Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/17c97364-2d34-322a-90a6-f80a73c7f5ac.roa
File:                     17c97364-2d34-322a-90a6-f80a73c7f5ac.roa (raw, json)
Hash identifier:          b1izBnr1abrvsVM5T0wadceSnaWfHzDkclBs+BU9d9Y=
Subject key identifier:   B8:5E:EF:58:D8:53:ED:D9:81:DE:82:67:5B:59:6D:BD:28:83:F0:06
Certificate issuer:       /CN=0845ba3b-9fc2-40fb-b74c-445ace8b4182
Certificate serial:       010D0C9F43285847A0414EAAAED99C20241E0400
Authority key identifier: 6B:84:42:69:D7:70:DD:26:8A:F7:B3:53:16:F4:AE:16:1C:63:F0:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/17c97364-2d34-322a-90a6-f80a73c7f5ac.roa
Signing time:             Tue 22 Oct 2024 13:00:40 +0000
ROA not before:           Tue 22 Oct 2024 13:00:40 +0000
ROA not after:            Mon 20 Jan 2025 14:00:40 +0000
asID:                     397423
IP address blocks:        2602:f94c::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:41:4e:aa:ae:d9:9c:20:24:1e:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0845ba3b-9fc2-40fb-b74c-445ace8b4182
        Validity
            Not Before: Oct 22 13:00:40 2024 GMT
            Not After : Jan 20 14:00:40 2025 GMT
        Subject: CN=b491d91a-7a1d-4f3b-933c-e1528b74a966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e7:6c:33:a5:ba:31:c5:92:d9:be:97:7d:e8:
                    3c:56:aa:6a:27:9a:9c:00:82:f4:66:6a:f0:33:ea:
                    e9:e5:26:4b:06:c6:51:21:7e:de:34:c9:0a:34:70:
                    06:33:8a:9d:44:5e:8d:49:4e:f4:d8:78:da:98:1d:
                    24:b8:32:8a:d6:9b:37:56:2c:ba:a9:94:1a:b2:5d:
                    dc:99:0d:1e:eb:67:b1:1c:8d:f3:0f:04:5d:ed:4f:
                    57:b5:c8:f8:30:5b:36:d9:f4:46:a2:10:10:84:69:
                    d2:62:cd:96:f8:3a:26:73:83:1a:f0:1d:7e:72:1c:
                    ed:61:8c:92:1a:7a:91:1a:2b:f2:07:04:d3:7f:85:
                    a7:7b:18:28:a7:30:f7:d8:6d:0f:fa:60:62:a1:fe:
                    c5:9d:1c:ff:e8:cd:d8:91:27:c5:dc:c4:74:11:7e:
                    5c:0c:10:1e:07:8b:20:81:74:06:16:70:9f:50:13:
                    26:b6:3f:a7:76:03:a6:07:8c:c8:66:e9:14:6f:8a:
                    a7:c4:ec:47:13:74:dd:ef:31:f1:7f:80:f9:cc:aa:
                    8e:b3:b5:7b:fa:19:66:65:ab:42:df:f8:19:1c:09:
                    a2:fa:68:06:66:de:55:4a:b8:9b:0c:1c:22:09:7a:
                    48:fd:a3:fa:b4:5b:b6:c7:ae:e8:d4:b0:7a:67:44:
                    76:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:5E:EF:58:D8:53:ED:D9:81:DE:82:67:5B:59:6D:BD:28:83:F0:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/17c97364-2d34-322a-90a6-f80a73c7f5ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.crl

            X509v3 Authority Key Identifier:
                keyid:6B:84:42:69:D7:70:DD:26:8A:F7:B3:53:16:F4:AE:16:1C:63:F0:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f94c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:78:c0:9e:54:e3:d2:c9:20:b7:8f:00:a2:76:25:48:13:dd:
         6b:5e:22:bb:e6:98:3b:e5:27:18:81:e6:73:8d:ad:2b:94:a3:
         57:a0:ed:e0:6f:d8:49:23:b6:a8:3d:27:ff:1c:ab:5d:cf:17:
         be:12:ff:fc:56:1d:e2:0d:5e:61:cf:31:17:9f:a5:5d:66:25:
         2c:2c:2e:bd:a4:a2:f7:f9:de:23:c8:f2:10:64:57:7d:ed:e0:
         07:d2:54:b2:b3:a0:f0:57:0e:59:42:3e:6d:71:0d:b1:b9:35:
         6f:5e:2e:9f:bd:68:2b:38:45:b5:89:cd:c5:be:b8:f6:c5:85:
         c8:23:ea:8d:e7:bd:b9:4f:ef:b5:0e:a9:6e:b0:81:00:57:19:
         60:a5:5b:f4:c8:66:74:44:ca:e6:a5:e4:90:5b:81:e8:fd:3f:
         65:3b:7a:32:ac:e9:4e:d8:61:1a:65:fd:ae:c7:06:2c:00:67:
         6f:f4:83:e1:07:6a:2f:1d:bb:76:47:7d:ab:05:b9:82:9c:3a:
         68:df:82:79:ac:a4:04:5e:71:16:4d:68:c4:ab:69:74:70:02:
         a6:63:cf:7f:ff:00:4f:d7:57:37:7b:2a:37:b8:c2:2f:9c:eb:
         ae:4c:c4:a6:a0:58:6b:ea:ee:74:97:a4:22:52:f3:ac:e9:4b:
         e9:88:f1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:28 2024 by rpki-client on console-ams.rpki-client.org