Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/43b85e93-b21a-355f-8f0d-adb59dbff348.roa
File:                     43b85e93-b21a-355f-8f0d-adb59dbff348.roa (raw, json)
Hash identifier:          RpKH9T40c1pWNgRjd0Oe+CDFCNFu9njnabLstpNSxpI=
Subject key identifier:   F5:87:3C:CB:FB:6A:8C:14:E6:E1:9B:3A:45:5C:40:10:48:D9:C2:8A
Certificate issuer:       /CN=e4f064d0-9017-41e7-be21-c7b9883020d5
Certificate serial:       010D0C9F4328584769D0E2CEDBC50F1B37B3F000
Authority key identifier: 6A:6A:F6:74:83:1C:DA:7D:F3:92:B7:07:1A:A1:BE:0F:70:63:82:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/43b85e93-b21a-355f-8f0d-adb59dbff348.roa
Signing time:             Thu 03 Oct 2024 01:00:31 +0000
ROA not before:           Thu 03 Oct 2024 01:00:31 +0000
ROA not after:            Wed 01 Jan 2025 02:00:31 +0000
asID:                     21903
IP address blocks:        2602:fa6d:200::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/e4f064d0-9017-41e7-be21-c7b9883020d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/e4f064d0-9017-41e7-be21-c7b9883020d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:d0:e2:ce:db:c5:0f:1b:37:b3:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4f064d0-9017-41e7-be21-c7b9883020d5
        Validity
            Not Before: Oct  3 01:00:31 2024 GMT
            Not After : Jan  1 02:00:31 2025 GMT
        Subject: CN=b4bafb78-1982-4120-9d25-65c83f9b0b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ea:0a:e3:da:ce:cd:a7:14:91:11:db:18:6c:
                    b7:72:a4:22:21:74:bd:29:a3:e0:1e:80:66:2b:84:
                    7b:a2:ff:bc:bc:b7:2a:f7:b5:b3:80:27:05:69:8e:
                    99:3a:4c:c1:66:98:d0:cd:0c:9a:86:3d:9a:f7:75:
                    8b:77:58:cf:41:a6:46:b9:f7:0f:a2:8d:e3:5a:ed:
                    4f:22:a0:8a:54:52:6b:bd:f6:82:19:5f:ef:83:f8:
                    da:19:ca:1c:58:a0:ff:88:b4:b1:3f:a5:10:4b:2b:
                    4d:13:c2:7a:78:e9:22:f4:c9:73:50:4b:5b:cd:f3:
                    09:15:fe:a8:1f:f0:6c:fe:6b:35:b6:e8:29:da:d0:
                    43:4b:a2:59:cb:6f:2f:09:3c:d9:76:34:d9:e4:ed:
                    4b:f4:80:05:77:c8:1d:e6:e7:62:29:b7:bc:9b:bf:
                    ba:9f:43:f6:c1:34:85:38:5e:1f:06:c7:2d:4f:a7:
                    0a:e2:df:fa:a9:96:0c:17:d7:f4:74:68:d2:2e:83:
                    cb:9b:44:47:00:82:86:8b:ff:79:8e:00:ff:fa:32:
                    18:2c:da:c3:00:f3:c6:bf:d4:08:6f:3c:c2:b6:72:
                    1c:7e:0d:37:a7:54:52:97:9a:33:1f:c4:56:27:02:
                    dd:f6:0b:1e:11:90:54:9d:48:19:20:5a:bc:ab:1b:
                    03:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:87:3C:CB:FB:6A:8C:14:E6:E1:9B:3A:45:5C:40:10:48:D9:C2:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/43b85e93-b21a-355f-8f0d-adb59dbff348.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/e4f064d0-9017-41e7-be21-c7b9883020d5.crl

            X509v3 Authority Key Identifier:
                keyid:6A:6A:F6:74:83:1C:DA:7D:F3:92:B7:07:1A:A1:BE:0F:70:63:82:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6d:200::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:28:80:bb:e2:9d:e6:2e:9e:50:05:39:66:1a:b0:e8:c6:39:
         92:3f:eb:ba:2b:4d:e4:f5:1f:5d:a5:ea:c0:4d:48:bd:9f:e5:
         96:1c:15:d7:4d:f5:3a:88:c9:22:44:88:d0:ec:c9:87:b4:9e:
         e0:3a:d4:d2:cd:0a:04:2e:9b:69:03:b7:59:64:a9:02:ce:8f:
         d1:07:50:ea:c5:3a:f9:0b:42:ce:99:0f:a3:12:83:61:09:41:
         64:71:62:b8:90:0d:e4:cf:98:91:b3:2e:e4:39:24:4b:f9:c5:
         49:03:f1:27:15:0f:1e:fe:99:2f:aa:d9:3e:b9:4d:88:00:33:
         ff:b7:48:10:3b:e3:18:bc:73:ac:3f:e2:1e:35:24:32:c8:1a:
         67:90:83:47:61:a5:01:b0:71:70:a9:ce:28:f7:e8:55:f3:22:
         a9:22:82:56:31:1e:78:62:44:c2:41:92:5e:68:7b:1f:08:10:
         ca:df:5f:20:d9:ef:ae:49:f9:8a:5b:39:bc:12:31:26:4d:81:
         37:a2:e8:95:9c:a7:c3:24:c0:f2:2c:7b:18:4b:d0:7d:77:a8:
         0e:d2:5b:8f:e1:e8:28:d9:8f:7e:da:4d:b2:31:d7:81:69:1a:
         44:a6:a3:af:cd:d9:55:fe:a8:a3:0e:b3:e6:76:29:5e:aa:5b:
         d4:d2:34:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:22:18 2024 by rpki-client on console-ams.rpki-client.org