Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/f8fe083d-baed-30a1-8518-ee28ce1ef020.roa
File:                     f8fe083d-baed-30a1-8518-ee28ce1ef020.roa (raw, json)
Hash identifier:          My4dLp0b2b4EGb77G5xz8SUe597H9bk3OFtRiKeat/M=
Subject key identifier:   45:B6:93:09:85:CC:71:D8:20:4E:01:1A:59:86:14:85:D8:59:2D:7D
Certificate issuer:       /CN=2df6de74-9aed-474d-aed2-ba8ab13a7cf3
Certificate serial:       010D0C9F43285847CFD4AA2C14F1E4B96726B080
Authority key identifier: 38:76:CF:4E:AE:7D:02:15:BF:04:B7:51:78:C3:1B:2D:9B:FD:BC:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/f8fe083d-baed-30a1-8518-ee28ce1ef020.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     394256
IP address blocks:        2602:f95a::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:aa:2c:14:f1:e4:b9:67:26:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2df6de74-9aed-474d-aed2-ba8ab13a7cf3
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=e2187833-7477-4c2f-891a-13a2294a5f88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6c:22:4e:45:52:6c:01:ab:54:c2:ab:14:81:
                    07:a6:19:e8:56:39:03:f9:e4:65:8a:5c:1a:e6:1a:
                    95:62:d3:b8:70:e6:48:ef:dc:77:2e:76:03:a9:40:
                    29:f0:8c:b1:b5:35:88:5a:fe:a9:7e:d4:ca:6b:d9:
                    2b:52:60:da:55:6c:96:41:0b:23:bd:d3:fe:93:98:
                    9f:be:1f:fe:48:52:da:9b:ed:9c:d0:17:c7:f5:87:
                    7c:2b:2f:bc:5d:bd:2f:91:62:6e:a0:10:df:a0:65:
                    f3:5b:07:fc:fd:9c:2a:04:af:f4:20:dd:ce:29:53:
                    2c:9b:8f:45:74:cf:cd:61:2d:d4:95:64:f9:3f:e5:
                    66:75:d0:00:2a:66:2b:34:f4:33:0f:44:e0:f2:52:
                    f5:be:1c:d2:f8:3b:43:5a:0b:65:34:54:cf:a4:8c:
                    78:8d:a1:4e:88:34:bc:f0:07:0d:b9:f2:e8:40:0d:
                    d1:7d:09:ca:35:7f:22:0c:c9:be:93:3e:d6:de:d1:
                    99:22:8e:0d:fe:84:0a:29:0e:50:a3:4e:da:98:79:
                    03:ce:85:34:ee:ea:8d:7d:83:d4:11:cf:d3:e1:6a:
                    9a:82:d5:eb:39:dc:d9:c6:87:5f:82:97:9d:5d:5d:
                    90:4c:cb:cc:0c:7c:c7:a3:51:e8:4c:ba:f0:62:45:
                    dd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B6:93:09:85:CC:71:D8:20:4E:01:1A:59:86:14:85:D8:59:2D:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/f8fe083d-baed-30a1-8518-ee28ce1ef020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.crl

            X509v3 Authority Key Identifier:
                keyid:38:76:CF:4E:AE:7D:02:15:BF:04:B7:51:78:C3:1B:2D:9B:FD:BC:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f95a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:5c:91:0c:0b:0d:fe:e0:cb:61:87:58:ba:55:3f:69:6b:52:
         55:9b:2b:86:9d:04:04:f5:1d:ea:90:cf:63:b5:0e:86:7b:fc:
         6d:1e:52:e9:e1:c0:4f:6e:59:c0:2d:fe:3c:4f:72:db:00:da:
         2a:95:f5:4c:62:b6:81:4e:64:27:4b:0b:8d:1b:20:44:d5:e6:
         db:b0:8f:99:7d:77:1a:52:df:d6:d8:13:da:85:32:eb:10:98:
         27:e3:03:e8:c6:bf:b4:0a:28:c7:53:9f:db:ff:64:ef:fd:50:
         c6:14:ca:82:fc:09:67:c3:b4:46:0d:1e:95:c5:cd:ea:de:be:
         df:d1:f3:20:de:cb:fb:d3:e3:9a:f1:3e:88:f5:18:23:ba:6f:
         da:0e:fd:d8:38:1f:88:ab:1a:5b:26:3a:95:ea:01:0a:56:c0:
         95:cb:c6:6e:a2:4d:43:78:d8:41:c0:a3:2f:28:d3:d1:51:9c:
         cc:62:8f:cb:b9:bd:1f:2e:d1:ed:ba:e3:ab:be:e9:84:7d:d3:
         d8:63:63:c6:db:8b:ce:13:b8:3e:ac:c5:cf:08:44:68:b0:d2:
         39:bf:a9:9e:a7:b2:dc:f1:d8:7c:8d:1c:eb:06:80:dc:15:99:
         09:0c:f7:90:93:cf:71:eb:f6:76:aa:bc:8e:a9:5f:f0:a1:a4:
         aa:db:a1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:34 2024 by rpki-client on console-fra.rpki-client.org