Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/d8869c11-4c33-337d-a702-d11da6d17e67.roa
File:                     d8869c11-4c33-337d-a702-d11da6d17e67.roa (raw, json)
Hash identifier:          hBHpOPemjoeD6U/OTqib2wVLQJRmXg6RjDXj126ZMf8=
Subject key identifier:   40:96:E0:3C:6D:52:BB:22:F8:EA:EF:E1:15:22:02:74:66:D4:97:B3
Certificate issuer:       /CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee
Certificate serial:       010D0C9F432858477EC1096D83E31F7A11763700
Authority key identifier: 71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/d8869c11-4c33-337d-a702-d11da6d17e67.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        2602:80f:9002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:09:6d:83:e3:1f:7a:11:76:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=adb475e2-ecac-462e-8b4c-6b23b5b52d4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7f:25:6f:c8:ed:96:10:3b:45:06:2e:7b:25:
                    52:9e:86:2e:40:cf:fb:ba:67:8b:8b:0c:aa:42:26:
                    73:5f:56:35:bc:37:d5:c6:ed:4b:66:b3:1f:de:30:
                    26:13:55:e6:c9:58:15:3f:c2:0f:4b:90:13:27:d1:
                    60:1f:d4:8e:59:10:6e:ae:87:09:95:30:1f:d2:43:
                    d8:e6:b9:c2:7f:f6:f0:34:8c:87:f1:21:8f:7a:11:
                    3d:d8:d4:f8:1b:d0:42:61:99:9d:d5:3f:e4:08:62:
                    6f:df:06:06:c4:a2:ee:6c:19:b8:60:ee:1f:42:5b:
                    24:4f:fd:97:ff:84:25:32:be:45:42:a8:74:25:88:
                    26:29:50:a5:17:e3:ba:e4:23:00:1c:84:b8:0b:ad:
                    f8:11:49:a1:4c:81:26:46:08:29:a0:82:e7:e1:99:
                    d7:ac:a3:09:69:2d:67:ee:8c:ab:e7:a6:04:d0:5e:
                    02:3e:f7:9d:97:80:9f:94:49:7f:73:c2:34:12:9f:
                    66:eb:13:10:e9:bc:f8:84:d9:55:39:71:9b:be:f4:
                    c9:ac:96:db:36:ad:94:9a:ff:10:5d:35:d0:d0:62:
                    1c:f5:fa:1c:0a:3f:c2:ee:21:55:bb:f9:2b:5e:f8:
                    63:fb:72:d0:f8:63:90:4a:49:db:97:10:33:ed:29:
                    ed:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:96:E0:3C:6D:52:BB:22:F8:EA:EF:E1:15:22:02:74:66:D4:97:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/d8869c11-4c33-337d-a702-d11da6d17e67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl

            X509v3 Authority Key Identifier:
                keyid:71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80f:9002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:26:55:cb:22:70:4a:2f:23:97:82:8f:4d:0d:63:55:6e:6f:
         12:6c:b8:9e:1a:ca:11:42:2d:83:45:c4:d9:c6:6b:2b:2b:49:
         f7:31:1f:66:1d:a2:d0:a6:bf:c5:9f:27:0d:31:16:bc:0d:9f:
         30:36:ef:29:92:d8:cc:31:57:85:58:16:bf:c2:eb:77:79:94:
         93:8d:69:1c:3b:80:3f:0d:2d:52:03:41:b6:10:9c:97:f0:27:
         cc:7e:d4:12:5d:f2:88:0e:05:fd:dc:42:75:84:9e:01:2e:43:
         9e:e7:70:e7:6f:7f:70:82:5c:6a:8e:54:a0:43:0d:3d:64:dc:
         d3:50:07:3b:68:c1:c6:07:c7:69:56:6e:37:73:08:82:4d:82:
         90:21:fd:19:14:e8:11:e8:11:c3:d7:21:8e:14:9c:f5:7e:a9:
         e8:f4:5f:22:84:86:0c:37:99:ed:80:5d:5e:7c:91:3e:9b:77:
         c1:5c:77:21:6f:8f:51:2d:f5:90:08:bd:5b:e7:fe:79:c5:70:
         39:1d:20:37:9f:ae:c1:a6:3e:c9:83:1f:18:55:3c:b1:19:c3:
         a9:1a:a3:83:32:0e:59:f1:fe:3f:5e:9d:26:ae:e4:33:e7:67:
         ef:58:4a:b3:c1:e8:af:43:2a:d0:c7:e3:a0:ac:bd:54:0f:3a:
         20:a3:6e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:12:19 2024 by rpki-client on console-fra.rpki-client.org