Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/87b022fa-e111-3038-a736-36814da5a24f.roa
File:                     87b022fa-e111-3038-a736-36814da5a24f.roa (raw, json)
Hash identifier:          ICHTm/k8CJLIndMszwjo3nIdzggTB2rrsewgbb5yBG0=
Subject key identifier:   A5:FF:DD:EC:CC:69:DA:BF:F4:2F:F1:EA:57:25:70:8C:78:61:B5:B3
Certificate issuer:       /CN=fca4862e-7314-4415-a264-4e5dc31b73d8
Certificate serial:       010D0C9F43285847B7FBF80AAD81D9F1FAFFBE38
Authority key identifier: F3:2A:FE:F1:7D:67:12:DA:6A:50:D2:98:1F:3E:31:47:61:82:95:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/87b022fa-e111-3038-a736-36814da5a24f.roa
Signing time:             Thu 31 Oct 2024 01:00:31 +0000
ROA not before:           Thu 31 Oct 2024 01:00:31 +0000
ROA not after:            Wed 29 Jan 2025 02:00:31 +0000
asID:                     4186
IP address blocks:        2620:0:610::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b7:fb:f8:0a:ad:81:d9:f1:fa:ff:be:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fca4862e-7314-4415-a264-4e5dc31b73d8
        Validity
            Not Before: Oct 31 01:00:31 2024 GMT
            Not After : Jan 29 02:00:31 2025 GMT
        Subject: CN=84b45dd6-c822-49ff-84cd-26e284c5077b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fa:9f:3a:90:2d:da:67:5e:75:4d:8f:22:4e:
                    50:0b:58:55:58:33:ea:f0:27:54:09:c8:e4:75:14:
                    cc:3a:85:ee:7e:5a:81:4e:51:ec:da:3a:14:d4:e8:
                    31:97:a8:9a:ff:f5:8d:c4:35:2e:3d:71:1c:18:00:
                    33:64:61:d8:c1:98:bc:e9:33:0e:f3:88:1d:01:15:
                    40:29:f3:aa:f9:f2:92:a5:41:87:5c:6b:53:c2:8a:
                    d8:11:90:a4:da:18:43:8c:ee:d0:e2:bb:7b:f4:9b:
                    67:67:b6:c3:cd:fd:b0:a9:e7:bb:47:eb:bc:45:f4:
                    36:59:83:3d:0a:e8:73:c5:67:a4:ad:82:cd:ed:1b:
                    9c:8b:ca:10:c2:bf:67:c9:77:c6:37:3f:11:f4:87:
                    77:f7:8c:82:cd:14:25:5b:c6:f4:45:72:ed:a1:97:
                    62:83:20:0f:2f:fe:4e:f5:a0:6b:6b:07:20:6a:4f:
                    51:a3:30:ff:9c:72:3c:ec:52:e7:d1:7f:b7:58:25:
                    d2:89:58:a7:83:44:e7:51:d6:f3:63:00:38:cb:59:
                    d6:b8:fa:50:56:43:33:41:ac:43:2c:33:a2:08:22:
                    cc:bc:07:cd:d3:20:92:c9:1a:e6:9f:40:d4:bf:6a:
                    f9:e1:78:64:d0:9d:21:57:bd:29:9b:93:97:0e:f2:
                    e6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FF:DD:EC:CC:69:DA:BF:F4:2F:F1:EA:57:25:70:8C:78:61:B5:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/87b022fa-e111-3038-a736-36814da5a24f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.crl

            X509v3 Authority Key Identifier:
                keyid:F3:2A:FE:F1:7D:67:12:DA:6A:50:D2:98:1F:3E:31:47:61:82:95:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:610::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:b6:49:5e:d8:de:ca:55:39:ec:a8:8f:cc:9b:b7:74:33:b7:
         37:b3:46:b7:53:6c:92:80:e7:eb:f3:05:ec:54:72:3f:27:f1:
         84:63:3d:f5:8d:bc:4e:07:f8:00:97:2b:14:9a:0e:04:8c:83:
         dd:5c:78:7f:9f:0c:49:46:2b:03:a4:3d:da:7c:7b:35:df:a4:
         fe:aa:be:8d:a4:2c:ca:0d:a5:eb:91:ea:bf:e8:bd:61:f2:f9:
         36:59:74:19:df:0e:ae:f0:3d:cf:67:9a:cb:52:90:c1:1e:cb:
         9e:54:35:40:a1:f0:62:1e:2f:74:76:7a:35:2f:d2:59:df:3c:
         a8:8b:11:fb:81:48:c8:ad:d1:24:47:42:9e:13:ad:e8:07:b7:
         73:19:c6:6b:0b:49:07:45:3a:5c:a3:b9:1b:e8:17:87:b5:a5:
         4e:5e:39:fc:f1:34:8c:39:9d:0e:e8:ee:c0:98:82:27:48:6d:
         03:65:b6:4c:94:49:e4:e7:bf:ee:f0:4b:8e:41:cd:a8:e3:06:
         0b:22:01:aa:32:01:46:6c:bc:50:5a:42:1a:68:14:fd:2e:b3:
         3e:02:33:a0:de:ac:e1:29:c4:28:11:f5:70:9f:fb:81:79:e7:
         cb:40:70:4b:b3:48:d2:be:58:fe:33:3d:e2:ae:2f:b4:2c:2a:
         78:17:75:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:34 2024 by rpki-client on console-fra.rpki-client.org