Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/68e5cf7b-bf41-3e2f-be15-9e8f9640b83f.roa
File:                     68e5cf7b-bf41-3e2f-be15-9e8f9640b83f.roa (raw, json)
Hash identifier:          prDgA6srTmed5E5505lB7MpTUk3OgTgUzE31+DOQ4Qk=
Subject key identifier:   2B:A9:D1:9F:97:58:42:A2:C8:2E:E7:43:F7:BD:25:4E:36:B7:D7:F3
Certificate issuer:       /CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
Certificate serial:       010D0C9F43285847CE653FFE636C863B926C2180
Authority key identifier: B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/68e5cf7b-bf41-3e2f-be15-9e8f9640b83f.roa
Signing time:             Fri 08 Nov 2024 01:40:29 +0000
ROA not before:           Fri 08 Nov 2024 01:40:29 +0000
ROA not after:            Thu 06 Feb 2025 01:40:29 +0000
asID:                     399870
IP address blocks:        2602:f7a5:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:65:3f:fe:63:6c:86:3b:92:6c:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
        Validity
            Not Before: Nov  8 01:40:29 2024 GMT
            Not After : Feb  6 01:40:29 2025 GMT
        Subject: CN=dc2250ec-00f1-42c3-8a7c-b2157427a428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:73:2f:67:99:9d:fb:93:12:c7:84:97:46:56:
                    d8:2c:82:a2:e1:e9:9c:ae:bb:1d:df:1c:17:d0:76:
                    13:33:ee:2b:f9:fd:21:e8:e6:c4:14:1f:41:ff:47:
                    2d:b9:9b:4f:6b:7d:e4:84:bc:94:84:c0:4d:20:70:
                    bc:97:bc:57:30:6c:34:5e:c9:bd:bb:22:56:b1:bf:
                    7b:8d:d1:79:bf:e3:b8:bf:4a:1d:fc:29:2f:09:25:
                    5f:55:14:76:8c:d4:6f:5d:3b:6a:06:ad:dd:c9:22:
                    ae:8c:14:c7:38:67:7a:97:2c:69:8f:2b:17:f0:6a:
                    95:d5:00:e6:ca:47:5e:67:df:bc:a3:00:8e:ae:eb:
                    ca:8b:bd:4c:ef:39:5d:34:14:b6:21:b6:61:93:14:
                    05:91:68:36:b5:2c:f3:79:36:dd:b6:e6:e8:12:85:
                    b5:d7:3f:20:27:4f:f3:e6:57:fb:64:26:09:7b:74:
                    75:a2:c6:c2:6f:c7:27:a2:4d:a0:1e:f8:e6:5e:08:
                    41:2c:50:d7:9d:b5:a0:9a:a7:56:39:1a:56:1e:dc:
                    d6:0c:5d:21:84:25:74:a3:b5:29:39:bb:ea:05:69:
                    25:77:f8:d5:a8:4d:ab:a6:9d:64:39:73:f1:13:66:
                    37:c0:25:bb:34:e4:77:48:4a:cb:5b:9f:43:cc:25:
                    66:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A9:D1:9F:97:58:42:A2:C8:2E:E7:43:F7:BD:25:4E:36:B7:D7:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/68e5cf7b-bf41-3e2f-be15-9e8f9640b83f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl

            X509v3 Authority Key Identifier:
                keyid:B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7a5:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:25:8c:ad:67:bd:ed:d9:e4:8a:92:65:ff:d4:93:ee:7b:76:
         07:54:10:c9:cb:65:b2:82:9b:5e:50:fc:1b:93:5e:37:bf:b4:
         8c:66:4c:ec:e1:95:17:24:9e:52:9d:27:4d:ea:7a:0b:63:1b:
         da:26:f3:2f:f4:a6:43:d6:09:b6:54:c9:3b:ee:b7:36:f7:2c:
         de:fa:de:d4:c3:63:ba:19:9b:c9:9d:31:d3:4c:2b:66:36:07:
         71:20:1c:66:00:9c:96:68:d4:d4:fb:47:70:32:5f:52:7d:fa:
         2f:53:5e:41:8b:5a:bd:9a:13:ca:1d:c5:50:9b:cc:34:d8:59:
         1e:b9:98:74:09:7e:5a:e5:4b:2c:59:02:75:1c:a3:36:9a:c9:
         51:cf:c7:1e:93:67:56:ec:dc:d3:3b:39:12:2a:4c:03:05:8a:
         87:c7:a5:49:ba:da:6f:2e:fb:fe:93:a8:da:ef:9b:22:d3:f3:
         0c:85:fc:65:ca:58:b0:dd:99:df:cf:95:bd:b4:43:fe:67:92:
         28:c4:eb:c6:86:99:53:fc:6a:48:97:88:d9:5e:ec:b9:76:01:
         a0:67:34:df:17:06:4a:87:9d:90:3d:ad:4c:a7:a8:26:d2:4e:
         87:57:a9:51:51:81:ed:b7:57:fd:5d:49:fb:0a:38:c2:4a:d6:
         67:c2:e5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:26 2024 by rpki-client on console-fra.rpki-client.org