Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/e4d06b4c-b1bb-3766-9469-122ea545dc15.roa
File:                     e4d06b4c-b1bb-3766-9469-122ea545dc15.roa (raw, json)
Hash identifier:          3pwZ3R9nz2izHtMC/wqGxQ/D4ClDTiUYxkDzQPMUj3U=
Subject key identifier:   B0:00:E6:F0:C6:11:63:41:D2:63:19:CE:1D:73:B5:E8:CA:39:70:9B
Certificate issuer:       /CN=8d499d1b-9023-4410-8b4a-909ca6a083df
Certificate serial:       010D0C9F43285847B1015F47C29C838610571E80
Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/e4d06b4c-b1bb-3766-9469-122ea545dc15.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     397666
IP address blocks:        2602:fd9e::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:5f:47:c2:9c:83:86:10:57:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=410a938a-ad75-48a9-9d6a-eb2e0fb06d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:14:78:ca:ec:73:b0:8a:99:fb:35:87:e0:0a:
                    3d:17:8a:e3:f3:3d:59:b0:42:7d:25:54:a9:67:b3:
                    93:83:1c:ce:eb:23:9e:43:07:ea:a0:b3:93:ae:22:
                    a7:06:ba:72:ee:5e:66:f8:ea:fb:51:90:5a:90:3f:
                    96:fc:21:7d:82:2a:82:ea:61:79:f9:3a:89:e7:0f:
                    c1:ea:90:1b:b9:f9:28:26:bf:36:d0:f5:b1:92:7a:
                    96:f3:73:9f:1d:98:8d:6e:95:ee:10:c1:0a:07:6c:
                    80:bc:66:bd:1d:ca:92:83:c5:9c:76:fd:b0:dc:3e:
                    18:35:19:94:9d:e8:81:17:f5:46:5f:56:4b:4b:c9:
                    db:7e:61:7a:a6:e5:bc:92:57:07:e5:72:5c:58:33:
                    d3:01:dd:2f:c5:48:b3:c0:76:43:c0:89:0b:07:88:
                    f3:80:bf:30:f3:9f:a6:33:a2:91:fa:60:4a:34:ea:
                    21:37:b4:28:75:01:27:a0:e4:8e:89:68:15:a6:a3:
                    99:c1:a5:8c:d5:28:6d:2c:50:ea:ea:7f:b4:13:cb:
                    73:02:b5:d8:a9:ca:59:54:79:90:82:ed:37:34:39:
                    ff:0a:3d:fa:25:e4:d0:fd:cb:97:56:ac:eb:9f:cb:
                    ce:7c:45:26:7c:2a:12:37:77:47:51:90:a3:a9:65:
                    ea:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:00:E6:F0:C6:11:63:41:D2:63:19:CE:1D:73:B5:E8:CA:39:70:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/e4d06b4c-b1bb-3766-9469-122ea545dc15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl

            X509v3 Authority Key Identifier:
                keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd9e::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:9b:76:d8:4a:5f:7d:26:75:06:34:61:c5:9f:0a:c1:31:da:
         b9:a1:f0:c2:25:a4:c5:0d:31:ed:d0:f2:22:81:ea:ec:a4:0e:
         a2:80:90:22:a1:cf:16:91:01:ce:61:e9:97:3d:33:db:8b:6b:
         ce:2b:c2:00:1e:83:0e:94:7d:74:ba:67:52:86:a4:b9:1d:79:
         95:bd:1c:16:14:0d:b2:13:7b:81:3d:09:bc:48:fc:a9:d0:15:
         61:99:2d:1b:10:cb:0d:36:a2:20:c0:71:0f:cb:36:e8:ab:80:
         7c:1d:51:c2:73:e4:e9:d6:d2:07:2e:cc:a6:8d:8e:1c:2e:6b:
         01:cf:ff:d6:0f:97:e7:e0:a8:a3:15:87:50:4a:7d:f5:b0:30:
         45:ef:40:e0:29:40:2c:84:65:4f:ee:5e:92:23:3c:c4:7d:24:
         b3:61:68:c5:14:d4:3b:a6:d5:c9:3b:32:13:e7:e8:68:ce:26:
         b6:15:5f:15:ed:b3:9d:9c:d6:b0:c7:36:20:e8:bf:ce:92:0e:
         dc:98:7a:0c:bf:d6:8d:71:5b:b9:23:35:9f:79:84:1f:4f:09:
         81:46:2a:47:c3:2c:c2:2a:9d:c4:6d:60:84:43:26:bb:f4:b4:
         f5:5c:c5:c7:1a:5a:ff:ce:7d:c5:0e:3a:d2:f1:7f:0e:26:10:
         b8:52:f1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:36 2024 by rpki-client on console-fra.rpki-client.org