Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/b5cc58f5-f50b-3df7-ad6b-55b61540bd31.roa
File:                     b5cc58f5-f50b-3df7-ad6b-55b61540bd31.roa (raw, json)
Hash identifier:          L2/MnYanVXS1htKucOdIv90FaDoe0iF3fIuD1nUHfNA=
Subject key identifier:   DA:9B:5D:01:C0:27:3E:AA:91:57:7E:AC:B9:8E:49:9A:CE:7A:F0:F6
Certificate issuer:       /CN=7746dca1-2236-41ce-ab1a-952e06f4769c
Certificate serial:       010D0C9F43285847362B59CE9FDC14EAE579EF00
Authority key identifier: 0A:E6:84:83:00:60:D5:76:67:3F:01:3B:83:A3:7B:45:F1:C2:1B:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/b5cc58f5-f50b-3df7-ad6b-55b61540bd31.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     27228
IP address blocks:        2602:fda4::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/7746dca1-2236-41ce-ab1a-952e06f4769c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/7746dca1-2236-41ce-ab1a-952e06f4769c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:59:ce:9f:dc:14:ea:e5:79:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7746dca1-2236-41ce-ab1a-952e06f4769c
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=508406cf-7bdc-4bf9-b71e-00492c74638a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:32:4e:23:0a:b6:fb:0c:94:ca:d1:7f:58:ab:
                    f5:c2:2d:9d:f1:1d:03:a8:a9:80:c8:9a:6f:7c:13:
                    0d:2b:05:9c:31:c7:72:09:bd:71:a4:7c:f1:c2:9c:
                    2c:0e:2d:aa:38:c3:df:55:4f:dc:fd:10:c3:56:06:
                    c2:07:d0:b9:21:d4:78:e6:06:1f:ff:87:ef:95:27:
                    15:95:ed:84:d1:10:02:b8:3f:e7:56:20:2b:c6:ea:
                    f2:88:a3:69:b5:94:3d:90:c4:63:03:be:9d:1d:61:
                    cc:a0:f2:14:7c:f5:35:13:af:94:30:20:3c:12:c1:
                    e9:67:d5:4e:81:b8:5a:da:be:10:99:b0:f1:9c:71:
                    61:59:fc:e2:26:4c:87:e9:ca:cf:6d:bb:0d:5d:75:
                    43:89:37:66:42:dd:c5:36:17:0c:04:07:b7:5c:c4:
                    58:60:d8:c8:a4:92:73:8e:ef:fa:83:f0:9d:87:8e:
                    bc:ee:f2:34:88:ff:86:d7:e2:e3:9e:94:46:da:97:
                    f9:65:4e:90:68:d4:9d:ce:7c:26:85:f1:a2:4b:74:
                    c1:7b:25:a6:fe:0b:e9:00:f3:b9:eb:c1:c9:ab:b0:
                    f6:88:f1:23:ab:d9:89:3f:60:8c:89:21:2b:18:3d:
                    74:fa:25:02:ab:e9:72:cc:6f:4b:b1:26:02:75:97:
                    08:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9B:5D:01:C0:27:3E:AA:91:57:7E:AC:B9:8E:49:9A:CE:7A:F0:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/b5cc58f5-f50b-3df7-ad6b-55b61540bd31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/7746dca1-2236-41ce-ab1a-952e06f4769c.crl

            X509v3 Authority Key Identifier:
                keyid:0A:E6:84:83:00:60:D5:76:67:3F:01:3B:83:A3:7B:45:F1:C2:1B:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fda4::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:f2:37:d3:f0:e9:83:ff:6c:63:48:e1:e6:4c:87:85:52:55:
         62:0a:22:5d:81:94:5f:c1:ae:46:6d:a9:df:b4:3a:f5:4b:a4:
         08:b7:9b:b2:0c:94:f6:56:e1:9d:9c:5c:59:7e:3f:45:ed:61:
         9b:ef:4f:4d:e9:d0:99:3a:8b:d2:d2:2c:8c:ca:ac:7d:4c:3f:
         b2:aa:a5:76:93:b3:02:4f:d1:0c:01:cf:fe:08:0f:2f:54:70:
         1e:75:de:17:f8:3b:7c:68:55:15:83:85:9b:69:0b:82:b2:69:
         87:6c:5c:4c:e9:3a:23:f5:e2:e7:2a:f6:c4:92:45:62:ca:4b:
         92:4c:3c:42:d8:b7:c4:e3:b2:fc:96:aa:39:7b:60:c9:b4:4d:
         d0:58:5f:c2:12:68:e8:90:56:eb:a2:a5:49:1f:15:50:ce:9b:
         30:b9:09:d1:ac:7a:4a:a6:46:49:16:59:e3:f2:57:86:96:37:
         fd:65:97:7c:55:99:bd:98:cf:68:18:7c:e5:34:0b:1a:87:94:
         ab:11:99:de:5a:79:06:22:de:35:64:0e:f0:70:a1:ba:c6:bb:
         c3:bc:e5:fa:87:a3:64:41:7b:cd:83:8c:3e:19:29:95:33:a5:
         5a:2a:12:b0:59:eb:5e:b4:fa:95:b4:c9:03:aa:97:2d:b4:17:
         c1:8c:69:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:11:59 2024 by rpki-client on console-ams.rpki-client.org