Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/879a7052-68b4-4d45-b181-40921854faa6/f7aac3a4-ea14-3cab-a887-ab585f15e63c.roa
File:                     f7aac3a4-ea14-3cab-a887-ab585f15e63c.roa (raw, json)
Hash identifier:          jrcNeu4EyxB/Vgr8OyNAt3UTI94+Q6FyCBoo1ldrzhw=
Subject key identifier:   4F:CE:30:5B:3E:F2:E6:85:7C:07:69:59:2E:28:E2:F5:63:C1:9F:DD
Certificate issuer:       /CN=879a7052-68b4-4d45-b181-40921854faa6
Certificate serial:       010D0C9F43285846C24FC25F030524C63D002A00
Authority key identifier: D8:14:4E:D4:C7:C9:65:EA:47:C7:3F:D1:5A:9B:49:BB:7E:3B:07:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/879a7052-68b4-4d45-b181-40921854faa6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/879a7052-68b4-4d45-b181-40921854faa6/f7aac3a4-ea14-3cab-a887-ab585f15e63c.roa
Signing time:             Sun 04 Aug 2024 01:00:28 +0000
ROA not before:           Sun 04 Aug 2024 01:00:28 +0000
ROA not after:            Sat 02 Nov 2024 01:00:28 +0000
asID:                     401068
IP address blocks:        2602:819::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/879a7052-68b4-4d45-b181-40921854faa6/879a7052-68b4-4d45-b181-40921854faa6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/879a7052-68b4-4d45-b181-40921854faa6/879a7052-68b4-4d45-b181-40921854faa6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/879a7052-68b4-4d45-b181-40921854faa6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:c2:4f:c2:5f:03:05:24:c6:3d:00:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=879a7052-68b4-4d45-b181-40921854faa6
        Validity
            Not Before: Aug  4 01:00:28 2024 GMT
            Not After : Nov  2 01:00:28 2024 GMT
        Subject: CN=8cb12d95-381d-47e5-b169-08f9718dc505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9f:2a:3e:99:0d:84:4b:01:b1:8a:24:db:6f:
                    77:17:23:a9:4e:8f:7f:73:1d:82:c0:5e:b2:f3:af:
                    a2:67:73:d9:f0:b8:42:6f:30:5d:7a:a2:b3:3d:d4:
                    26:ba:12:fa:4c:00:1e:40:da:7a:3a:73:b6:58:55:
                    b5:7c:83:fb:f3:2c:f3:af:c5:48:0c:c8:b3:8c:84:
                    37:cd:b0:ba:ab:64:63:51:83:68:70:18:bf:b5:d9:
                    4a:84:79:c4:29:5b:2b:c5:82:ea:c8:7f:1e:83:23:
                    bf:42:d9:18:8a:8a:88:96:c7:e1:04:72:82:c2:35:
                    26:ff:89:78:33:4e:f7:7b:0d:e7:67:42:15:3f:e5:
                    47:0d:cf:aa:7a:12:e3:80:d4:d7:23:94:63:f7:4a:
                    1d:ae:b5:17:9c:9c:92:f7:6c:40:b7:f4:dc:65:9e:
                    2c:56:42:ee:e2:7d:16:db:ec:6c:bc:ef:df:e7:9a:
                    e7:45:bc:7f:62:dd:27:21:3a:d8:af:58:4e:ad:d4:
                    ec:c3:f7:8b:be:da:0b:cb:09:c8:38:8e:c6:f2:26:
                    5e:78:18:cb:cf:c9:f5:33:fc:e0:a7:4f:41:fe:c7:
                    0f:94:8b:06:46:45:aa:99:c7:ad:de:97:56:4c:cf:
                    f2:0d:1c:a7:39:cd:b0:8f:3d:c4:c1:95:e1:4c:41:
                    3f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CE:30:5B:3E:F2:E6:85:7C:07:69:59:2E:28:E2:F5:63:C1:9F:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/879a7052-68b4-4d45-b181-40921854faa6/f7aac3a4-ea14-3cab-a887-ab585f15e63c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/879a7052-68b4-4d45-b181-40921854faa6/879a7052-68b4-4d45-b181-40921854faa6.crl

            X509v3 Authority Key Identifier:
                keyid:D8:14:4E:D4:C7:C9:65:EA:47:C7:3F:D1:5A:9B:49:BB:7E:3B:07:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/879a7052-68b4-4d45-b181-40921854faa6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:819::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:fe:9f:a7:34:ed:c2:44:38:25:46:6c:ba:d9:9b:35:a8:fd:
         a4:8f:20:15:86:6b:19:81:5f:5c:ab:ff:ed:14:71:9f:8b:7d:
         7e:97:43:d1:85:83:c9:b4:c8:5c:c9:63:60:54:54:13:1c:d5:
         e5:c7:99:ed:b0:0c:97:ab:85:08:a2:dd:de:26:34:e5:a3:5c:
         2f:84:22:c9:aa:d1:cc:a2:ec:b8:36:71:75:e0:9d:49:b0:d3:
         4a:5b:59:60:1c:54:5b:13:1f:b6:66:51:81:dd:c0:67:49:5b:
         dd:75:25:05:68:69:dc:cc:ba:32:9a:08:89:2f:5f:c0:41:ad:
         1c:94:74:3d:43:21:e1:73:f4:58:19:b9:e3:7c:40:2b:34:ba:
         f9:a2:3e:5a:fe:2b:4a:05:6e:a0:07:88:b2:e0:a4:d7:a8:37:
         66:32:45:88:cf:9f:2f:fc:a8:9a:2f:90:83:57:b3:ab:2b:b9:
         d2:0f:2d:db:17:0f:d0:16:9a:a2:39:d0:2e:de:3a:23:f9:f7:
         54:bc:87:a6:3b:4f:68:2a:12:91:ea:58:d3:bf:2d:43:3f:a3:
         57:8b:17:de:3b:05:7b:26:f1:64:42:42:73:2a:d2:bf:bf:dd:
         fc:0e:1f:2a:ef:4a:07:85:80:96:80:ae:61:17:e0:6a:3f:2d:
         e4:77:35:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:31:05 2024 by rpki-client on console-fra.rpki-client.org