Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/fed6d93f-9e64-3b05-92de-3bd2bbe5cd27.roa
File:                     fed6d93f-9e64-3b05-92de-3bd2bbe5cd27.roa (raw, json)
Hash identifier:          abs0nJlKiP+2EmA2CB6hZ8uPLW/QQUVYiFTPm0oYAXI=
Subject key identifier:   7E:25:6A:1F:F0:40:EE:EC:43:E2:B4:55:4E:70:09:CB:90:CE:4A:BF
Certificate issuer:       /CN=efe14a74-8339-4fa1-885a-2ed37947399a
Certificate serial:       010D0C9F43285847E62B7005D9272C996D916CA0
Authority key identifier: C4:97:9D:67:D0:B6:2B:EF:A3:AB:9E:1C:7A:30:B0:6D:1A:88:5D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/fed6d93f-9e64-3b05-92de-3bd2bbe5cd27.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     198983
IP address blocks:        2602:fa59::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:70:05:d9:27:2c:99:6d:91:6c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efe14a74-8339-4fa1-885a-2ed37947399a
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=c4395b6c-ce64-4f70-813b-a3f0ce0d9210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7f:0a:19:6c:a9:ad:97:89:5a:d6:ab:bc:e3:
                    55:25:12:62:0b:c5:ba:3f:5c:be:b1:e8:4e:15:ea:
                    51:0c:39:6b:c9:1c:25:78:54:87:b2:38:5b:05:f6:
                    35:7a:d0:63:3b:5c:9d:be:e3:36:bd:5e:0c:87:a3:
                    aa:47:14:08:a4:ec:ef:44:3c:a9:15:5c:af:5b:59:
                    c4:4b:93:aa:7a:41:e5:ae:7c:1f:06:ba:c0:55:bd:
                    35:bb:56:15:93:02:02:66:32:0b:10:65:8b:0b:03:
                    1e:cb:08:d1:da:e9:13:6e:2c:14:75:9e:09:3f:9f:
                    f1:05:54:0a:97:46:d1:d8:33:d0:08:c2:42:6e:e5:
                    e0:b6:00:d1:51:77:0e:2f:e9:cb:6e:82:54:88:ac:
                    b2:06:0f:62:34:4d:b4:59:dd:ea:4e:7e:77:56:de:
                    14:80:89:88:46:29:2c:c4:ad:d0:22:2d:fe:9f:a9:
                    53:75:e6:be:e6:93:b9:6e:6d:bf:3a:e5:3f:b1:ab:
                    37:d6:1d:b6:d1:28:86:7d:5e:ab:7f:c3:d2:36:32:
                    65:a4:87:7d:f4:bc:9d:f1:32:b0:d1:33:13:33:40:
                    c7:77:3e:73:a6:80:38:95:29:4f:e2:01:74:91:78:
                    50:a6:62:8f:e0:55:50:40:af:0c:77:46:e6:8b:9f:
                    bf:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:25:6A:1F:F0:40:EE:EC:43:E2:B4:55:4E:70:09:CB:90:CE:4A:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/fed6d93f-9e64-3b05-92de-3bd2bbe5cd27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.crl

            X509v3 Authority Key Identifier:
                keyid:C4:97:9D:67:D0:B6:2B:EF:A3:AB:9E:1C:7A:30:B0:6D:1A:88:5D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa59::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:6d:11:75:4b:67:4d:97:14:f6:16:ee:0d:e9:05:87:bb:4f:
         de:77:fd:c0:c1:8e:22:cd:4c:c2:1a:0b:b0:4a:d5:70:3b:97:
         32:fa:3f:48:a2:ec:99:c1:5d:24:21:4c:ac:be:30:cb:f7:88:
         bb:af:95:84:49:a3:f6:5b:b4:dc:4a:0e:ff:41:e3:97:e9:8d:
         b7:c9:3b:c6:f0:b0:19:07:5f:9d:e2:11:31:7b:8e:8d:1b:d3:
         6e:d3:62:d6:b9:69:a2:d6:cd:9a:80:92:2b:a2:c3:ad:e8:f9:
         a5:ea:2a:5a:84:7f:4d:ac:61:70:f3:40:bc:a7:86:b6:a4:77:
         16:20:29:e3:0d:e1:cb:3e:bc:cc:98:f5:ff:ea:4d:2b:4b:6c:
         cf:c6:bd:58:0b:f4:09:43:30:6a:d6:23:7d:53:14:91:47:cb:
         a6:e5:48:fb:09:c4:33:64:aa:98:e5:3f:05:4d:11:8b:39:50:
         c2:fd:8c:f2:c1:9f:44:e8:c2:7f:b0:6a:5e:a3:22:b7:18:8e:
         e7:17:0c:76:63:77:23:67:bd:df:0f:e9:83:17:fe:27:71:13:
         ec:b3:8f:0e:24:0e:52:69:74:d7:47:44:45:b1:2d:dc:9c:6a:
         41:3d:69:f0:1e:57:12:ea:f5:6a:db:0c:f9:36:04:9e:52:b1:
         9b:64:a6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:32 2024 by rpki-client on console-fra.rpki-client.org