Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/468cfc20-af9f-3468-bf97-835ce5245200.roa
File:                     468cfc20-af9f-3468-bf97-835ce5245200.roa (raw, json)
Hash identifier:          HtZ9IYCuBHgPY8xymXrduxUxTzeFsXM+WLDiV0iyYZs=
Subject key identifier:   CE:4B:D4:7F:67:E8:2A:AC:9B:23:79:DE:95:B9:1D:99:9D:07:B3:9C
Certificate issuer:       /CN=efe14a74-8339-4fa1-885a-2ed37947399a
Certificate serial:       010D0C9F43285847107495AA11276C75139FB980
Authority key identifier: C4:97:9D:67:D0:B6:2B:EF:A3:AB:9E:1C:7A:30:B0:6D:1A:88:5D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/468cfc20-af9f-3468-bf97-835ce5245200.roa
Signing time:             Sun 01 Sep 2024 00:47:47 +0000
ROA not before:           Sun 01 Sep 2024 00:47:47 +0000
ROA not after:            Sat 30 Nov 2024 01:47:47 +0000
asID:                     14956
IP address blocks:        2602:fa59::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:10:74:95:aa:11:27:6c:75:13:9f:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efe14a74-8339-4fa1-885a-2ed37947399a
        Validity
            Not Before: Sep  1 00:47:47 2024 GMT
            Not After : Nov 30 01:47:47 2024 GMT
        Subject: CN=4eebcf91-0660-4340-9023-da1dec5e9fc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b5:1d:6a:5c:42:8d:fb:c0:c0:a6:33:ea:f8:
                    5a:83:bc:f7:94:cb:cf:a5:ef:f5:e2:b8:d5:a5:37:
                    8c:f8:2a:92:6e:39:71:c1:dc:e5:ca:7f:30:29:62:
                    cd:19:95:5f:e0:d4:0b:04:e4:7c:fd:6a:af:3f:7e:
                    49:da:23:3f:e1:89:d5:a6:b8:cf:61:9f:f5:6b:00:
                    15:0d:d1:1b:bf:a3:ad:fe:9d:c3:e0:58:41:fe:87:
                    22:47:a1:a1:54:c6:21:0e:33:07:52:91:e2:2a:32:
                    13:27:a7:4a:db:11:4c:09:12:62:75:11:e6:a8:05:
                    b4:f3:28:02:8c:24:d5:03:97:66:6f:41:58:fc:54:
                    91:b0:fc:87:3a:da:6b:fa:7e:70:cd:4f:45:6e:7e:
                    62:21:4d:17:b0:c1:d1:fd:22:e1:e1:d8:cb:e8:84:
                    49:4d:00:81:22:11:b2:d4:f0:2c:08:20:d1:51:d4:
                    75:9d:33:41:52:d2:dd:03:af:40:e6:f6:ae:98:5e:
                    dc:b8:1d:af:d4:a1:ad:87:df:64:32:e3:6f:12:a1:
                    d4:90:ac:7b:9c:0b:ec:cb:4c:27:c3:19:da:56:fe:
                    ed:49:15:9d:49:bb:5c:90:8c:2f:bf:38:c5:72:6b:
                    3e:81:34:b1:ea:65:4a:40:24:41:f1:78:19:20:2b:
                    8c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4B:D4:7F:67:E8:2A:AC:9B:23:79:DE:95:B9:1D:99:9D:07:B3:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/468cfc20-af9f-3468-bf97-835ce5245200.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.crl

            X509v3 Authority Key Identifier:
                keyid:C4:97:9D:67:D0:B6:2B:EF:A3:AB:9E:1C:7A:30:B0:6D:1A:88:5D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa59::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:1a:35:99:56:54:a8:cd:f0:8a:16:63:b0:98:a6:80:dc:74:
         34:f1:07:06:88:8d:2c:0b:26:8c:db:3e:e2:e1:64:61:02:f6:
         21:87:53:48:89:b4:a5:b1:4d:a2:12:4e:b7:6e:0c:a5:72:c9:
         f8:d9:21:22:4f:f7:58:2c:f9:19:20:94:9d:8f:6b:e5:1b:0e:
         9c:ae:fc:4d:a6:fa:c4:63:ac:4d:e8:c4:50:c7:53:17:a5:a7:
         bf:c7:a1:dc:b8:b4:f7:c8:87:56:0b:ff:8f:68:aa:e2:cd:57:
         65:e3:fa:44:99:16:b2:4c:b7:07:e6:d1:05:1f:77:e5:5f:6f:
         41:7f:d2:2b:0d:f7:9f:87:d8:b9:5d:c4:be:3d:93:4b:c4:58:
         42:ca:78:43:ef:c4:24:34:bf:81:cf:be:b4:2d:6d:3c:1a:ac:
         37:c9:00:96:95:7b:72:b8:88:4e:5f:66:22:0d:8f:0d:12:3c:
         a8:25:bd:11:16:30:84:f1:7e:68:fa:c1:71:a2:32:c1:3f:12:
         6e:02:4f:23:38:79:1c:e1:43:46:30:c7:4e:84:40:a6:b2:02:
         a0:7b:8d:58:75:1e:0c:3c:ab:d0:82:e5:8c:80:31:bd:cf:83:
         34:dc:2b:7f:e3:3a:42:0e:a6:4f:7e:8f:a6:e3:84:90:30:62:
         7c:8e:45:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 16:06:24 2024 by rpki-client on console-ams.rpki-client.org