Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/f94d6a37-f85f-3ce3-9668-65bc8993f7a3.roa
File:                     f94d6a37-f85f-3ce3-9668-65bc8993f7a3.roa (raw, json)
Hash identifier:          HakLxcKRiNLEQfnBOLvI8p7gPFXYPmEi/HQfbJrSfxw=
Subject key identifier:   8C:D7:9A:C6:A2:56:26:78:7D:10:57:3C:07:49:19:18:7C:01:A7:3A
Certificate issuer:       /CN=1a767fb3-0911-435a-a3a4-189b82622157
Certificate serial:       010D0C9F4328584738F5FDC1F75CC5CAB339A600
Authority key identifier: 31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/f94d6a37-f85f-3ce3-9668-65bc8993f7a3.roa
Signing time:             Sun 15 Sep 2024 13:00:42 +0000
ROA not before:           Sun 15 Sep 2024 13:00:42 +0000
ROA not after:            Sat 14 Dec 2024 14:00:42 +0000
asID:                     400919
IP address blocks:        2602:817:2001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:38:f5:fd:c1:f7:5c:c5:ca:b3:39:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a767fb3-0911-435a-a3a4-189b82622157
        Validity
            Not Before: Sep 15 13:00:42 2024 GMT
            Not After : Dec 14 14:00:42 2024 GMT
        Subject: CN=7036613e-e933-49bb-be26-2d103efdfc95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:71:9e:0b:db:18:7a:0d:0f:d8:b8:dd:5b:fc:
                    8e:25:73:1a:95:6c:46:16:95:7f:1a:72:b3:a0:33:
                    ec:5c:95:39:b4:cc:b0:a7:e5:b0:a9:4e:5e:31:d2:
                    8d:04:6a:09:32:38:f2:4c:65:9a:14:a3:58:53:c2:
                    85:f2:c5:00:47:5f:6b:eb:74:78:0a:09:ab:77:cb:
                    5c:d3:a9:01:0d:4b:73:60:2c:5b:f2:7c:99:06:59:
                    8e:2d:8b:2b:29:75:63:2f:8b:db:60:80:23:a9:a8:
                    ff:dd:a4:11:f1:95:04:f0:14:37:d4:01:fa:9d:92:
                    cb:34:4f:8f:3f:30:ee:be:2f:32:54:a2:7b:1a:79:
                    5a:b8:b8:ac:78:a3:69:a3:69:b4:c4:3d:45:bf:a8:
                    6b:80:05:91:7f:77:65:e9:04:3a:7e:83:29:76:0c:
                    c4:73:c5:8c:25:4b:5e:06:59:54:b2:95:e9:47:10:
                    10:fa:93:cb:08:a2:fe:cc:9b:09:f0:8e:c1:cc:fb:
                    a9:18:31:aa:45:88:2a:f9:3c:78:f7:60:4c:15:82:
                    2e:e2:31:61:3c:a7:ba:32:6f:48:5d:f5:b5:ec:11:
                    2d:72:0e:e3:10:b7:d9:45:b5:3a:06:68:98:1d:1f:
                    73:0b:e7:68:35:12:82:97:ce:79:1f:8e:8c:9d:88:
                    43:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D7:9A:C6:A2:56:26:78:7D:10:57:3C:07:49:19:18:7C:01:A7:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/f94d6a37-f85f-3ce3-9668-65bc8993f7a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl

            X509v3 Authority Key Identifier:
                keyid:31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:817:2001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:8a:2b:3a:a1:25:4a:b0:fd:73:ee:c7:7c:56:81:d0:c3:5a:
         db:6c:20:01:ef:32:45:e6:78:33:b4:84:95:0a:bf:ca:25:7d:
         12:2f:5e:6c:08:44:9f:32:d4:01:34:1e:fe:9d:c9:ba:ad:0f:
         5a:b8:01:11:34:c8:73:03:74:7a:cc:8e:61:d0:d2:e9:5a:49:
         74:c6:ee:48:c7:d4:56:38:1d:84:88:6d:37:f9:5d:97:de:86:
         95:36:35:b4:8d:ee:e3:0c:2d:cd:f7:a6:9f:1e:97:f1:f1:61:
         ae:82:61:34:ee:8e:5b:4d:fc:9d:bb:f7:c3:28:fa:0c:69:99:
         3c:88:fc:7f:a9:f3:e2:cd:5e:64:02:f5:e3:d7:d1:53:ef:d8:
         4f:e2:4c:4a:5e:5f:03:a4:94:bf:ca:66:1f:02:65:29:31:83:
         b3:7d:ee:b4:ef:16:f9:f4:35:19:73:da:7e:94:b5:c1:79:87:
         dd:9c:da:a6:74:bd:1e:42:8a:4f:10:68:50:eb:e1:b3:2e:68:
         32:78:24:02:b2:f8:06:85:7b:45:e9:57:0d:9b:fc:08:c0:17:
         2d:a5:13:47:89:2d:66:fe:bf:87:7e:a0:9d:18:d5:57:95:7b:
         13:a8:53:a0:78:54:38:42:f3:26:e6:b2:eb:1f:e1:d2:f8:5b:
         a3:91:dd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:29 2024 by rpki-client on console-ams.rpki-client.org