Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4e136740-8a5c-3866-bc51-aa216174bac7.roa
File:                     4e136740-8a5c-3866-bc51-aa216174bac7.roa (raw, json)
Hash identifier:          3MHY08FJK/GY9j6HIraBNOHhqJ4dvjJozV/7QES7V9s=
Subject key identifier:   0B:99:E3:99:F4:53:8C:BD:3C:1C:08:6C:FD:75:02:F9:88:1E:F6:F2
Certificate issuer:       /CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
Certificate serial:       010D0C9F43285847DF2F5323612CF46931D76C80
Authority key identifier: E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4e136740-8a5c-3866-bc51-aa216174bac7.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     57974
IP address blocks:        2602:2d4:100::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:53:23:61:2c:f4:69:31:d7:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=0b1745f1-0068-4901-bb6d-a5a303a3f760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e4:95:71:16:a5:9a:ba:5b:3c:a9:28:54:35:
                    6f:09:39:f1:e1:f0:b1:49:70:04:2b:8d:25:d8:53:
                    ba:d3:4c:60:d4:80:e7:99:94:13:96:8a:ff:81:2c:
                    6b:1c:0c:db:0c:0f:90:87:15:c3:2a:1e:07:a5:47:
                    11:f8:d3:b7:78:ab:27:95:86:45:12:2b:41:7e:80:
                    b7:e5:af:84:73:01:0f:32:c9:29:03:50:ad:b1:6f:
                    cd:48:f6:16:df:2d:ff:dd:79:40:d8:72:4a:1a:44:
                    2f:b7:f4:ae:3c:05:d0:a7:74:7d:1a:c4:77:3f:61:
                    4d:ca:8c:00:f6:4f:c1:73:3a:33:84:54:58:41:83:
                    a1:49:2f:24:92:5e:b8:f3:02:e4:e3:7d:3a:01:34:
                    58:b2:dc:a9:14:ee:61:3d:7e:b8:cc:52:ac:35:85:
                    46:3c:4c:84:b2:9d:42:dc:d6:81:e1:ed:65:d6:e6:
                    bc:5c:35:4f:c6:c2:5e:7a:71:25:98:bf:1c:58:bb:
                    78:5c:7b:fc:ea:50:26:93:3d:9b:8d:ca:60:4d:67:
                    2f:e7:cc:f5:3d:2b:2d:c3:60:06:ae:47:05:96:7b:
                    9f:41:02:06:d9:5b:4e:5c:0c:2b:17:72:04:0d:20:
                    6f:14:b1:c7:d0:c8:f5:d4:17:82:b0:53:be:ab:88:
                    b0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:99:E3:99:F4:53:8C:BD:3C:1C:08:6C:FD:75:02:F9:88:1E:F6:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4e136740-8a5c-3866-bc51-aa216174bac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2d4:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:e0:64:e1:d8:fc:b7:92:84:00:11:ac:f4:0f:20:c2:6e:91:
         a0:56:9c:14:94:8c:69:cc:0b:ee:64:e6:dd:46:76:db:fc:b1:
         fa:75:e3:43:2b:23:32:96:47:a9:80:fe:d7:0b:f8:de:2b:08:
         e5:63:43:40:a7:45:11:db:14:e2:f3:65:b9:af:a2:79:70:5f:
         27:ef:76:64:d3:f3:85:5a:bc:ca:6a:97:05:a8:79:1b:8d:e0:
         3d:5c:02:70:18:67:e8:e0:fd:ff:ef:40:b0:b6:1d:08:23:ad:
         88:c5:d0:04:a0:c3:61:33:43:a3:59:71:58:f8:89:3f:0a:3c:
         96:44:e7:f9:e1:0b:f3:89:7b:00:43:85:f5:9e:16:8b:94:b7:
         48:74:02:97:03:f4:ee:71:c5:72:ec:57:00:79:d3:f4:4f:6a:
         f9:f9:d5:f6:2e:fb:ab:70:7d:49:9d:67:82:62:c9:bd:71:e0:
         e7:e7:12:3b:69:ac:4c:90:9c:ea:15:d5:ad:f7:f7:77:68:40:
         a8:d7:85:ff:5e:f5:99:33:24:16:2e:07:b6:97:a9:47:52:85:
         3c:3c:12:71:14:30:f4:83:6b:a5:f9:84:87:25:bf:df:48:e5:
         9f:57:e9:1a:ef:ac:ab:85:14:19:f3:7e:e4:18:6b:fd:7a:e3:
         45:1f:93:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:21:57 2024 by rpki-client on console-ams.rpki-client.org