Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf/74d46906-7c6b-3b97-a650-d8a5e6367bf2.roa
File:                     74d46906-7c6b-3b97-a650-d8a5e6367bf2.roa (raw, json)
Hash identifier:          qNS1CZEgWiaavAGkUL/VyACP3NKhnQIwUnY7ehvhCYU=
Subject key identifier:   11:3F:F0:95:EF:5D:6A:84:F0:3F:E2:61:A3:8F:6F:77:A2:CA:6B:A6
Certificate issuer:       /CN=f2cc1c3b-d144-4350-8e42-9af4627c1cdf
Certificate serial:       010D0C9F4328584734C88CE9FD9979A6A5F8F780
Authority key identifier: DD:98:CA:96:11:81:EA:1C:37:97:5D:D9:9F:01:2A:4C:67:E6:06:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf/74d46906-7c6b-3b97-a650-d8a5e6367bf2.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     14618
IP address blocks:        2602:810:400b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf/f2cc1c3b-d144-4350-8e42-9af4627c1cdf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf/f2cc1c3b-d144-4350-8e42-9af4627c1cdf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:8c:e9:fd:99:79:a6:a5:f8:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2cc1c3b-d144-4350-8e42-9af4627c1cdf
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=e951340c-2c42-4848-bf74-cb627f6b967d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e0:26:43:73:8f:58:e6:ca:0e:95:88:07:de:
                    44:95:df:b1:cd:0d:bf:f6:c9:28:fe:4b:f1:00:19:
                    34:e4:54:31:97:1e:17:de:e6:c4:1c:69:69:0c:35:
                    b3:65:c2:f4:9c:5a:28:16:5b:ef:95:25:aa:03:22:
                    66:fa:21:75:d7:a2:fb:c8:d2:e7:9e:d1:7c:e3:68:
                    dc:ab:96:15:e2:fa:75:f6:55:f5:58:6d:17:56:d5:
                    d4:5e:00:fd:98:2d:31:f0:cb:23:d3:b4:8c:5a:61:
                    23:ba:03:3b:7f:92:94:3c:b6:e9:ac:aa:91:e4:c8:
                    3a:68:b5:43:6e:29:56:39:19:ce:ae:59:24:ba:a8:
                    99:91:33:4c:ba:76:47:15:06:c6:7f:13:95:7e:44:
                    eb:2a:e2:1e:a7:30:42:c5:75:16:3a:73:00:52:1d:
                    02:11:0b:71:f5:c2:fe:f5:7e:61:6a:a9:ca:c9:11:
                    6c:ed:17:a3:12:5d:22:c6:99:bd:21:6d:dc:18:7e:
                    8d:0b:e6:28:b7:ff:e0:c7:8d:e8:cc:7a:1a:30:c6:
                    fa:85:48:45:d0:c6:d9:ae:89:b1:60:13:bb:f7:8b:
                    c0:12:4d:91:db:33:92:5d:48:fe:44:f3:62:50:08:
                    01:f7:02:6c:2e:70:7e:dd:9f:a7:39:26:3d:55:69:
                    43:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3F:F0:95:EF:5D:6A:84:F0:3F:E2:61:A3:8F:6F:77:A2:CA:6B:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf/74d46906-7c6b-3b97-a650-d8a5e6367bf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf/f2cc1c3b-d144-4350-8e42-9af4627c1cdf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:98:CA:96:11:81:EA:1C:37:97:5D:D9:9F:01:2A:4C:67:E6:06:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:810:400b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:90:51:30:16:0c:f9:a4:d9:d3:7a:7c:d6:17:d7:7f:ec:47:
         4b:e5:c4:fc:32:bf:cf:32:0d:98:23:75:97:27:ae:30:04:0e:
         a3:f1:7c:35:61:bc:83:84:33:61:42:8e:67:9f:72:66:b7:8e:
         48:ff:72:80:ce:00:72:2e:08:83:9f:57:c4:43:b2:ec:e5:7a:
         8f:45:9c:36:c6:bd:0d:d6:51:88:69:55:f3:cd:16:3d:db:e8:
         44:d3:c6:ed:4e:23:29:50:57:00:f0:86:a0:56:7d:92:2f:13:
         c6:23:aa:13:fd:90:4d:b0:28:f5:84:8a:ad:b2:85:6e:9e:4b:
         3f:75:a2:cc:40:98:a7:08:18:1f:a8:27:cf:bb:43:22:4f:b0:
         f1:3c:b4:1f:6d:a2:52:ed:29:23:43:4f:fc:d7:69:09:b8:58:
         0a:c9:a1:06:bc:f5:d4:c5:e3:6e:d1:94:f2:7d:0c:58:2d:6a:
         7e:2a:fb:67:8c:62:f9:d9:19:82:63:61:9b:09:b7:a7:9d:42:
         1a:29:c0:a0:00:4a:e4:77:6a:6c:5b:5a:b3:6e:6f:e6:b6:83:
         71:59:2e:89:2b:9b:e6:a5:3f:8f:35:9d:c2:45:00:7d:83:dc:
         5e:b5:11:f7:7c:76:29:c6:a2:01:e0:b2:f7:d8:34:c6:8b:76:
         e7:ec:fc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:29:59 2024 by rpki-client on console-fra.rpki-client.org