:35:55:6a:7b:10:49:2e:1d:
                    74:39:57:33:c5:06:4b:12:e7:04:35:ed:36:8d:2b:
                    40:3f:ae:16:9e:e3:96:e1:93:3f:17:9c:77:14:e8:
                    51:56:cf:b7:fa:d2:40:ac:b6:16:6b:da:e9:d6:ab:
                    94:1b:78:69:f2:98:8e:0e:ac:d1:0e:2e:31:d7:ee:
                    b6:41:11:fe:c1:d5:89:c8:95:cd:8c:f7:a3:5b:cd:
                    2c:f9:b8:ad:7c:59:3a:7f:83:6e:fd:e3:d1:fc:c2:
                    7e:69:0c:2f:20:1c:4e:83:ef:bd:8b:22:4a:aa:f4:
                    0c:b6:84:6c:8f:40:a3:c5:e1:ba:df:4c:79:11:6c:
                    62:ec:51:fd:6f:59:78:18:c8:6a:84:80:8b:40:2a:
                    d3:a1:11:15:5a:c6:de:e5:8b:ed:df:64:6a:5d:29:
                    c5:cf:a0:6a:23:37:6a:85:ff:86:9b:c4:49:1a:9e:
                    a7:b4:1e:ce:9a:92:12:87:0c:23:01:85:68:66:a5:
                    9a:9e:6c:7b:51:88:17:df:d7:d1:07:41:a2:51:f1:
                    f0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:50:1C:D8:5C:70:78:81:9E:C0:32:AD:21:B9:A3:CB:92:B1:0C:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/0dddb317-e068-304d-a813-9a6f7126fb75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl

            X509v3 Authority Key Identifier:
                keyid:B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2b5::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:2f:b9:7f:ad:20:c7:8c:8a:b8:13:6b:a7:28:2c:48:8d:1c:
         2d:fb:8a:d7:d8:62:b7:84:8e:69:97:3b:47:4a:d8:83:10:63:
         3b:c8:26:19:a5:13:29:18:39:95:65:18:64:25:34:8b:e3:aa:
         a0:1b:94:e1:01:c4:9c:bc:4d:0b:50:b8:41:19:95:e7:51:1b:
         f4:94:a8:36:b0:58:0d:a2:e8:94:a6:b0:d9:94:ca:f3:8c:38:
         07:6a:75:b9:a2:24:46:e9:d0:37:5c:f3:b5:53:ae:1b:55:67:
         e9:1a:08:dc:d2:01:5f:20:2b:fe:ac:4f:52:ed:24:20:f1:b6:
         b3:a9:b7:59:98:0a:62:a0:28:9d:55:7f:35:b9:aa:29:17:2c:
         42:97:68:33:9e:1d:b9:c8:bb:7b:ea:59:b5:e7:f9:2e:0f:7f:
         e7:7a:cd:7a:4f:04:fc:8e:52:95:da:77:13:3b:26:b6:71:b0:
         25:b0:a4:83:eb:a6:b0:39:81:3c:c2:47:dc:d8:cc:76:69:96:
         26:73:1b:69:69:86:36:0c:bd:7a:c3:5c:aa:65:a1:68:7e:2d:
         12:8f:54:86:27:ac:89:f6:6a:fd:61:cf:d1:b6:6f:5f:40:30:
         02:db:96:35:e7:ac:c9:c4:03:3b:71:48:cd:6a:52:4e:ea:a4:
         eb:da:1b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:14:34 2024 by rpki-client on console-fra.rpki-client.org