Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/b155efeb-d3dc-31be-bdce-c8768e417775.roa
File:                     b155efeb-d3dc-31be-bdce-c8768e417775.roa (raw, json)
Hash identifier:          KjBPGwpIbsl1/0rfUVmnsWHFsP714L/LiznvNl1l/8s=
Subject key identifier:   9C:AF:4C:B3:CE:F6:ED:64:4C:41:C0:BA:48:9E:4B:78:FA:98:F1:91
Certificate issuer:       /CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
Certificate serial:       010D0C9F4328584776B24EBF7F6BF045C1787818
Authority key identifier: D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/b155efeb-d3dc-31be-bdce-c8768e417775.roa
Signing time:             Mon 07 Oct 2024 15:44:36 +0000
ROA not before:           Mon 07 Oct 2024 15:44:36 +0000
ROA not after:            Sun 05 Jan 2025 16:44:36 +0000
asID:                     401100
IP address blocks:        2602:f972:ff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:b2:4e:bf:7f:6b:f0:45:c1:78:78:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
        Validity
            Not Before: Oct  7 15:44:36 2024 GMT
            Not After : Jan  5 16:44:36 2025 GMT
        Subject: CN=426aefb1-40d7-4ec5-967f-b587ae0118bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a0:65:90:72:ab:68:c9:7b:0f:69:92:7b:a2:
                    44:6c:36:66:d7:85:90:2d:b7:52:05:fe:d6:74:57:
                    30:9d:01:a6:fe:63:28:a4:61:f0:84:70:2f:00:09:
                    70:19:2a:4d:6e:51:ac:58:ce:34:bc:ce:5e:f6:99:
                    7a:31:ff:48:4f:71:60:5e:a8:c3:90:8e:76:1d:d4:
                    37:4c:6a:16:79:0f:06:a2:c5:d1:28:45:f2:75:78:
                    e6:d4:b6:a9:b3:1c:3b:54:bd:4e:52:96:0e:95:3c:
                    82:28:eb:07:ac:aa:f5:d4:70:ea:5b:80:1c:ff:b2:
                    96:47:49:db:f0:53:1d:48:34:0b:08:8c:28:07:8c:
                    b4:9f:9d:f8:e6:a9:83:aa:d7:d2:93:0a:32:b8:44:
                    06:e8:8e:ce:5e:93:0e:41:56:47:5a:f6:ba:c3:7f:
                    dc:a8:b2:0a:d5:5d:fa:52:c4:9e:bd:11:24:8c:0f:
                    77:6e:d5:d7:90:85:2c:63:0e:b0:5a:e0:92:4e:d7:
                    cb:fd:f9:0e:38:e3:8f:37:76:8f:82:ea:bb:c3:6c:
                    78:7b:08:da:8b:11:00:52:9b:ad:e7:c0:7d:40:98:
                    e7:39:ce:d5:83:f5:41:08:d9:6c:60:f7:31:f2:04:
                    85:b4:7d:6c:2d:6e:fd:2c:e0:bc:ee:e0:ac:77:8f:
                    ae:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AF:4C:B3:CE:F6:ED:64:4C:41:C0:BA:48:9E:4B:78:FA:98:F1:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/b155efeb-d3dc-31be-bdce-c8768e417775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl

            X509v3 Authority Key Identifier:
                keyid:D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f972:ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:34:45:85:67:85:56:f5:7a:1f:bd:67:a3:83:e9:1f:06:63:
         eb:02:80:df:e8:e7:51:d8:b1:60:64:28:05:30:8a:81:18:c5:
         2c:e4:ba:d1:03:d4:6b:54:bb:15:26:e9:3f:ce:d4:a5:83:be:
         7c:37:0a:32:2c:94:d0:f4:b2:48:53:73:19:9b:07:84:29:b5:
         25:c1:de:78:ef:ec:76:94:cb:ef:20:90:ed:a8:af:52:22:dc:
         4f:c7:85:27:05:f2:94:27:09:79:4e:b9:0d:cc:5b:4b:6c:80:
         ee:ec:ba:6e:8a:c8:ac:0a:89:48:ba:60:3e:f0:84:b0:89:2a:
         2b:53:58:f4:da:b1:ee:4d:3a:35:07:17:39:af:e3:9e:d6:a9:
         32:c7:3e:be:e9:eb:bd:23:ee:14:48:6e:98:03:30:27:b9:df:
         26:34:53:58:09:2f:ea:ba:a0:bf:60:bc:55:13:c0:d5:3a:f0:
         f0:0d:d6:a3:bd:cb:47:e6:91:45:fe:68:c9:e5:d4:9a:6c:d3:
         66:a5:ad:2c:f8:12:43:1f:49:bb:39:a3:da:26:e9:61:8a:c3:
         85:73:4f:36:40:b8:d1:df:ed:be:93:0f:77:94:50:d9:46:f2:
         fe:71:88:60:16:d0:5f:a7:7c:97:d2:89:d8:4a:5a:3d:77:65:
         f2:38:b4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:28:44 2024 by rpki-client on console-ams.rpki-client.org