Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/716685f5-50d5-322d-a06f-c4dc39983e59.roa
File:                     716685f5-50d5-322d-a06f-c4dc39983e59.roa (raw, json)
Hash identifier:          4F6EjY/o2EfUDeogzo7m8xGy+8D1iTlhuWNat73AsLE=
Subject key identifier:   83:27:7D:E5:52:ED:88:98:BD:BD:A1:D7:82:4D:07:D3:35:22:79:8D
Certificate issuer:       /CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Certificate serial:       010D0C9F432858477BF66373E9229656FD104FE0
Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/716685f5-50d5-322d-a06f-c4dc39983e59.roa
Signing time:             Wed 09 Oct 2024 13:00:42 +0000
ROA not before:           Wed 09 Oct 2024 13:00:42 +0000
ROA not after:            Tue 07 Jan 2025 14:00:42 +0000
asID:                     13627
IP address blocks:        2602:fba3:200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:f6:63:73:e9:22:96:56:fd:10:4f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37
        Validity
            Not Before: Oct  9 13:00:42 2024 GMT
            Not After : Jan  7 14:00:42 2025 GMT
        Subject: CN=3b0d424c-9cc9-4be5-8e39-e2d4c275f01f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3e:5f:ab:5a:af:72:3f:a0:f2:9f:6d:8f:0f:
                    b8:cb:ab:1e:e9:08:dc:7e:24:b0:6a:58:d8:19:a7:
                    75:3a:fe:ed:bf:9d:5b:e0:2c:6f:fc:6f:fd:d9:2c:
                    6b:1d:7d:29:fa:79:02:45:77:d1:83:f7:c6:9a:53:
                    80:57:02:28:22:9f:15:f0:5d:13:4b:1c:4e:c0:50:
                    ef:c5:b1:3d:92:0f:8b:2f:5f:34:87:a0:9f:b8:a3:
                    2f:30:97:52:99:1c:4a:b2:fc:7c:19:f2:2c:2c:3e:
                    c4:6d:9f:31:91:1f:b2:3a:3f:5b:7e:e2:95:5f:08:
                    21:c5:b8:96:3b:d2:fd:ad:3e:20:7d:7e:0a:7c:9c:
                    39:09:0a:ee:1c:c9:ad:6d:30:73:5a:a6:d0:e9:a8:
                    8f:a2:6a:13:3a:87:c7:bb:9c:d2:2b:b6:25:1c:56:
                    cf:cb:81:bd:bb:b1:c5:88:20:cf:b5:74:ac:48:a4:
                    b5:86:aa:d8:e6:93:90:a6:17:91:2c:a8:9c:13:a5:
                    31:a8:25:de:4f:4f:28:cc:63:3c:9d:a9:d0:c9:ea:
                    84:60:e5:5c:e7:07:e1:7a:67:73:1a:3c:8f:c7:bf:
                    2b:11:5d:ae:8c:96:8b:a7:fd:87:62:5a:58:61:33:
                    f4:94:15:1d:ba:77:7b:1f:fb:99:61:dc:a5:79:ed:
                    b7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:27:7D:E5:52:ED:88:98:BD:BD:A1:D7:82:4D:07:D3:35:22:79:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/716685f5-50d5-322d-a06f-c4dc39983e59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl

            X509v3 Authority Key Identifier:
                keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba3:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:ac:22:4e:27:44:26:2a:fb:b4:2c:4b:ea:8d:4a:58:06:ea:
         35:29:02:19:d7:77:ca:ed:16:75:3b:0e:c0:aa:94:1d:89:df:
         8e:e5:4b:de:8f:67:53:ca:c3:a4:a3:9b:63:a3:79:80:88:a4:
         ea:e8:da:22:12:db:c7:31:b5:e7:4f:e5:4a:3c:21:e5:b8:f2:
         c8:88:49:33:81:99:00:11:b4:b9:57:61:ea:c1:32:e3:06:32:
         b8:cf:ff:bd:3d:14:8f:a1:bd:3f:06:75:84:cb:69:ea:5e:f1:
         87:b9:8a:e4:14:84:7e:ac:92:65:6c:71:e7:b7:f6:e4:d9:38:
         59:8a:af:11:3d:05:db:54:48:9c:e3:08:fa:a8:77:97:a7:68:
         7f:62:d0:3f:16:2a:f6:2a:ea:c4:b4:bc:fc:87:a5:c6:5e:27:
         0a:25:50:91:71:8c:be:35:b5:fa:20:23:b7:78:e4:10:43:8d:
         a3:03:11:85:59:13:cb:8f:f0:d3:97:65:bb:38:2a:0e:86:4a:
         4c:bc:39:0f:52:45:e2:82:34:c9:68:bf:d1:8b:1c:50:ba:86:
         d2:c9:af:14:cb:a4:48:0d:26:71:ce:d3:86:c7:41:3b:28:2e:
         27:54:7f:6b:8c:20:61:53:08:5b:71:0c:94:a9:19:85:c8:7d:
         73:c6:5f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:53:59 2024 by rpki-client on console-fra.rpki-client.org