Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/a79e4587-f031-32d5-8b55-e7d6d90ffac4.roa
File:                     a79e4587-f031-32d5-8b55-e7d6d90ffac4.roa (raw, json)
Hash identifier:          GfoDFlytl024+C6dZ/DOUrqOoMBlpBgY4oVIrzIvhLk=
Subject key identifier:   06:86:3C:96:44:51:EC:0B:EA:27:54:FD:95:81:A9:B5:76:9A:53:D3
Certificate issuer:       /CN=868a7747-d16d-4c1e-b36c-28d03effd7eb
Certificate serial:       010D0C9F4328584731FB9A48708C2B855A0BA580
Authority key identifier: C0:EB:6D:CC:1A:A3:55:C6:38:2C:BA:06:CD:71:23:0A:77:F7:0C:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/a79e4587-f031-32d5-8b55-e7d6d90ffac4.roa
Signing time:             Fri 13 Sep 2024 01:00:32 +0000
ROA not before:           Fri 13 Sep 2024 01:00:32 +0000
ROA not after:            Thu 12 Dec 2024 02:00:32 +0000
asID:                     150698
IP address blocks:        2602:f969::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/868a7747-d16d-4c1e-b36c-28d03effd7eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/868a7747-d16d-4c1e-b36c-28d03effd7eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:31:fb:9a:48:70:8c:2b:85:5a:0b:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=868a7747-d16d-4c1e-b36c-28d03effd7eb
        Validity
            Not Before: Sep 13 01:00:32 2024 GMT
            Not After : Dec 12 02:00:32 2024 GMT
        Subject: CN=9399cfbc-3e7c-4c3f-af1a-1742bd964b13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:15:ae:ce:43:3a:3c:44:85:5a:d6:e8:bf:56:
                    07:38:25:38:f0:02:cb:2c:58:30:c4:8a:73:87:df:
                    ae:d8:25:a3:73:6c:97:f3:2e:af:f0:c0:e1:36:75:
                    18:f4:78:1e:65:99:a7:95:31:68:9f:f6:50:c9:49:
                    c3:a5:84:5c:a1:28:03:4d:ed:78:c0:f8:aa:04:07:
                    91:2b:4a:4d:1a:42:c1:92:cb:14:0f:51:d4:22:c2:
                    32:89:1d:ec:7a:08:5d:17:a9:c5:a8:db:2a:9a:fa:
                    81:66:eb:05:01:26:54:7c:75:f7:bf:f6:a5:63:e4:
                    57:40:1b:00:49:c4:fa:db:c4:f5:bf:0d:9a:56:c7:
                    36:27:b8:d6:70:71:7c:83:f1:06:ec:7f:a0:d1:fb:
                    9f:db:0f:45:04:e6:75:a0:8d:a8:a7:6f:de:47:df:
                    fd:ad:13:46:20:03:67:81:0f:c2:03:48:7b:a7:e1:
                    82:43:46:85:85:13:f3:f0:24:0f:3c:11:f2:c0:c9:
                    ce:80:80:79:68:7a:66:2f:7e:7d:8e:56:29:12:01:
                    0b:cb:a4:9d:30:03:ac:6f:1b:3e:33:37:e6:cc:3c:
                    81:96:2e:8e:2d:8b:ee:ff:64:28:4a:7b:82:96:81:
                    69:18:eb:78:32:08:b9:fd:f2:17:3e:d3:7e:cc:08:
                    c2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:86:3C:96:44:51:EC:0B:EA:27:54:FD:95:81:A9:B5:76:9A:53:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/a79e4587-f031-32d5-8b55-e7d6d90ffac4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/868a7747-d16d-4c1e-b36c-28d03effd7eb.crl

            X509v3 Authority Key Identifier:
                keyid:C0:EB:6D:CC:1A:A3:55:C6:38:2C:BA:06:CD:71:23:0A:77:F7:0C:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f969::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:47:07:0f:bc:8a:5b:89:97:89:81:91:0c:e6:2c:e9:de:e1:
         81:7a:85:01:81:3e:f7:2f:1e:7c:89:a7:72:ce:46:ea:cb:eb:
         02:00:a6:fe:c0:26:0e:cd:d7:06:ad:9d:21:fc:c2:df:fc:b6:
         b4:cf:59:63:0f:3c:7a:58:ed:1f:98:eb:27:28:20:b1:0b:68:
         dd:5a:20:a7:09:40:dd:f6:79:5f:e2:3a:39:63:90:a6:09:7e:
         bc:dc:35:35:9f:91:e3:7d:92:f5:83:9d:15:4a:4f:9f:93:7c:
         ab:86:4b:b7:6a:15:0f:75:41:35:71:ba:67:b7:05:34:7f:0b:
         be:d8:b5:4a:bb:18:c7:63:43:0b:9a:e4:ba:5b:d1:11:7a:1f:
         d7:59:90:bf:1d:87:50:fc:a6:e2:35:8c:0b:89:b9:94:cd:00:
         dc:17:ef:17:db:cd:42:dd:d2:55:5c:51:cf:5f:76:d2:d4:22:
         69:6e:cb:ed:73:7f:9d:4a:ca:71:b3:ef:c2:34:bb:fc:cd:fb:
         9b:1f:0e:f4:6a:6a:8f:3d:a9:42:60:b7:83:7c:f5:3e:6c:63:
         13:41:a1:69:b3:9a:da:76:55:7d:59:7e:8b:b1:f2:fd:97:a8:
         43:93:4c:d4:7a:53:a3:88:bc:e7:44:4e:75:9a:b6:8e:89:b9:
         da:ff:f5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:07 2024 by rpki-client on console-fra.rpki-client.org