Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/f0875c5d-ee9e-3f7e-8a41-81f8031211db.roa
File:                     f0875c5d-ee9e-3f7e-8a41-81f8031211db.roa (raw, json)
Hash identifier:          AQgj32AS3lp+WUqNIIK/LBs7x1KhKnMV+/chKMH4A24=
Subject key identifier:   04:86:F9:23:37:1F:25:F7:8D:8F:9A:6E:55:15:BE:8D:37:1C:66:4E
Certificate issuer:       /CN=9f983207-8073-42af-88ee-df4902c8adaf
Certificate serial:       010D0C9F4328584765A0F26D4B6DDADFDA98CB80
Authority key identifier: C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/f0875c5d-ee9e-3f7e-8a41-81f8031211db.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     801
IP address blocks:        2602:fa2e:8a1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:f2:6d:4b:6d:da:df:da:98:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f983207-8073-42af-88ee-df4902c8adaf
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=6eb5c464-c164-4386-82cc-b4252c762aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:51:d0:5f:a1:21:39:03:f7:0b:1f:72:f1:35:
                    2d:b6:f2:1d:f5:b0:b3:1c:3c:59:37:bb:77:45:7e:
                    4e:7a:00:5b:14:fc:09:3c:31:fe:60:32:b9:53:e4:
                    2d:14:82:ba:85:25:30:86:c1:b9:79:15:eb:88:3d:
                    c0:20:bc:fd:51:fd:df:dd:63:f6:ed:bd:09:64:f9:
                    66:5b:50:74:c5:14:e9:8d:b3:83:28:16:29:d6:8a:
                    9d:4e:5e:f8:f0:b7:6d:78:de:91:d2:b5:a7:e3:5d:
                    aa:ff:32:2e:c4:4e:5c:c3:c1:43:d4:5a:6e:04:e1:
                    70:03:8e:bb:7e:76:d8:82:1c:3c:1e:a5:8b:18:db:
                    bd:d5:81:3d:15:30:fa:9f:0c:44:fb:df:ec:db:db:
                    fb:7d:ce:a9:1f:5a:7b:dd:be:9d:01:18:66:28:ce:
                    20:27:2a:9e:2e:73:60:61:38:e3:ab:55:f9:d8:1b:
                    6b:7f:79:51:99:f1:20:38:5d:30:e8:5f:33:bc:e8:
                    34:c6:88:d6:34:1d:54:8b:a6:d5:66:bc:7e:57:1e:
                    b6:84:af:5f:09:a4:b6:4c:a9:5d:75:be:d7:6b:53:
                    6e:89:18:8d:9c:f3:e8:d5:40:58:ed:4a:23:a2:6d:
                    59:2b:db:fe:41:b3:99:d1:9c:68:2f:83:df:58:fe:
                    e1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:86:F9:23:37:1F:25:F7:8D:8F:9A:6E:55:15:BE:8D:37:1C:66:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/f0875c5d-ee9e-3f7e-8a41-81f8031211db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.crl

            X509v3 Authority Key Identifier:
                keyid:C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa2e:8a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:09:52:2a:0b:09:36:78:e9:e1:f3:a6:f1:d5:61:88:e1:56:
         a5:8f:1f:65:11:4c:02:0e:32:8e:17:c0:d3:42:d3:21:33:52:
         51:e0:90:27:f5:ff:95:74:d9:84:b7:20:59:da:f0:c8:47:e7:
         78:74:cb:11:5e:5f:d1:2f:19:20:07:63:ca:56:ec:a4:d1:d0:
         3a:8b:ea:35:b8:77:d6:0d:43:f2:5c:b2:fe:64:b2:38:4f:cf:
         aa:de:fb:a9:f6:83:94:d8:7a:dd:c9:54:16:9b:48:7a:45:d8:
         e1:ee:f9:d6:3c:a5:09:fd:4d:3e:fd:e3:39:c4:ab:33:fd:51:
         a4:42:07:b9:ea:c0:f8:42:03:b3:0a:55:99:16:bd:25:fa:41:
         26:3a:b6:57:ff:3c:17:70:66:40:34:38:5c:a4:29:df:97:cc:
         70:4c:8a:61:3c:c7:95:86:76:97:66:90:7f:d8:ca:a9:af:8d:
         51:f2:f8:c4:4e:87:d9:0e:cf:46:a4:bd:c7:cf:11:3d:b8:66:
         dd:fa:8b:b2:62:2f:18:a3:fb:25:59:3c:45:2d:51:21:e9:23:
         90:74:e0:8f:37:fb:19:16:53:cf:43:cd:a7:de:0f:e4:fb:9a:
         a8:c4:19:e8:d3:ac:ae:4d:83:02:99:cc:35:a9:eb:eb:0a:ea:
         76:e1:33:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:11 2024 by rpki-client on console-ams.rpki-client.org