Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/9dada9a7-7f65-3c0c-aad3-0a897433de44.roa
File:                     9dada9a7-7f65-3c0c-aad3-0a897433de44.roa (raw, json)
Hash identifier:          TwyV/AtxmvwZhfen9AAnfCK1bPLwrDdn5sjOw7w8fzM=
Subject key identifier:   05:94:3B:1E:0D:E2:DF:DB:F9:02:EB:05:FA:19:6A:14:05:6A:F9:EC
Certificate issuer:       /CN=6cd3c550-5bde-4569-b35d-a3ea570cff1c
Certificate serial:       010D0C9F43285848416750CE09056833CA18D340
Authority key identifier: EC:FB:ED:3F:7D:04:AA:80:ED:9C:2E:51:A2:79:D6:32:62:7F:10:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/9dada9a7-7f65-3c0c-aad3-0a897433de44.roa
Signing time:             Thu 19 Dec 2024 06:22:36 +0000
ROA not before:           Thu 19 Dec 2024 06:22:36 +0000
ROA not after:            Wed 19 Mar 2025 05:22:36 +0000
asID:                     15082
IP address blocks:        2602:f78b:a00::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/6cd3c550-5bde-4569-b35d-a3ea570cff1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/6cd3c550-5bde-4569-b35d-a3ea570cff1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:41:67:50:ce:09:05:68:33:ca:18:d3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cd3c550-5bde-4569-b35d-a3ea570cff1c
        Validity
            Not Before: Dec 19 06:22:36 2024 GMT
            Not After : Mar 19 05:22:36 2025 GMT
        Subject: CN=051545d6-fc23-4862-9954-111a41c7a557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9a:58:69:45:2f:2a:65:e0:01:1f:3c:0d:ea:
                    dc:31:a7:6a:63:8b:68:4f:d2:b3:42:54:e7:05:6c:
                    ac:8b:5f:e9:4e:69:1c:e5:19:41:ca:01:7c:79:24:
                    3c:9b:06:f9:27:32:18:91:ae:c5:d5:dd:5b:d6:58:
                    15:a6:b4:43:e3:98:17:27:8b:90:fc:0a:20:9b:f4:
                    90:f0:e4:19:41:88:89:9e:e5:9d:96:a2:11:eb:c7:
                    32:7a:1d:82:dd:83:5f:b9:5d:c1:eb:be:aa:36:95:
                    0c:21:a0:70:38:e8:f4:31:f0:54:9c:3f:77:fe:75:
                    f7:31:69:fa:ba:d6:71:82:6b:9e:54:79:64:a3:ed:
                    6d:ce:83:a7:78:a7:27:dd:b4:dd:e5:fe:f5:aa:68:
                    d7:f2:df:24:a0:df:c2:b0:b7:70:f8:b0:ad:ea:4a:
                    23:f8:49:f9:39:7e:f5:94:99:36:c0:de:da:e8:f5:
                    08:a4:dc:8a:e0:75:0a:50:2d:ed:47:54:77:87:5e:
                    f0:fa:dd:84:f4:cf:e7:3b:c9:37:47:ff:cc:3d:95:
                    47:bc:d2:9c:66:42:ac:ed:36:b7:ae:99:23:42:98:
                    90:9a:68:9c:0d:4d:0e:b6:c9:e9:ba:a3:59:73:d7:
                    40:df:c0:9d:d1:88:30:42:93:e3:60:a6:74:7c:d6:
                    36:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:94:3B:1E:0D:E2:DF:DB:F9:02:EB:05:FA:19:6A:14:05:6A:F9:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/9dada9a7-7f65-3c0c-aad3-0a897433de44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/6cd3c550-5bde-4569-b35d-a3ea570cff1c.crl

            X509v3 Authority Key Identifier:
                keyid:EC:FB:ED:3F:7D:04:AA:80:ED:9C:2E:51:A2:79:D6:32:62:7F:10:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f78b:a00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:bd:30:83:39:c8:67:30:04:97:21:cc:f3:f9:65:43:ec:2f:
         cf:68:46:de:03:f8:c8:a5:7f:2c:ff:46:84:f9:da:7f:22:8f:
         5e:5f:6c:64:cf:57:00:b2:55:66:de:02:aa:5f:a8:4f:fe:fb:
         77:51:1c:c9:85:7c:d1:36:86:1d:a6:5d:a2:bd:d1:5a:32:43:
         91:34:a5:1b:90:cc:af:f3:87:e7:53:4c:a0:43:d3:11:2d:b6:
         be:4f:1b:7c:2f:a7:14:cf:e2:3c:1c:e9:23:80:7c:3f:a8:43:
         12:0c:1c:60:b9:43:17:58:9e:6c:36:52:39:c9:24:74:59:72:
         7b:fc:54:bd:fb:29:8b:81:e7:5a:9a:6e:35:57:8e:f6:06:f6:
         97:d1:61:8b:41:dd:64:8a:3c:35:17:09:f0:3d:f9:3a:7f:6c:
         11:7b:c5:51:e1:e3:70:2c:c8:c0:bb:26:33:03:06:5c:1e:f3:
         73:78:05:68:a6:e1:04:ba:ac:8b:80:19:70:27:21:04:a5:48:
         fb:b7:ec:1f:5a:a4:d3:c6:95:d2:d3:51:6b:b8:7a:07:b7:43:
         e1:82:d3:98:8b:ad:60:2e:d8:ca:92:68:38:82:bc:24:97:78:
         c9:29:89:37:0f:f1:e0:ad:21:8f:a5:f4:c0:31:32:c9:af:e9:
         ac:f3:da:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 28 02:49:17 2024 by rpki-client on console-ams.rpki-client.org