Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/117ea7ab-5684-39bd-8cdc-2e69e7dba69e.roa
File:                     117ea7ab-5684-39bd-8cdc-2e69e7dba69e.roa (raw, json)
Hash identifier:          DgXcmsZDIeK2Jz1pYC4eQECCr9dlIsGr5qFVw+BnmGA=
Subject key identifier:   EA:D2:3B:4C:FD:4C:A4:C0:A6:2F:D0:DD:8D:FB:BF:46:E2:3B:DF:FF
Certificate issuer:       /CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb
Certificate serial:       010D0C9F43285847A4712FA00D4BD9A6949043E0
Authority key identifier: 3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/117ea7ab-5684-39bd-8cdc-2e69e7dba69e.roa
Signing time:             Thu 24 Oct 2024 01:00:32 +0000
ROA not before:           Thu 24 Oct 2024 01:00:32 +0000
ROA not after:            Wed 22 Jan 2025 02:00:32 +0000
asID:                     201217
IP address blocks:        2602:f96c:f0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a4:71:2f:a0:0d:4b:d9:a6:94:90:43:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb
        Validity
            Not Before: Oct 24 01:00:32 2024 GMT
            Not After : Jan 22 02:00:32 2025 GMT
        Subject: CN=4b0bbc94-945b-49c7-9f08-595350672301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b8:0d:33:d0:48:03:d2:8f:8c:28:65:a6:cf:
                    e2:32:aa:25:33:cd:28:e9:f1:39:6a:ea:29:99:75:
                    cf:e3:19:ea:88:1f:d3:19:62:4a:c7:7e:d0:d1:8c:
                    53:ce:bf:62:39:1f:9a:9e:bb:5f:e9:3f:33:63:e0:
                    d4:18:aa:3b:c3:63:c7:2e:59:bb:25:3d:1c:2b:35:
                    6a:e0:d5:e7:af:8b:2c:62:2c:13:17:38:45:e4:1a:
                    d1:6e:b3:94:c8:c7:74:89:9f:d1:9f:11:77:9b:b3:
                    1e:99:ba:f2:21:55:f8:96:a2:b9:db:4f:9b:64:fd:
                    bd:df:1e:ad:57:89:20:49:4d:e1:1d:81:e9:9c:de:
                    2f:0d:41:44:73:15:ab:51:b0:2d:5a:78:6f:63:d7:
                    7a:a3:79:0d:fb:b6:dc:88:7e:1b:3a:3a:47:25:f0:
                    48:14:0a:51:58:bc:9c:6c:98:43:8b:07:b4:bd:8d:
                    87:d6:05:a9:ea:fb:c2:35:b8:0c:bb:86:5d:6a:54:
                    33:ad:c0:b7:96:ff:05:e9:ec:04:62:62:0f:e1:19:
                    b2:c2:2a:87:ec:89:61:ac:9c:f6:95:29:49:e3:8b:
                    1a:8d:74:57:72:ab:f4:6f:01:36:36:fc:8a:e4:3a:
                    b7:e6:90:16:95:28:a1:ad:80:a7:fe:0f:d8:b4:3d:
                    51:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D2:3B:4C:FD:4C:A4:C0:A6:2F:D0:DD:8D:FB:BF:46:E2:3B:DF:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/117ea7ab-5684-39bd-8cdc-2e69e7dba69e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl

            X509v3 Authority Key Identifier:
                keyid:3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96c:f0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:f4:d2:1d:cd:50:ae:8b:1f:00:9f:11:9b:56:1c:73:8d:b0:
         9e:81:a0:bf:b3:45:7b:49:d5:8c:58:de:4e:57:ff:ce:0e:ec:
         1b:5d:ba:b1:46:d7:20:e7:1e:f3:0e:14:5f:43:56:28:d1:76:
         2b:f1:64:68:ab:69:b2:3f:42:20:25:46:8c:20:fb:4e:a0:0d:
         69:42:80:2c:a5:88:52:e9:28:bd:d2:b6:0b:d0:a5:75:a9:ad:
         99:a4:f4:d2:00:6f:8a:c5:15:52:f1:e3:7c:97:dc:74:31:a9:
         8a:eb:04:bc:4c:5a:31:4f:90:df:33:98:aa:90:5b:25:69:84:
         ef:f3:d0:29:c5:a2:0c:1c:3e:96:fe:04:41:9c:e1:c7:84:ee:
         74:44:eb:c1:44:5c:d7:21:9d:5a:bb:0e:a4:43:57:19:0e:8b:
         f1:b3:b1:cf:b2:5c:3c:bd:70:66:a0:da:dc:cd:56:d0:93:f5:
         bc:84:a0:c1:9f:fb:52:a8:28:57:ea:9e:06:3f:46:e9:e1:6d:
         b2:89:fd:ba:56:7f:83:d7:99:c2:ce:3e:55:eb:60:70:b0:87:
         1d:7b:52:a3:92:19:c5:50:be:5b:39:6b:4b:0d:74:96:a1:89:
         da:a7:86:6c:06:b9:f8:77:44:92:e3:7d:09:05:66:73:04:eb:
         d0:fb:55:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:04 2024 by rpki-client on console-ams.rpki-client.org