Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/7614f9ce-dc55-3a1c-9099-3f44058adf65.roa
File:                     7614f9ce-dc55-3a1c-9099-3f44058adf65.roa (raw, json)
Hash identifier:          1jNtH26ukLWUQGHc31AKeowemOOSXzdXwoR1RJE4BWQ=
Subject key identifier:   26:B4:01:C7:1F:CC:9E:8C:24:9C:5E:54:73:DE:83:0C:36:C7:73:90
Certificate issuer:       /CN=3df29669-3733-4127-bbde-a71cc4b5a661
Certificate serial:       010D0C9F43285847213B1A3BD33BE6F9B2E32080
Authority key identifier: 95:AD:24:54:D0:1F:09:B5:B4:E4:A5:D2:66:AE:73:F2:D4:9B:55:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/7614f9ce-dc55-3a1c-9099-3f44058adf65.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     55247
IP address blocks:        2602:ff32:100::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:1a:3b:d3:3b:e6:f9:b2:e3:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3df29669-3733-4127-bbde-a71cc4b5a661
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=4986ff86-6df7-4f13-914f-c1e0c7a3bdda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:93:eb:cd:a3:ef:fc:90:f2:4e:41:a5:97:07:
                    33:fe:a0:a5:c2:9b:06:08:26:38:0b:32:38:82:33:
                    76:9f:0a:1d:cc:66:5f:cc:6f:32:f3:82:9d:dd:4d:
                    21:e3:7c:02:c2:01:19:4d:19:fe:4e:10:cb:ea:27:
                    78:1a:ff:1c:ca:c5:3c:fe:bc:7e:c9:bb:7e:74:2d:
                    14:2a:fb:72:de:b4:cb:56:45:95:17:2b:5b:e1:8e:
                    5c:c4:7d:92:1f:8a:18:db:a8:85:d7:2e:96:2b:9c:
                    54:ac:c1:53:be:45:35:f3:12:d5:ab:ae:94:c9:f6:
                    98:31:3a:b2:ed:73:ac:0a:59:ef:75:d8:8b:59:0f:
                    32:58:ba:25:f5:a6:02:cf:12:55:77:a8:e9:f1:75:
                    c3:7c:4d:5e:d1:bf:a0:88:61:b6:61:47:78:70:5c:
                    f1:1d:07:c9:b3:07:50:be:f1:b9:82:3b:1e:3b:7f:
                    bf:d5:a8:ee:ea:42:e9:56:c6:3a:c8:b3:fd:0e:29:
                    4b:cd:57:2c:c4:b3:2e:ba:b5:bd:d6:d1:dd:ea:19:
                    09:ce:64:78:41:3b:8b:d0:aa:20:13:74:92:53:3c:
                    10:99:d2:ed:c3:74:be:e3:44:84:fa:0a:ef:b7:d2:
                    b0:88:57:b6:d7:e4:e0:d1:e0:a4:1d:72:c9:15:4d:
                    63:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B4:01:C7:1F:CC:9E:8C:24:9C:5E:54:73:DE:83:0C:36:C7:73:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/7614f9ce-dc55-3a1c-9099-3f44058adf65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.crl

            X509v3 Authority Key Identifier:
                keyid:95:AD:24:54:D0:1F:09:B5:B4:E4:A5:D2:66:AE:73:F2:D4:9B:55:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff32:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:a4:b1:2b:07:d1:13:19:58:a8:9a:f0:1a:ea:06:ab:ef:9c:
         ce:56:c5:5b:e7:34:a9:8e:86:7f:cb:75:ac:e5:82:08:cc:d4:
         ec:83:10:2c:aa:e6:93:0a:e3:e5:7a:bb:41:a5:fd:c8:b3:dc:
         a3:88:92:c6:b3:7e:2c:a3:ec:49:a7:04:61:75:cc:d9:70:31:
         8c:ab:e7:ff:1b:85:d3:74:7d:f2:0c:b5:a1:21:11:87:bc:5b:
         20:db:03:f3:4f:3c:f5:90:66:37:f3:8f:4c:2c:d7:54:4a:5c:
         e4:f0:7b:72:b5:73:e3:08:45:fe:e0:56:26:42:7a:d5:62:36:
         f5:e9:6a:8b:09:3a:ac:ac:2c:80:27:98:7a:24:1b:27:6c:40:
         ff:89:c7:fc:f9:96:1a:5c:27:22:f4:1d:27:12:94:9e:98:f7:
         9d:44:9c:35:17:5e:8f:1c:62:58:4f:c6:41:2c:89:05:a7:1f:
         50:05:06:42:bc:e1:cc:7f:ef:ac:ff:e0:66:c0:da:c6:31:b2:
         48:b9:eb:07:3d:3c:14:82:dc:ae:db:c0:61:1d:24:7a:96:b6:
         64:4e:6e:a9:a2:b7:14:5f:9a:d6:9c:8e:02:e5:62:97:77:56:
         b9:52:15:49:f1:0a:5b:cc:77:92:7a:78:19:f9:aa:45:a1:9e:
         76:ef:eb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:04:27 2024 by rpki-client on console-ams.rpki-client.org