Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/3d9ce023-0de3-3125-a98a-468a1abb87f4.roa
File:                     3d9ce023-0de3-3125-a98a-468a1abb87f4.roa (raw, json)
Hash identifier:          9JCM8ivnENT2AlZNZUv6pKdf+dX5MNxRRskPlXV9Zac=
Subject key identifier:   E2:F7:86:9F:9A:C8:2F:27:02:EA:46:C7:D7:C5:A0:44:0B:FD:72:31
Certificate issuer:       /CN=868a7747-d16d-4c1e-b36c-28d03effd7eb
Certificate serial:       010D0C9F43285847BEF6C6B932758E72F158E080
Authority key identifier: C0:EB:6D:CC:1A:A3:55:C6:38:2C:BA:06:CD:71:23:0A:77:F7:0C:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/3d9ce023-0de3-3125-a98a-468a1abb87f4.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     150698
IP address blocks:        2602:f969:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/868a7747-d16d-4c1e-b36c-28d03effd7eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/868a7747-d16d-4c1e-b36c-28d03effd7eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f6:c6:b9:32:75:8e:72:f1:58:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=868a7747-d16d-4c1e-b36c-28d03effd7eb
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=621ec0b1-8d33-4fda-b072-2ef2f3b97ccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2c:0f:e4:2b:34:b8:63:b1:6e:2b:6f:e5:e1:
                    07:b0:ed:e9:77:72:c7:97:75:d8:1e:3b:6e:ae:59:
                    a8:01:09:04:26:93:a0:0a:22:c9:90:d3:f9:b7:e6:
                    7b:5e:09:45:cf:f7:23:17:c3:fc:84:d2:5c:5b:15:
                    11:b5:e9:c6:d0:b4:ad:7e:3a:2e:ae:82:fe:cc:5f:
                    92:f7:18:d9:69:3f:f7:04:bd:42:1d:c7:ad:b9:28:
                    b9:28:32:61:88:cf:2d:65:ed:4b:0f:ec:c2:a8:b9:
                    f9:72:8a:1a:a0:03:97:29:10:3d:a6:c9:63:70:78:
                    44:83:71:a7:53:71:c2:2c:07:b4:1d:ae:26:11:31:
                    03:99:a7:13:ad:fb:65:6e:dc:80:7a:65:73:39:f1:
                    d2:7f:9c:83:4b:d0:21:6a:a2:2a:2f:f0:b4:a7:de:
                    c9:d4:55:64:ff:f1:3d:52:1f:f1:60:43:42:91:27:
                    92:f3:6b:e7:32:15:57:c6:49:d2:d9:cb:1c:5a:d1:
                    0f:48:fd:7e:4c:d1:84:b5:ec:a4:dc:ec:18:da:9d:
                    17:dc:c4:e2:d9:5d:56:cc:48:3c:f9:26:62:7d:a6:
                    19:b3:d4:b2:ab:b7:4c:fc:85:ab:ad:ae:60:3f:8a:
                    46:2c:f6:ff:c5:2d:17:87:08:9a:cf:1e:b9:d7:cc:
                    3a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F7:86:9F:9A:C8:2F:27:02:EA:46:C7:D7:C5:A0:44:0B:FD:72:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/3d9ce023-0de3-3125-a98a-468a1abb87f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/868a7747-d16d-4c1e-b36c-28d03effd7eb.crl

            X509v3 Authority Key Identifier:
                keyid:C0:EB:6D:CC:1A:A3:55:C6:38:2C:BA:06:CD:71:23:0A:77:F7:0C:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f969:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:6e:71:2b:cc:ea:42:0e:e0:39:11:d8:c9:b1:a4:57:76:1c:
         35:90:8b:de:fe:ca:b4:56:6e:4f:35:48:cb:63:5b:de:57:8b:
         d0:32:6d:aa:a1:2c:80:1b:65:14:f8:e0:03:21:2e:d5:dd:3c:
         1a:3d:d1:f1:e5:20:e5:c8:3a:e9:6c:05:52:06:d8:bc:fa:66:
         2a:36:dc:8e:88:0d:25:5a:67:12:63:34:42:82:55:7e:a9:ac:
         91:41:9b:a7:bb:3b:cd:90:b5:9d:88:e9:49:65:93:5a:7d:f7:
         28:01:9c:97:2b:cf:fb:37:b1:d0:a7:de:eb:0c:35:39:46:06:
         98:4d:1a:03:65:8a:5f:c9:f0:bd:18:b6:ac:f0:4a:a3:2b:3e:
         1b:c5:bd:fb:cb:d2:12:b8:1b:d8:c8:4a:b5:17:89:93:5a:8e:
         59:10:94:99:22:e8:f8:04:d0:9d:ac:03:ac:6b:0e:90:f9:87:
         77:50:8d:b1:af:c2:08:a9:de:1a:54:74:9f:37:28:52:6f:44:
         f3:54:08:41:59:8f:8a:e0:8c:b3:28:ff:a3:d4:51:e3:0e:0a:
         f5:01:84:09:80:8a:91:fd:7a:be:63:f5:32:86:4a:7f:45:90:
         17:e7:e3:98:7d:90:54:56:49:dc:ff:3e:fb:d5:af:47:de:d0:
         79:19:29:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:07 2024 by rpki-client on console-fra.rpki-client.org