Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/2fe799dd-cf9b-3bf0-a756-5decdff34ace.roa
File:                     2fe799dd-cf9b-3bf0-a756-5decdff34ace.roa (raw, json)
Hash identifier:          xdyVLt3LFe2YriE/dPlIVsVutVku84MNX0M9LeoBQqQ=
Subject key identifier:   32:65:EC:66:41:24:B8:27:B7:06:22:6E:F6:CB:73:79:6A:BD:A1:D8
Certificate issuer:       /CN=ccdced21-8f04-4273-8f8a-07593c3968fb
Certificate serial:       010D0C9F43285847C344840AC8D83C706E4D0840
Authority key identifier: B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/2fe799dd-cf9b-3bf0-a756-5decdff34ace.roa
Signing time:             Mon 04 Nov 2024 02:00:36 +0000
ROA not before:           Mon 04 Nov 2024 02:00:36 +0000
ROA not after:            Sun 02 Feb 2025 02:00:36 +0000
asID:                     401243
IP address blocks:        2602:2b5:10::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c3:44:84:0a:c8:d8:3c:70:6e:4d:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccdced21-8f04-4273-8f8a-07593c3968fb
        Validity
            Not Before: Nov  4 02:00:36 2024 GMT
            Not After : Feb  2 02:00:36 2025 GMT
        Subject: CN=c41ca5aa-8549-43bb-9c39-a9d3bf781952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0e:7d:4e:6c:00:b2:39:12:98:bb:c3:56:4e:
                    78:17:49:0f:cd:65:8f:12:d1:85:36:4a:92:a9:f1:
                    7e:77:d0:e2:cb:c6:40:ac:93:b0:65:68:37:6d:4c:
                    3f:eb:67:8b:bb:95:a2:b4:ba:6c:21:64:e3:7a:68:
                    6e:e4:46:bc:8a:e5:e2:ba:3f:3f:b3:6c:5c:d5:54:
                    ce:35:54:a7:11:60:8b:4c:f1:63:a3:1c:98:53:5d:
                    db:f1:ea:a6:ef:95:83:08:ef:24:1e:84:de:3d:fe:
                    65:6a:e2:f0:9f:f4:33:71:1a:25:19:5f:03:37:1b:
                    dc:ef:3b:61:cf:34:ef:16:0a:bc:37:49:b1:d1:71:
                    eb:d1:33:e3:1b:f6:04:e7:df:b9:e9:1a:3c:d8:0c:
                    21:c2:f7:05:ff:c7:d8:dd:d2:59:23:45:cb:64:de:
                    46:2e:53:70:57:06:1b:53:1c:79:9a:bc:55:8c:31:
                    e6:8d:ee:81:7f:19:72:9e:31:7d:72:2e:07:03:8c:
                    d4:b4:9d:4a:3d:8a:fa:0c:9a:5c:ee:00:3d:9e:8f:
                    1e:56:5f:06:fb:11:96:35:ee:61:b2:e5:34:67:5d:
                    a4:79:4f:78:a5:28:3f:a3:f9:8a:b7:72:9b:5e:f0:
                    e8:a2:92:ec:dc:24:4a:da:25:e5:7a:41:6a:c0:f5:
                    73:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:65:EC:66:41:24:B8:27:B7:06:22:6E:F6:CB:73:79:6A:BD:A1:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/2fe799dd-cf9b-3bf0-a756-5decdff34ace.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl

            X509v3 Authority Key Identifier:
                keyid:B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2b5:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:bf:10:51:cb:02:64:58:36:b2:89:1b:14:07:ce:51:c5:d7:
         06:57:26:c5:6f:0c:63:d4:89:9c:f8:b6:1a:ae:52:f2:41:5f:
         81:ed:0c:3d:87:96:e5:07:9f:0a:10:5a:56:88:7b:4e:f6:d0:
         97:4d:52:1d:a3:1f:16:c2:88:34:80:98:f9:8f:64:bc:b2:d1:
         5c:53:3d:4e:2d:bd:c5:6c:62:5d:bb:45:ed:18:8e:e4:d5:5a:
         f3:e5:37:83:98:7a:25:ec:4f:77:be:a0:f9:7f:f3:b3:66:81:
         ba:17:28:f0:82:01:b0:91:58:e3:07:c9:75:92:4a:a1:ba:92:
         84:eb:1c:f5:3d:92:0a:f7:88:de:42:a4:d0:aa:e4:c8:a5:df:
         3f:5f:07:99:20:6a:22:fe:fc:da:40:0b:df:5a:1a:04:e4:49:
         2d:3f:e6:13:65:29:a3:d0:6a:c8:9a:1c:81:23:30:d1:a2:b4:
         af:fa:95:de:cb:5a:75:77:a7:c5:ce:af:93:fb:fc:eb:76:66:
         c6:77:57:8b:27:2a:68:5f:82:4a:26:16:38:d4:ed:fc:c5:92:
         24:9d:33:18:1a:bd:b4:15:2c:70:70:23:c0:ad:c1:57:6d:8d:
         a1:e5:c3:c1:b7:c2:5b:89:99:1a:96:fe:a7:38:00:f9:3e:32:
         2e:fb:b9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:05:46 2024 by rpki-client on console-ams.rpki-client.org