Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/b4d941c7-94be-35d4-9a43-4e671333d3fb.roa
File:                     b4d941c7-94be-35d4-9a43-4e671333d3fb.roa (raw, json)
Hash identifier:          84rLu+DPg9nrcfYt9q2tIhrWKdbakSCK56mLS2UgBmw=
Subject key identifier:   24:C3:3A:A6:57:E6:29:50:73:AE:06:B3:8C:66:5F:70:2D:35:A4:9D
Certificate issuer:       /CN=2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2
Certificate serial:       010D0C9F4328584793B1188AE2909D3EBFDFE200
Authority key identifier: DB:4C:BE:6E:B3:E7:74:A6:66:DB:BF:8D:07:AD:66:A3:D3:67:D4:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/b4d941c7-94be-35d4-9a43-4e671333d3fb.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     213151
IP address blocks:        2602:fb2a::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:18:8a:e2:90:9d:3e:bf:df:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=1893b2c8-1850-427b-bb0b-37a2319fa8d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b7:ce:49:8e:8a:e9:81:54:e4:f6:f9:a1:f9:
                    82:bf:5e:6c:a7:79:da:88:19:48:69:4d:67:17:97:
                    6a:a4:ec:bf:e1:17:6c:a2:13:67:2d:40:0d:fa:e4:
                    6f:88:d5:a6:a1:c2:db:6b:f5:3f:60:9a:af:21:79:
                    80:77:cc:00:71:05:b6:12:1f:92:67:35:cf:33:08:
                    00:d9:e5:64:85:3f:04:e6:a9:9b:b0:bc:62:17:d4:
                    9d:8f:1a:72:a6:3e:20:80:a7:b5:39:3d:3d:eb:f7:
                    3d:7e:b1:50:1e:0c:10:05:67:18:fe:90:aa:8e:e3:
                    b9:a0:e8:75:47:45:89:d7:54:e8:a6:14:1c:b4:a2:
                    03:5b:56:98:4f:86:49:a1:33:9b:1c:ca:1d:56:04:
                    c0:7d:2c:cd:b7:0e:8f:9b:c6:d6:63:16:28:c1:44:
                    be:be:41:7e:c6:6c:3e:6e:df:18:4e:8a:ac:09:b2:
                    82:49:03:56:3f:6f:6a:2c:eb:6f:27:fe:1c:a1:20:
                    c5:69:73:3e:b2:e2:9e:a4:7c:7f:a3:a8:43:92:1d:
                    11:60:0d:ba:74:fe:25:dc:6d:23:33:70:e2:03:77:
                    d6:3c:02:8b:72:8a:1b:9a:b9:40:3b:59:3a:74:69:
                    f4:17:dd:c9:f3:8d:6d:66:be:e2:de:7b:d6:43:56:
                    b2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C3:3A:A6:57:E6:29:50:73:AE:06:B3:8C:66:5F:70:2D:35:A4:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/b4d941c7-94be-35d4-9a43-4e671333d3fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.crl

            X509v3 Authority Key Identifier:
                keyid:DB:4C:BE:6E:B3:E7:74:A6:66:DB:BF:8D:07:AD:66:A3:D3:67:D4:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb2a::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:9f:dc:99:db:8f:f0:ba:9a:96:67:ca:dd:9c:80:3e:a3:38:
         51:9d:2f:20:48:a7:14:d4:9f:8b:19:33:0a:11:1e:57:03:e9:
         6d:33:25:c8:db:3e:30:1d:68:d5:ed:bb:0c:d7:a7:ef:34:fc:
         f4:99:34:2f:19:06:97:b8:29:2c:5e:3a:30:30:ea:3a:a5:3f:
         82:64:7d:3a:99:f8:20:5d:b7:a4:e0:14:ba:e6:ed:c0:2a:26:
         de:8b:31:38:52:e9:2e:4f:12:06:d4:8c:c6:10:50:78:f3:c0:
         06:1c:d9:41:68:45:d8:09:7f:30:6c:99:9f:06:56:35:31:08:
         fc:e4:90:20:16:9e:24:42:7b:a5:6c:95:1e:35:59:5e:df:f2:
         15:ea:3f:87:5f:a6:33:5c:c5:cc:d4:a1:cb:cf:54:b7:a9:e5:
         01:7a:5a:0b:f8:c5:e6:b5:81:b9:6f:2c:a9:96:b0:c7:f7:25:
         8b:77:6d:21:df:06:1d:9f:97:bf:f8:3a:fb:5c:af:e4:99:6b:
         1e:09:2e:ec:60:2d:82:86:de:28:3d:01:80:2d:a4:bd:30:9b:
         a0:44:06:12:89:3d:ae:cd:c0:44:de:0a:d4:ab:73:cc:f1:e0:
         c9:fd:b2:b3:ee:c7:2c:cf:22:ef:63:02:f2:2d:70:39:eb:1e:
         3c:df:d4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:01 2024 by rpki-client on console-fra.rpki-client.org