Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/e8616674-f91f-350d-82cc-d009a5a6c585.roa
File:                     e8616674-f91f-350d-82cc-d009a5a6c585.roa (raw, json)
Hash identifier:          +ndtOxEojbtrjhvWNMpd/W25yu0QAf5HuiMwlSbgq1A=
Subject key identifier:   24:82:8E:BD:94:6C:22:12:24:58:EC:40:FC:95:81:FE:DF:EB:4A:8C
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F4328584789EC010B769D77D28239AE80
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/e8616674-f91f-350d-82cc-d009a5a6c585.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     216401
IP address blocks:        2602:fb54:240::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:ec:01:0b:76:9d:77:d2:82:39:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=9d6a2066-1fd3-4030-8db0-6c66a54a1095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:03:45:8c:e8:40:50:ef:5f:31:f1:9c:7b:8b:
                    16:cb:f3:f8:88:40:0f:b2:e3:4a:29:6c:19:cc:0e:
                    7e:d9:b9:93:4b:b5:34:ea:82:ea:af:d5:1f:25:de:
                    37:15:bd:f4:bc:f2:6b:93:7f:54:1c:b8:82:25:2c:
                    87:f4:f4:99:a8:c3:c1:f4:f5:7f:da:20:58:a6:60:
                    e1:af:5c:20:69:ee:1e:fc:a1:3d:d8:f8:2b:73:33:
                    27:77:61:f8:f7:51:07:ca:4a:a2:2a:cb:84:da:fd:
                    27:d7:0d:13:71:ce:77:5b:0c:d4:7c:27:ab:59:b1:
                    32:6e:69:4d:e0:71:62:d1:ff:7c:cc:3c:e5:92:d6:
                    cd:c3:ac:89:d5:8c:8a:98:50:c9:0d:12:31:5d:b5:
                    71:ba:1a:a5:a3:46:68:81:ef:0a:82:5d:11:28:03:
                    ff:ed:ba:b2:77:74:71:cb:f3:7a:b8:d1:12:ab:ea:
                    e7:79:9d:2d:e8:b2:eb:56:fa:c7:03:72:9f:3b:a0:
                    9f:54:57:86:16:0b:f0:03:9d:67:18:24:a8:44:65:
                    22:e1:19:fb:95:ed:c5:fe:5e:47:72:76:63:31:ee:
                    79:a8:8a:7c:64:b1:f1:7f:03:ff:f4:73:21:c3:d2:
                    3d:9c:95:68:0c:10:c2:a0:1f:ef:cc:c9:43:0e:4a:
                    c1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:82:8E:BD:94:6C:22:12:24:58:EC:40:FC:95:81:FE:DF:EB:4A:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/e8616674-f91f-350d-82cc-d009a5a6c585.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54:240::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:7a:9b:62:1e:5a:e7:7d:c0:43:ec:3b:af:84:ea:89:5b:0f:
         52:99:2e:8d:cc:ad:4b:e3:66:b0:2e:87:29:4f:87:d2:cc:8c:
         78:e3:ba:96:92:f1:a8:e8:da:49:63:85:a3:5a:0f:9c:96:15:
         c9:8e:4f:af:c3:e6:28:8f:27:f5:4a:b1:dc:83:67:e9:e6:10:
         2f:1e:d7:0a:f4:88:6e:88:db:76:c4:7c:74:23:e7:d7:32:48:
         d8:35:3b:08:78:76:7d:17:b2:8a:c3:90:6f:da:ec:5b:8e:8e:
         6a:c7:07:d3:91:c9:17:f9:54:e9:be:1d:5b:24:76:27:e8:1d:
         75:46:c3:3e:d8:91:c2:55:3c:bb:e1:0f:9e:3e:84:dc:d0:b8:
         01:be:ca:8e:06:23:6a:fc:79:df:70:be:a9:ad:90:17:67:ae:
         b2:02:f8:3c:d5:1f:13:96:85:80:d9:9a:5c:b0:bf:f7:e6:b1:
         a4:1a:47:24:ce:15:61:8d:0f:f9:f6:d6:08:b7:d5:a9:27:50:
         5d:de:5e:a5:60:a7:a5:43:db:86:95:9d:c3:ee:89:17:d9:76:
         d6:aa:ef:83:6f:ea:8e:0b:03:b8:64:c9:a0:d9:b3:8d:7b:1a:
         db:82:a3:57:87:8f:1b:74:77:99:a1:b5:2f:95:79:c2:f7:40:
         e2:f4:65:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:22 2024 by rpki-client on console-ams.rpki-client.org