Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/dfa2a4ef-89da-35ba-ab64-debb8f1d8c0c.roa
File:                     dfa2a4ef-89da-35ba-ab64-debb8f1d8c0c.roa (raw, json)
Hash identifier:          gaXzN34Rl4WSqIqG2BBaTUWHuujC5+4UvqtWduG20lk=
Subject key identifier:   0C:A0:F9:C7:C8:97:D7:A3:3A:06:28:8E:99:E6:4F:E7:89:30:05:B6
Certificate issuer:       /CN=9f983207-8073-42af-88ee-df4902c8adaf
Certificate serial:       010D0C9F43285847AB6C1825CC512FE6371107A0
Authority key identifier: C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/dfa2a4ef-89da-35ba-ab64-debb8f1d8c0c.roa
Signing time:             Sat 26 Oct 2024 13:00:42 +0000
ROA not before:           Sat 26 Oct 2024 13:00:42 +0000
ROA not after:            Fri 24 Jan 2025 14:00:42 +0000
asID:                     2000
IP address blocks:        2602:fa2e:200::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ab:6c:18:25:cc:51:2f:e6:37:11:07:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f983207-8073-42af-88ee-df4902c8adaf
        Validity
            Not Before: Oct 26 13:00:42 2024 GMT
            Not After : Jan 24 14:00:42 2025 GMT
        Subject: CN=cf3c5136-9f9a-4283-9f40-07cad2bc7513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:22:e5:75:8e:85:c6:33:f0:9a:39:9f:bc:18:
                    e3:24:df:1e:6e:c1:36:84:da:40:02:9f:e9:50:45:
                    db:a8:a3:5f:af:d7:4e:d7:31:0d:de:eb:28:4c:2b:
                    23:49:ad:31:5e:f7:8c:43:cc:52:d7:06:e7:38:8f:
                    17:11:60:2b:77:20:9a:75:7c:40:68:4e:69:4e:1a:
                    90:62:f7:cd:71:d0:6c:80:2e:e0:23:2a:5c:bd:cf:
                    2f:32:8d:e8:96:5f:d5:ed:77:38:20:5b:50:81:c1:
                    7a:4a:8f:c4:4b:33:bb:09:66:e5:82:57:4a:64:8b:
                    c1:84:18:e0:83:b6:ed:44:54:bf:b2:02:56:6a:83:
                    2a:70:83:63:a0:46:a2:52:7a:44:a3:3f:77:0f:88:
                    a2:d1:dc:e8:70:e9:b8:6e:ba:90:70:ea:4b:7e:61:
                    ca:b2:b5:06:16:dc:d8:22:d8:54:d8:ad:90:f1:4d:
                    45:96:31:59:01:a0:30:54:91:b3:27:75:ad:e4:b9:
                    25:e8:35:db:dc:46:2e:50:5c:cf:e7:15:65:f3:ce:
                    b3:1e:21:3e:ef:a3:9c:1b:f6:93:48:5b:74:9e:dd:
                    15:e4:77:5b:4e:fd:34:11:2e:4a:38:4c:c1:fe:e6:
                    cb:1b:41:3e:4f:7d:73:d1:91:da:09:a9:46:a6:1e:
                    1a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A0:F9:C7:C8:97:D7:A3:3A:06:28:8E:99:E6:4F:E7:89:30:05:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/dfa2a4ef-89da-35ba-ab64-debb8f1d8c0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.crl

            X509v3 Authority Key Identifier:
                keyid:C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa2e:200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:22:cf:c1:99:af:aa:f4:60:e8:2a:ee:1d:8f:7e:67:68:71:
         f2:56:17:bf:fb:74:b1:03:48:9c:c6:7d:8f:7e:20:95:33:49:
         a7:b7:22:7f:d5:98:41:9c:0e:93:b9:47:7e:d4:f0:58:5f:aa:
         a4:ce:95:24:46:e3:f4:47:58:a3:0e:e1:14:1a:1a:cb:25:2b:
         a7:d2:77:7b:d7:48:e2:e1:62:6b:be:1e:c4:ba:d4:7d:50:c5:
         cd:cc:d9:4e:51:bd:c6:64:11:8a:51:0f:52:89:57:84:a1:c7:
         5c:a7:98:32:fd:9a:c3:66:13:b2:3e:67:dd:1d:d4:93:7f:22:
         10:07:db:57:1b:be:5f:1c:a5:76:06:1a:63:d1:fb:86:10:43:
         88:45:c7:6f:ec:40:c4:80:27:35:05:6f:1b:5b:1f:4c:62:f9:
         fb:1c:f3:b6:b5:7d:5d:59:7b:db:18:d8:3b:8a:31:49:7c:30:
         81:b5:16:f2:50:ef:44:02:dd:84:45:ad:2f:fb:3b:81:32:94:
         60:0c:3a:2f:70:a1:40:4a:9b:29:2f:30:6b:48:94:fa:54:4d:
         71:a5:fe:32:c8:5e:bb:cb:26:a5:ce:c3:f3:b0:cb:87:95:c8:
         f1:ea:c7:60:4d:b9:b3:95:8e:14:75:ad:60:f6:8d:0c:66:c9:
         3b:98:d4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:11 2024 by rpki-client on console-ams.rpki-client.org