Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/4e8fc72f-bbdc-3564-b395-7f0b5c95794e.roa
File:                     4e8fc72f-bbdc-3564-b395-7f0b5c95794e.roa (raw, json)
Hash identifier:          i14l9KOGusP45+oA54Ox1nRrCkkUEZTopxxEDWNTxtk=
Subject key identifier:   FB:82:2C:0D:99:5F:AB:5E:25:0A:86:62:B9:45:BC:B9:F8:84:D9:A7
Certificate issuer:       /CN=0a846bda-a477-4fe0-8f13-997253568b7e
Certificate serial:       010D0C9F4328584733609F62FD9C4AB16F36F590
Authority key identifier: DC:BA:E7:94:B6:81:A5:92:77:60:DA:DC:93:52:03:8D:85:F0:B8:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/4e8fc72f-bbdc-3564-b395-7f0b5c95794e.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     14570
IP address blocks:        2602:fb37::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:9f:62:fd:9c:4a:b1:6f:36:f5:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a846bda-a477-4fe0-8f13-997253568b7e
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=f51c161d-5a57-4273-80c9-06a1aa0b8d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:83:a6:ff:92:1d:0c:20:27:b3:64:44:db:8a:
                    30:6b:7f:45:d1:ee:da:77:26:6d:1a:f6:67:73:88:
                    ec:8f:29:a4:be:8c:3f:a7:a8:c1:b6:6c:bb:ad:52:
                    ac:5f:f2:dd:c7:aa:8f:4e:1f:6a:31:b4:8b:45:23:
                    d1:e6:55:9c:87:7d:48:8e:27:a5:13:eb:24:e7:20:
                    76:2e:25:38:7e:07:8c:40:4f:9a:2e:af:97:9f:e6:
                    e7:db:58:37:51:b8:16:63:52:16:77:f5:a2:27:8e:
                    03:60:e0:2e:51:df:89:16:d5:5a:db:54:89:dd:d4:
                    bc:6e:bc:82:71:f6:b6:71:d1:e2:b7:3c:3f:b6:bf:
                    7f:48:0e:da:ec:36:e3:30:a3:a2:ca:d2:c4:30:53:
                    b5:18:54:cc:be:b7:75:40:21:7f:e5:2e:cd:85:30:
                    e8:d7:41:ef:68:cd:9c:85:20:36:eb:e9:90:0c:bc:
                    b1:8c:e5:4f:97:2b:21:6e:75:1f:c7:d1:b2:61:9d:
                    e5:3f:6d:68:a1:b6:29:1f:14:99:09:92:7d:75:4a:
                    8d:cc:95:45:49:13:d5:3c:6d:b1:38:bd:88:fc:b3:
                    5c:ea:c6:73:15:38:24:20:8e:8e:ae:00:05:ba:65:
                    b1:a7:e7:51:a6:48:48:89:39:f2:93:c7:38:d2:6e:
                    ae:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:82:2C:0D:99:5F:AB:5E:25:0A:86:62:B9:45:BC:B9:F8:84:D9:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/4e8fc72f-bbdc-3564-b395-7f0b5c95794e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:BA:E7:94:B6:81:A5:92:77:60:DA:DC:93:52:03:8D:85:F0:B8:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb37::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:4e:15:f4:6d:00:07:38:46:5b:ac:4c:4b:07:ca:be:93:3e:
         5e:89:c8:c5:08:9d:4a:27:db:b2:f0:d6:1b:08:f7:31:5a:d4:
         d4:b4:d1:df:2f:06:fe:7a:4e:ed:74:f8:11:29:5d:17:1c:4c:
         e5:bc:21:58:3d:93:82:f4:b0:16:75:a5:47:08:23:e4:fb:67:
         ff:d2:46:95:8c:a0:9a:ee:c8:3b:b4:58:09:d8:fd:b0:85:90:
         34:5b:26:76:b6:37:e6:ca:69:f1:0c:47:7f:10:7e:1b:ef:32:
         d0:74:48:81:25:eb:f3:a8:0f:7d:37:b2:ac:f1:27:a1:65:c9:
         ad:8a:87:28:6a:6d:75:33:08:8a:71:98:a4:6f:95:f6:4f:17:
         3e:f9:9b:a9:c6:b7:ff:92:ea:6d:aa:1a:6b:cf:cc:5a:62:78:
         d8:e2:ce:66:39:75:6f:bb:77:f6:f0:a7:7b:7f:e4:15:0c:a6:
         ea:10:eb:95:b2:37:41:e3:8f:be:0c:57:0c:dc:3f:60:28:79:
         14:c9:fe:8c:5e:d9:69:81:5b:48:2e:cf:24:14:92:b5:8a:89:
         d7:20:77:9e:3a:44:97:64:9e:dc:dd:52:a6:2e:8f:ab:88:79:
         47:a5:68:4d:7b:7f:15:25:06:b7:e2:5c:f6:35:c4:fe:c1:f9:
         d8:bf:fe:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:22 2024 by rpki-client on console-fra.rpki-client.org