Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245/3bf6dbf8-3dca-3fa9-b25a-176db2bbec92.roa
File:                     3bf6dbf8-3dca-3fa9-b25a-176db2bbec92.roa (raw, json)
Hash identifier:          XUDtfGVtSpnUd4OZMAGlcZj04hLtl25bFLjz5ZzXuhM=
Subject key identifier:   DE:74:B9:3E:A6:8D:1B:7C:5C:4D:A0:EB:E3:FC:CF:90:DA:1A:5F:F8
Certificate issuer:       /CN=a9c50514-eeba-4ab2-b8e0-2a64274eb245
Certificate serial:       010D0C9F43285847CA3F7C5476F9F21718D2F2A0
Authority key identifier: DD:96:29:8E:1D:68:C3:A1:A2:39:C8:B5:D5:92:C3:98:C6:C1:3D:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245/3bf6dbf8-3dca-3fa9-b25a-176db2bbec92.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     54009
IP address blocks:        2602:812:d000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245/a9c50514-eeba-4ab2-b8e0-2a64274eb245.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245/a9c50514-eeba-4ab2-b8e0-2a64274eb245.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:7c:54:76:f9:f2:17:18:d2:f2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9c50514-eeba-4ab2-b8e0-2a64274eb245
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=e35d6c00-70c4-4955-a5da-1cf27ea572b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b7:34:8b:a4:a3:83:33:d2:45:3a:3e:f4:0b:
                    5e:91:90:d1:69:72:17:a0:53:e7:ff:40:e7:07:d4:
                    c7:3f:8f:4d:17:33:7f:8b:b5:d4:d4:9d:98:35:32:
                    c9:31:a7:86:24:8e:4c:87:90:0b:08:79:2e:27:8d:
                    d7:b9:c1:1b:45:18:01:8f:0f:ec:be:46:10:00:e5:
                    85:2c:b3:0c:bf:7f:b3:16:95:55:7a:45:f6:d6:f9:
                    69:58:a6:a5:2b:89:58:58:35:44:b1:95:d9:d2:02:
                    d7:e5:24:40:7d:ed:34:07:8b:a4:dc:18:1b:98:ae:
                    a3:eb:6f:8f:aa:1a:8a:cc:da:c6:89:2c:48:2e:d7:
                    cf:23:3e:d6:c8:27:4b:ef:5d:bd:24:2f:c7:6e:9c:
                    24:62:84:84:c9:7c:b6:ce:66:9c:49:62:44:86:dd:
                    41:61:8d:c2:88:9e:ff:b4:13:e1:5a:a5:d3:55:e2:
                    3b:72:27:49:0b:b6:ac:ab:20:9b:af:f0:58:58:10:
                    ac:c0:23:e7:ad:bc:62:e7:21:ff:bc:7b:1b:d2:c9:
                    61:65:ab:f8:1f:e8:c7:4f:38:c3:99:3b:fa:7d:a9:
                    09:2f:92:b4:a6:df:8f:4d:9a:c1:72:1e:1d:d3:4a:
                    9e:26:65:d0:dd:27:87:3e:9e:13:14:28:b1:91:d4:
                    5b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:74:B9:3E:A6:8D:1B:7C:5C:4D:A0:EB:E3:FC:CF:90:DA:1A:5F:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245/3bf6dbf8-3dca-3fa9-b25a-176db2bbec92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245/a9c50514-eeba-4ab2-b8e0-2a64274eb245.crl

            X509v3 Authority Key Identifier:
                keyid:DD:96:29:8E:1D:68:C3:A1:A2:39:C8:B5:D5:92:C3:98:C6:C1:3D:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:812:d000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:bb:fa:95:05:ee:44:ed:8b:92:d7:e9:61:85:81:8b:d1:29:
         14:34:4d:c2:45:ea:d1:e6:a8:12:1c:a1:39:26:83:e3:a8:cc:
         6b:2b:1e:2c:14:3c:06:c5:e0:a4:c1:89:ab:b1:b3:45:2a:5c:
         d5:ec:54:3d:fe:17:eb:04:7d:15:98:26:7f:b4:23:d1:b2:96:
         63:0a:93:4e:6d:69:9e:b6:93:88:8a:3d:10:3e:0c:de:7d:7c:
         22:31:19:96:18:c7:f4:e5:ec:68:53:a0:ea:fe:eb:c5:4d:4f:
         b2:75:ed:ee:f2:68:b2:c9:02:b5:11:89:60:ba:af:62:4e:e1:
         b9:fb:81:fc:b9:f9:99:c9:52:2e:c3:6a:18:c8:2e:70:0d:65:
         e0:0a:26:69:a7:5a:67:5c:ef:59:ac:7f:2e:89:09:c5:51:dd:
         a7:7b:bb:f0:c3:a2:b5:ae:02:5e:ce:3a:26:3b:98:98:90:ae:
         17:cf:8e:2a:93:66:b7:34:95:a2:78:e3:43:8f:60:74:cc:b7:
         cf:e6:88:82:36:c6:55:4c:dc:d8:6e:8d:6e:c6:88:d1:b6:56:
         f7:c4:87:d7:e9:c3:90:56:b3:52:36:a9:bf:48:29:6e:0d:64:
         eb:91:37:f3:a1:97:6c:4e:f8:3f:4e:65:d1:e5:ad:1c:b8:49:
         92:7e:42:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:14 2024 by rpki-client on console-fra.rpki-client.org