Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/49abf5bf-669f-3c5f-8fd7-939e9926cb0c.roa
File:                     49abf5bf-669f-3c5f-8fd7-939e9926cb0c.roa (raw, json)
Hash identifier:          EjOT6D7ByFl38zZvJ2h1B7kQkG8k8kYgtTBKmH276BQ=
Subject key identifier:   8C:9F:AB:8D:0C:21:65:90:CD:22:12:48:1F:0B:81:94:F0:71:39:3F
Certificate issuer:       /CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
Certificate serial:       010D0C9F432858473E8B46EAB09C26E2FEE50A80
Authority key identifier: A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/49abf5bf-669f-3c5f-8fd7-939e9926cb0c.roa
Signing time:             Tue 17 Sep 2024 13:00:41 +0000
ROA not before:           Tue 17 Sep 2024 13:00:41 +0000
ROA not after:            Mon 16 Dec 2024 14:00:41 +0000
asID:                     54613
IP address blocks:        2602:fd9a:fff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3e:8b:46:ea:b0:9c:26:e2:fe:e5:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
        Validity
            Not Before: Sep 17 13:00:41 2024 GMT
            Not After : Dec 16 14:00:41 2024 GMT
        Subject: CN=45a1a9dd-bf98-445b-90d0-4c59fdb65239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6b:79:f9:d7:0d:40:ca:93:e7:59:be:d5:01:
                    fa:65:f1:72:bc:25:b6:87:b3:a3:f0:18:96:19:f9:
                    16:d3:43:1c:68:62:d9:79:64:3d:6d:24:c3:e8:32:
                    84:58:22:2d:9f:dd:af:ed:14:af:54:6b:93:d4:66:
                    4e:ee:14:fb:28:6c:42:c8:59:a5:79:03:d5:c1:25:
                    ad:26:7a:b7:44:11:ca:7f:a5:3f:16:6a:46:17:92:
                    56:40:80:c0:4e:47:b6:9c:aa:aa:9e:67:66:e2:fc:
                    b1:58:3d:9d:53:fd:a8:71:ce:7b:d1:c7:01:ff:a3:
                    f9:24:2a:a7:78:ec:c8:8e:dd:4d:51:ac:47:cf:85:
                    dc:a4:85:4b:80:59:8a:fb:ef:2a:65:fb:5e:7b:e9:
                    a3:15:ac:df:2f:a8:55:e2:88:10:01:6a:3b:72:ea:
                    ef:2e:24:5a:b1:c1:31:e7:69:bc:7d:71:02:62:fe:
                    32:d1:47:25:9d:dd:1b:ca:7d:30:b8:86:1f:ce:b4:
                    56:2a:47:2e:7f:33:8e:81:44:b8:75:02:ef:be:7b:
                    fe:2b:ae:3d:14:07:dd:a0:22:90:dd:29:c1:d7:58:
                    a3:13:63:9c:cc:34:c8:df:19:59:ad:64:ff:3e:d0:
                    e4:1a:d9:7b:d8:92:8d:03:bf:9c:bf:29:8d:74:70:
                    38:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9F:AB:8D:0C:21:65:90:CD:22:12:48:1F:0B:81:94:F0:71:39:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/49abf5bf-669f-3c5f-8fd7-939e9926cb0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl

            X509v3 Authority Key Identifier:
                keyid:A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd9a:fff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:23:69:45:70:ed:72:05:f0:25:b3:a5:b9:97:a5:79:a9:ec:
         49:df:96:b4:6d:03:51:29:b9:47:ee:ea:1c:a0:17:4f:0f:85:
         47:85:39:52:9f:cc:4e:99:3c:03:ec:da:d0:01:81:59:d0:44:
         23:16:d5:29:02:9e:d7:dd:c1:9f:f3:6f:b7:19:52:a0:7c:12:
         76:c9:ca:02:67:0d:fa:79:25:5e:7c:6b:d6:b8:c1:af:7b:48:
         d9:da:0d:2c:3d:8e:c6:f7:b9:f4:5b:cf:f8:e2:bd:a1:14:73:
         4f:74:41:91:4a:d2:5a:40:5b:8f:38:4b:5c:ad:32:fb:3a:26:
         0c:77:9d:cb:98:4b:9d:e3:62:67:fd:f3:5d:22:40:34:3a:13:
         99:2b:21:70:72:4b:2f:67:08:07:0f:c2:4e:ac:3d:5b:5f:ce:
         ab:3e:1a:ab:8a:dc:c6:48:c8:2c:9b:e2:42:b4:f3:2c:e4:ee:
         b8:60:58:b2:9e:b1:b7:0f:17:1a:fb:69:81:eb:20:43:86:e7:
         cf:ef:3b:b9:b0:5e:df:32:fd:70:da:74:4b:2b:9d:d1:b4:cc:
         1b:f7:48:9a:7a:13:21:f4:7d:0c:cf:7a:80:b2:dd:f3:93:ce:
         11:f2:f0:e3:c0:53:62:3c:40:a8:67:7a:9b:24:a2:b5:64:bc:
         f6:33:3d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:52 2024 by rpki-client on console-ams.rpki-client.org