Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/7de7db70-a393-3d00-8071-c1e1fb1b4cd5.roa
File:                     7de7db70-a393-3d00-8071-c1e1fb1b4cd5.roa (raw, json)
Hash identifier:          dgVI7W46Cmby+Qk6YKLU/Cn3pIgUwsxtRjCoM8yqpzI=
Subject key identifier:   0C:D5:99:6C:E9:1E:9C:7F:96:F1:36:A1:EB:34:46:AD:37:CE:E5:AC
Certificate issuer:       /CN=a1a8e018-88f4-4067-935e-ef8e20a553c5
Certificate serial:       010D0C9F4328584782F10027BB690408C8442700
Authority key identifier: 75:EC:F0:71:97:E4:75:25:91:E8:D9:1B:9E:BC:AB:67:ED:5A:75:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/7de7db70-a393-3d00-8071-c1e1fb1b4cd5.roa
Signing time:             Sat 12 Oct 2024 01:00:32 +0000
ROA not before:           Sat 12 Oct 2024 01:00:32 +0000
ROA not after:            Fri 10 Jan 2025 02:00:32 +0000
asID:                     40701
IP address blocks:        2602:f965:10::/48 maxlen: 48
                          2602:f965:20::/48 maxlen: 48
                          2602:f965:30::/48 maxlen: 48
                          2602:f965:40::/48 maxlen: 48
                          2602:f965:50::/48 maxlen: 48
                          2602:f965:60::/48 maxlen: 48
                          2602:f965:70::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:82:f1:00:27:bb:69:04:08:c8:44:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1a8e018-88f4-4067-935e-ef8e20a553c5
        Validity
            Not Before: Oct 12 01:00:32 2024 GMT
            Not After : Jan 10 02:00:32 2025 GMT
        Subject: CN=2b475092-9fb0-494d-a80a-ad5f6c53e1cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:70:a4:be:35:9e:f2:26:be:71:a8:b0:dd:ed:
                    cb:6c:81:6d:2b:a9:02:f3:90:f1:77:dc:f1:ff:43:
                    87:84:da:31:35:06:af:60:52:e2:f1:d7:e0:1a:bd:
                    16:e2:51:03:f5:85:c3:59:cd:56:ee:91:86:56:ec:
                    ee:3a:6d:e9:16:ee:1b:19:c4:fb:b8:83:34:14:e9:
                    d4:68:2e:15:1a:66:b2:88:89:65:10:24:78:b6:8b:
                    01:e7:38:86:0b:d9:51:ff:12:3c:da:7f:d4:bd:66:
                    91:5f:93:16:8c:36:86:37:f2:31:4c:02:bf:17:3e:
                    ec:78:23:c3:31:a9:a7:a2:c8:18:9d:b8:5a:91:b7:
                    23:2c:d9:97:c5:93:6e:01:fd:02:f9:d9:a2:30:69:
                    82:e8:cc:d2:98:05:5e:9a:e9:ee:92:89:92:ee:aa:
                    04:62:30:09:85:71:91:9e:87:4b:be:18:f2:d5:b2:
                    f4:c9:29:72:7b:31:b3:5b:2e:87:0f:81:fd:07:95:
                    34:10:9f:d9:ed:0c:b8:9a:6e:5d:21:d8:75:89:ff:
                    7d:e3:87:1a:39:e3:d7:0a:f3:6d:fb:69:5a:67:83:
                    5d:ae:62:cf:c6:e8:03:68:42:3e:7f:7e:66:5a:4b:
                    3b:c7:2b:60:0a:b5:3e:3b:0f:12:c5:a6:dd:57:c1:
                    3e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D5:99:6C:E9:1E:9C:7F:96:F1:36:A1:EB:34:46:AD:37:CE:E5:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/7de7db70-a393-3d00-8071-c1e1fb1b4cd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.crl

            X509v3 Authority Key Identifier:
                keyid:75:EC:F0:71:97:E4:75:25:91:E8:D9:1B:9E:BC:AB:67:ED:5A:75:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f965:10::/48
                  2602:f965:20::/48
                  2602:f965:30::/48
                  2602:f965:40::/48
                  2602:f965:50::/48
                  2602:f965:60::/48
                  2602:f965:70::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:83:90:f4:c8:fa:60:e2:87:3f:47:ae:13:81:23:72:cc:2a:
         2d:cf:f7:48:bc:cc:59:e8:06:62:c6:41:c6:e2:cc:f2:91:30:
         0e:79:31:64:08:c8:f0:64:d6:91:c2:ec:c0:e0:40:56:b4:07:
         e5:62:23:86:67:0c:1f:2c:9f:cf:62:3c:d1:0b:93:b4:de:92:
         97:45:7b:11:a5:56:07:a9:f3:9f:96:61:b1:64:a9:f6:60:4d:
         1e:7a:88:9b:df:84:c4:9c:0b:09:e4:49:42:cd:9e:01:1f:ac:
         8a:e1:87:5e:1e:8d:0c:e3:47:8e:76:2f:17:e1:3b:c7:72:e6:
         c0:39:88:6e:af:d8:1e:fe:66:12:fd:6b:34:33:d3:0f:fc:06:
         de:a0:75:97:c6:c1:10:7f:9f:05:0e:7b:8b:49:64:5b:c8:ea:
         c2:1f:d8:61:62:8c:b8:f1:a8:5e:22:63:06:94:c8:fc:d1:84:
         3a:c7:da:17:7b:e9:bf:c4:fc:be:a8:30:71:78:1f:97:fd:29:
         0e:93:7b:41:13:f6:48:9a:ab:6a:f4:26:b0:bb:36:4c:96:25:
         e8:ca:46:0f:2c:01:24:dd:00:a2:1d:bb:dc:11:f3:4d:dd:3a:
         0c:b0:a5:11:64:fd:d1:55:fa:c7:91:91:1d:d7:74:c4:5d:ac:
         65:38:e8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:19 2024 by rpki-client on console-ams.rpki-client.org