Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/4a2c271a-6692-3179-941a-0d087d280308.roa
File:                     4a2c271a-6692-3179-941a-0d087d280308.roa (raw, json)
Hash identifier:          awlXQMXVrCeFEnb4FxZVXvxfpizLGXbLLxSb6wxprxY=
Subject key identifier:   43:47:C9:5C:DC:DE:E2:C4:60:F8:45:A9:12:13:2E:E1:9F:BD:A4:EA
Certificate issuer:       /CN=8baf6f06-4472-4c79-8a01-5c338d64c402
Certificate serial:       010D0C9F43285847081ADF07D4C5651731735240
Authority key identifier: 95:D3:B5:8C:0D:5D:5F:85:19:CD:8F:FA:39:F4:82:C2:33:BB:9D:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/4a2c271a-6692-3179-941a-0d087d280308.roa
Signing time:             Thu 29 Aug 2024 01:00:32 +0000
ROA not before:           Thu 29 Aug 2024 01:00:32 +0000
ROA not after:            Wed 27 Nov 2024 02:00:32 +0000
asID:                     401082
IP address blocks:        2602:f8b4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:08:1a:df:07:d4:c5:65:17:31:73:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8baf6f06-4472-4c79-8a01-5c338d64c402
        Validity
            Not Before: Aug 29 01:00:32 2024 GMT
            Not After : Nov 27 02:00:32 2024 GMT
        Subject: CN=6dc62e7d-bd0d-4b7a-a4f7-95b126785451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:55:6e:21:a1:c6:4d:0a:13:75:55:af:cd:57:
                    48:87:ed:81:f3:88:2e:c8:e2:19:eb:75:cd:48:9e:
                    16:99:37:08:f0:81:00:bd:5a:e8:87:1c:3e:de:d0:
                    04:7f:a5:8f:c4:82:08:56:44:0e:e9:fc:35:b0:47:
                    7a:2f:83:65:aa:61:45:32:ed:13:75:4a:1a:ce:23:
                    6d:7a:d1:c9:52:bb:8d:e9:63:35:3e:e6:a9:76:4f:
                    7e:0f:02:75:a7:bf:94:d0:67:fb:5d:d3:ba:93:cc:
                    21:ed:d4:28:22:7a:b9:67:b5:e9:86:42:3b:f9:33:
                    77:22:47:b2:db:76:22:ff:fa:46:c7:99:ec:c3:4f:
                    57:96:18:df:c8:1b:5e:e6:b7:d2:24:ef:7c:94:a2:
                    34:a1:45:95:b1:3a:79:59:4c:dc:35:14:01:ac:f1:
                    82:0d:fb:dc:b1:ea:dc:17:16:76:a0:f4:67:86:a2:
                    1e:a6:05:35:f3:77:10:d4:43:72:9c:ec:30:75:ca:
                    08:5c:29:84:c5:69:f7:df:86:1e:bc:4e:24:ca:c7:
                    3b:6c:0f:fb:42:ec:d2:8b:06:00:a4:a6:2f:76:7a:
                    92:0b:35:ef:e7:da:6e:ae:b2:4e:b3:0b:25:e0:c3:
                    e4:6b:a3:d8:bf:02:4c:80:75:a3:22:62:16:bc:c5:
                    bd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:47:C9:5C:DC:DE:E2:C4:60:F8:45:A9:12:13:2E:E1:9F:BD:A4:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/4a2c271a-6692-3179-941a-0d087d280308.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.crl

            X509v3 Authority Key Identifier:
                keyid:95:D3:B5:8C:0D:5D:5F:85:19:CD:8F:FA:39:F4:82:C2:33:BB:9D:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8b4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:2c:4e:9f:5e:1a:6c:f3:61:32:c1:9e:e9:df:1d:60:0f:bd:
         c7:65:87:e9:03:52:ad:a9:0e:23:05:b6:69:54:cb:6f:30:e6:
         5a:b3:17:8a:21:eb:05:a0:17:21:72:6f:4e:c1:f4:ec:55:6c:
         84:a4:c6:0f:3b:a1:ac:4c:d0:37:62:59:c7:50:71:41:ab:32:
         65:98:96:9a:d7:06:1b:57:03:fa:e0:44:62:9d:a8:0f:f2:97:
         e4:0f:fb:16:c0:1d:9c:de:c5:f5:93:a3:a8:5b:51:9a:1b:ca:
         00:26:d7:f9:3c:0d:6f:6c:60:aa:54:f7:d6:26:32:66:13:6d:
         c2:79:c0:e3:39:49:4a:5e:df:48:41:3d:9d:10:0c:8f:5a:16:
         68:99:ee:01:7c:68:d5:7f:05:ac:3c:f2:6a:ce:3d:b3:1e:cb:
         f8:9b:fb:68:03:34:af:64:55:b5:45:45:dc:48:46:8d:de:11:
         b3:c7:74:f9:b3:f8:0e:b6:b5:ed:ca:29:a2:8a:35:57:7b:15:
         1f:50:31:0c:75:2b:5e:59:78:4a:89:5e:4e:f4:cd:85:12:c5:
         b3:d3:78:de:94:c0:83:37:c5:22:fd:ba:4e:3b:76:10:7f:1a:
         d0:c2:7a:de:5c:5e:4c:a8:03:1a:28:b9:5a:d2:b2:3f:92:d2:
         e1:40:ff:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:31:05 2024 by rpki-client on console-fra.rpki-client.org