Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/1e64ffdf-9888-3fb9-9826-b212648077cd.roa
File:                     1e64ffdf-9888-3fb9-9826-b212648077cd.roa (raw, json)
Hash identifier:          FJaoV4eX4pvERWXgD60mZoDVLL80h1ltc8//kIJ4CKs=
Subject key identifier:   89:06:6D:DB:13:C9:C3:DB:C5:E6:B7:21:DE:B7:9D:18:A5:98:93:73
Certificate issuer:       /CN=eaefdd80-35cf-47b1-945a-5fab92c9da95
Certificate serial:       010D0C9F43285847C8D9E9C24389A4F08F4A1140
Authority key identifier: FC:17:CF:86:90:FB:23:FB:E6:01:ED:E5:0A:04:0D:AC:15:BB:45:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/1e64ffdf-9888-3fb9-9826-b212648077cd.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     21991
IP address blocks:        2602:fbcf::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:e9:c2:43:89:a4:f0:8f:4a:11:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaefdd80-35cf-47b1-945a-5fab92c9da95
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=ece90c91-1298-4949-bd5d-172dba4e422b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:88:f4:60:85:60:98:28:11:47:06:5c:c0:22:
                    00:73:89:d2:cb:37:9d:39:7f:ed:7b:50:9a:7b:0f:
                    7c:24:6d:78:dc:f1:0e:64:57:ca:d8:f1:de:de:75:
                    6a:b4:f8:5d:1f:13:53:55:49:77:ec:82:f6:9f:5d:
                    8f:dc:2b:1a:ae:60:64:10:b1:60:df:82:db:18:54:
                    61:33:74:1d:77:86:e8:4e:97:44:f5:93:4e:d8:1a:
                    be:b5:31:b2:d3:9b:2b:15:b2:5e:7b:44:9e:c2:40:
                    d0:e1:c0:25:8c:f2:5e:10:e1:4b:3e:e6:2c:cc:c0:
                    25:8d:ba:df:18:3b:52:5e:77:bc:ee:42:98:3b:40:
                    cf:0a:64:84:99:03:b8:71:57:13:de:9f:b7:c8:df:
                    70:47:73:a2:fd:d2:09:96:dc:a9:78:00:ff:ee:1f:
                    ca:a1:3d:15:e0:69:4f:ee:79:86:92:25:b3:4f:fe:
                    90:f7:8b:1f:5d:1c:9b:ed:7c:f3:2f:4b:8e:cf:68:
                    eb:22:38:99:03:0f:32:2b:63:c3:b8:34:32:25:23:
                    8f:4b:4c:b9:9e:cb:19:69:43:7c:99:9e:e5:6e:ba:
                    6d:ae:1b:c0:61:aa:78:06:69:6d:09:a2:9a:7c:47:
                    50:86:6f:42:10:f2:80:92:fe:2a:0d:1f:a8:17:32:
                    8f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:06:6D:DB:13:C9:C3:DB:C5:E6:B7:21:DE:B7:9D:18:A5:98:93:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/1e64ffdf-9888-3fb9-9826-b212648077cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.crl

            X509v3 Authority Key Identifier:
                keyid:FC:17:CF:86:90:FB:23:FB:E6:01:ED:E5:0A:04:0D:AC:15:BB:45:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbcf::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:4d:f6:27:71:d6:79:e6:71:ad:a6:fe:a8:5a:86:de:63:b9:
         10:1e:c6:12:bf:3e:d5:1b:0c:96:ea:5c:89:29:ab:f1:c8:e8:
         8e:08:af:d2:02:2f:a8:b9:07:37:22:49:b0:eb:42:3d:30:88:
         f6:47:ce:ed:2f:8e:94:42:db:44:e8:67:c3:0a:49:d8:04:0f:
         75:b0:63:42:9a:5a:7c:1c:31:a6:26:3e:74:50:a9:4a:3b:4d:
         1a:53:bb:f6:c2:d2:4e:a0:0a:76:3f:f4:cb:e0:c9:01:b4:b6:
         0b:98:45:c5:ea:ca:d3:a1:bf:1c:8d:f8:a5:f9:68:01:cf:9d:
         19:71:25:a6:21:de:5d:d3:0e:11:ac:b7:8c:87:17:21:98:49:
         57:e2:9c:f6:62:8b:8a:0d:0d:d9:4d:97:db:8c:df:70:d9:44:
         36:bb:a7:2c:d7:9c:4a:11:89:03:56:9e:4a:fe:08:7d:82:ec:
         d5:5e:b7:60:3a:51:47:56:1a:76:c5:9e:d4:6c:ad:f8:32:87:
         79:a6:80:21:15:10:df:33:70:53:4c:fc:9d:71:2b:d7:d0:b8:
         3a:23:05:ad:84:d3:87:f7:d9:bf:10:0d:de:67:e4:81:cc:6c:
         23:d1:03:f9:46:61:2d:0f:8d:e6:a7:8c:df:9a:9c:2f:05:42:
         d7:d3:b1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:32 2024 by rpki-client on console-fra.rpki-client.org