Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/168a62fb-6f1e-34bb-a531-a6c0ac28f6ad.roa
File:                     168a62fb-6f1e-34bb-a531-a6c0ac28f6ad.roa (raw, json)
Hash identifier:          k9aa0VRZH1l4jE6BURvouRfA6NBxz6l/MGe+0GWnciY=
Subject key identifier:   4D:25:A6:7A:98:6C:DB:3A:9A:DA:2B:82:89:6A:5F:5B:A1:45:70:4E
Certificate issuer:       /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
Certificate serial:       010D0C9F4328584790E664DE649A2193F9B428F4
Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/168a62fb-6f1e-34bb-a531-a6c0ac28f6ad.roa
Signing time:             Thu 17 Oct 2024 01:00:32 +0000
ROA not before:           Thu 17 Oct 2024 01:00:32 +0000
ROA not after:            Wed 15 Jan 2025 02:00:32 +0000
asID:                     53727
IP address blocks:        2602:f982:102::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:90:e6:64:de:64:9a:21:93:f9:b4:28:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
        Validity
            Not Before: Oct 17 01:00:32 2024 GMT
            Not After : Jan 15 02:00:32 2025 GMT
        Subject: CN=1bab293f-cd19-419e-b292-469b13def182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:51:48:01:33:9e:97:b2:58:a1:8f:f7:27:59:
                    41:a6:0a:be:ac:f6:02:a8:b6:a4:dd:ae:33:d3:11:
                    7e:b6:c7:c2:4d:42:47:75:8e:91:e3:bf:4b:64:4c:
                    e6:cc:28:f5:74:92:1b:7b:d7:25:fc:4b:a0:c7:e5:
                    ba:92:ac:d1:2f:4e:c0:26:8b:01:66:ce:ca:a9:4e:
                    13:fe:65:28:9e:51:28:6a:dd:8f:dc:06:91:db:02:
                    e5:04:17:f0:53:ef:84:d7:34:15:b5:f2:a3:0f:19:
                    5c:f4:d9:67:96:f3:9c:42:32:35:93:7f:cc:6f:2f:
                    6e:e3:c2:e1:69:bf:1d:08:3a:a3:a3:fe:21:37:6b:
                    dd:84:d5:75:12:e1:7b:17:60:78:8e:b9:d5:34:ab:
                    b0:93:0b:50:99:e3:a3:9c:28:14:2f:b1:73:8c:31:
                    ae:c5:ab:bb:40:cd:d8:5a:09:28:89:3a:0e:5d:d4:
                    fb:8d:b8:ba:b2:d7:c9:5c:a6:a3:e7:fe:f2:b2:6d:
                    61:8b:2f:9b:80:2c:4c:89:e4:d9:e8:27:2d:c0:f9:
                    de:06:68:d8:ba:1d:a1:aa:9a:d9:db:70:b9:db:d2:
                    da:40:35:57:b2:57:2b:dd:61:5e:10:57:91:67:fc:
                    7a:d6:b8:01:b1:b6:f2:df:6d:0e:68:f0:1b:fe:2c:
                    09:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:25:A6:7A:98:6C:DB:3A:9A:DA:2B:82:89:6A:5F:5B:A1:45:70:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/168a62fb-6f1e-34bb-a531-a6c0ac28f6ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f982:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:40:44:50:ca:1b:b1:17:ec:a2:eb:53:75:78:4e:62:7c:c3:
         be:b8:81:5b:0e:12:74:d8:c8:71:7b:57:9c:91:a8:f0:a0:42:
         77:2b:dd:a3:1a:7b:1f:1f:38:c9:57:31:86:dc:31:7d:b3:e4:
         b9:10:b7:1b:d5:c2:67:bd:4b:7c:0d:e0:78:72:63:d9:e9:94:
         1f:1f:b9:1d:28:b7:16:97:81:67:88:48:b2:12:0d:c4:f5:4d:
         a2:d8:27:ea:4a:bd:01:45:15:8f:cf:0d:ca:4f:89:14:a7:53:
         66:be:c0:45:7d:3a:b4:8f:73:e5:14:91:2e:c4:02:bb:5c:95:
         a9:66:bc:55:74:53:2b:ac:c0:f1:c4:c7:d5:13:19:fb:f0:47:
         83:06:b7:e7:87:56:f8:f6:90:85:08:b2:ec:19:f7:76:27:87:
         0e:8f:a9:17:d1:71:d3:b0:9f:ea:bc:f0:15:a4:8e:21:3b:e0:
         f3:86:ed:ca:ec:2f:42:43:4f:4d:77:0a:cf:5e:ca:b8:dd:24:
         01:54:e9:4e:2a:e1:6e:5d:d9:b0:40:ba:04:d1:79:f3:03:27:
         e5:01:c4:08:98:5f:e0:c1:46:13:9b:d7:58:80:97:3a:4e:61:
         00:95:31:47:fc:a4:a7:c1:ce:a9:d3:bb:0a:97:95:85:80:93:
         ba:df:bf:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:58:58 2024 by rpki-client on console-fra.rpki-client.org