Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de/ff26649f-4bb0-3cb3-8ee1-8781aa68dc95.roa
File:                     ff26649f-4bb0-3cb3-8ee1-8781aa68dc95.roa (raw, json)
Hash identifier:          Xqa3ALxYxLvq0nomuZ8hYSs4Bs11N4AAVKlzUqbwUCs=
Subject key identifier:   38:7F:73:A4:75:DF:CD:24:38:FC:03:6E:7E:6C:63:DE:9F:C5:58:5F
Certificate issuer:       /CN=b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de
Certificate serial:       010D0C9F43285847EE8A2D7FB3978D2D30A9C900
Authority key identifier: ED:70:2C:A6:48:67:EF:6F:70:AD:9F:77:F4:71:49:6F:6C:DD:64:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de/ff26649f-4bb0-3cb3-8ee1-8781aa68dc95.roa
Signing time:             Tue 19 Nov 2024 14:00:39 +0000
ROA not before:           Tue 19 Nov 2024 14:00:39 +0000
ROA not after:            Mon 17 Feb 2025 14:00:39 +0000
asID:                     150698
IP address blocks:        2602:fafe:200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:8a:2d:7f:b3:97:8d:2d:30:a9:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de
        Validity
            Not Before: Nov 19 14:00:39 2024 GMT
            Not After : Feb 17 14:00:39 2025 GMT
        Subject: CN=41dc9c1d-ecd5-4b0b-8a26-d9794e4a950f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:55:bd:fc:7a:76:6e:4f:99:2c:a4:cc:13:27:
                    1f:a1:07:f2:0d:76:8c:0b:ef:fc:ed:0c:07:2e:57:
                    45:3c:3c:89:9a:ec:e0:73:cb:6f:cd:16:18:a3:3a:
                    71:9e:7a:31:ee:78:a2:d6:b9:50:46:64:ee:ee:03:
                    2c:11:f6:0b:a6:75:8a:a4:cf:22:68:cc:4b:5f:e4:
                    3f:96:bf:68:44:b9:02:2d:69:0c:4a:e2:17:3b:ab:
                    b9:39:6c:54:e1:cb:b2:c6:4c:0d:48:dd:e5:27:97:
                    7b:2f:4b:fb:1f:2c:b2:9e:73:82:c7:06:65:04:79:
                    2c:ae:fc:47:a6:37:6c:d4:f9:89:28:8e:a2:12:5f:
                    aa:da:5c:f4:07:9d:43:cd:b1:6f:4b:44:ed:f2:6d:
                    a0:38:d9:56:57:e2:15:22:be:82:95:0d:3c:45:92:
                    63:63:81:e9:6a:fb:96:f4:38:12:1d:44:5f:bf:54:
                    9d:95:4e:92:31:4d:15:74:88:a1:79:c8:bb:fa:90:
                    c4:6d:9c:98:45:6a:7b:9b:db:0a:75:d5:ca:e3:73:
                    f0:57:69:b4:f5:be:cd:fb:f8:08:f2:37:55:61:3d:
                    ef:1c:38:50:6a:3c:3f:fa:f0:05:6d:73:d7:99:aa:
                    a0:73:0e:5a:73:54:a4:e8:b3:ac:a7:4f:6f:96:bf:
                    72:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7F:73:A4:75:DF:CD:24:38:FC:03:6E:7E:6C:63:DE:9F:C5:58:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de/ff26649f-4bb0-3cb3-8ee1-8781aa68dc95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de.crl

            X509v3 Authority Key Identifier:
                keyid:ED:70:2C:A6:48:67:EF:6F:70:AD:9F:77:F4:71:49:6F:6C:DD:64:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafe:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:23:43:8a:d5:64:b6:23:ca:58:a9:87:fa:81:52:57:a0:24:
         ee:81:0d:37:75:cd:ce:16:95:43:84:f7:6a:52:76:1b:88:92:
         e2:f4:8d:bf:91:b1:d1:d3:01:df:61:ca:9a:18:73:ca:fe:a8:
         3c:cd:5e:54:4b:ec:da:73:c4:0b:08:f5:2c:24:b7:8e:d9:9c:
         c0:a4:8e:66:0a:59:96:62:25:7d:2b:29:a7:ac:8d:3f:24:13:
         0f:71:fe:70:a5:d6:33:49:d3:b7:22:1a:e6:63:eb:76:79:aa:
         ca:ec:5d:aa:47:4f:55:d6:24:e0:1f:dc:5f:37:cd:c4:ed:4b:
         55:48:f9:19:10:75:fb:87:7a:1e:1e:52:08:2b:e3:84:da:ae:
         d4:94:21:88:59:4c:64:c1:c9:9d:fc:1e:d8:3f:a9:89:84:71:
         6b:c9:62:d0:cb:a4:07:71:13:11:4c:97:75:1b:5c:db:de:5e:
         37:39:e4:07:f7:e8:04:79:4a:45:5d:b0:6d:65:65:23:81:f4:
         cb:22:19:5a:aa:a5:0b:9f:64:ac:22:a7:90:31:24:10:5b:6d:
         13:26:d1:b8:52:6f:95:cd:dd:98:19:d0:e5:8a:72:35:39:da:
         7d:7a:18:55:b1:ba:43:fe:75:12:5c:f0:cb:22:b7:3b:df:07:
         59:a3:3e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:19 2024 by rpki-client on console-ams.rpki-client.org