Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc/fd2d2464-423b-3706-b730-60bbb4c77770.roa
File:                     fd2d2464-423b-3706-b730-60bbb4c77770.roa (raw, json)
Hash identifier:          tFStmM5Q2UQbxrXYBgL7SyvzLiJ7H5SzOcncx7SrrrY=
Subject key identifier:   30:FD:0E:D9:35:11:E2:2C:5F:E6:86:EF:E3:CF:6E:E5:04:4E:99:30
Certificate issuer:       /CN=fcd38c98-f51b-46ff-8d72-e170b174f3dc
Certificate serial:       010D0C9F432858474C80C36BD99A8BF751BA1940
Authority key identifier: 9B:0D:F6:56:33:4A:4B:06:E1:A2:DD:D5:25:EB:11:FC:E0:95:42:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc/fd2d2464-423b-3706-b730-60bbb4c77770.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     400370
IP address blocks:        2602:815:a000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc/fcd38c98-f51b-46ff-8d72-e170b174f3dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc/fcd38c98-f51b-46ff-8d72-e170b174f3dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:c3:6b:d9:9a:8b:f7:51:ba:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcd38c98-f51b-46ff-8d72-e170b174f3dc
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=b275746f-62ba-4092-bcc3-969cfb32a5a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9d:90:80:10:d8:ec:8b:f4:1e:1c:df:ab:3b:
                    bb:d0:e1:af:59:11:f0:51:f4:ed:0c:6e:0d:5d:46:
                    b0:df:74:a7:8d:7b:c6:98:10:93:77:71:cf:8f:27:
                    8b:0a:0a:5d:fa:6e:e9:32:37:16:6a:42:ae:43:e6:
                    c1:a2:50:17:0b:0f:54:a2:57:4d:89:01:0c:40:74:
                    19:28:01:62:d9:36:4d:91:31:10:75:4d:36:db:1d:
                    33:c7:b2:db:c2:47:11:49:fe:05:0c:c1:e4:71:96:
                    6f:ac:c7:73:24:54:d8:62:b8:c4:39:12:91:d3:bf:
                    d2:c9:a0:46:91:fc:0b:39:c4:6a:7e:11:1b:fd:f3:
                    ad:17:8b:ba:0e:5e:74:05:af:71:d6:5d:0c:52:bc:
                    00:74:90:ea:79:0e:9c:69:e6:5b:8e:fb:a0:91:84:
                    85:0e:b3:7a:3f:7d:c9:9f:1d:51:29:d6:c5:71:95:
                    68:55:b3:3e:19:d9:67:88:98:a4:1d:ab:43:a6:f3:
                    67:c5:b6:2f:24:9a:ed:a6:df:be:2e:79:68:02:eb:
                    88:e3:a3:b5:38:65:1b:1c:47:30:3c:03:85:2c:24:
                    21:f4:aa:c7:d7:fd:43:36:95:4e:d4:3a:8a:3e:2d:
                    d9:fb:17:c4:c1:8f:1d:67:64:12:41:88:42:3f:a6:
                    2c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:FD:0E:D9:35:11:E2:2C:5F:E6:86:EF:E3:CF:6E:E5:04:4E:99:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc/fd2d2464-423b-3706-b730-60bbb4c77770.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc/fcd38c98-f51b-46ff-8d72-e170b174f3dc.crl

            X509v3 Authority Key Identifier:
                keyid:9B:0D:F6:56:33:4A:4B:06:E1:A2:DD:D5:25:EB:11:FC:E0:95:42:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:815:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:9d:c6:a5:b8:06:09:41:1b:91:d7:6c:85:c6:68:85:da:30:
         ce:61:3b:90:cd:15:58:3e:60:97:58:a4:d7:9d:8f:be:e0:a4:
         9b:4e:0b:5a:d9:c8:67:b4:b3:9d:4d:d1:58:41:d3:e4:1a:71:
         87:72:90:49:b3:c6:8c:5b:16:c2:ee:9e:23:c2:53:01:da:28:
         98:85:5e:80:27:5a:0a:ab:d8:b7:f2:e2:71:cb:ba:aa:d0:3c:
         64:dd:0f:65:31:79:eb:dd:72:a4:3c:2d:08:cd:3b:54:d0:3f:
         b8:36:92:ed:88:27:62:b2:f5:ba:c9:85:7c:13:39:3f:55:77:
         01:69:d5:41:93:aa:89:4f:7d:cf:39:d7:e4:2c:bc:29:2b:00:
         09:ac:ec:0f:53:f1:db:6c:d9:7e:a9:f3:33:2b:94:28:cc:b3:
         99:ca:1c:47:3b:ab:93:a2:c6:59:54:f4:85:df:ff:16:b9:3a:
         6c:5a:ad:8f:cc:0e:d9:4e:82:cb:ab:fb:9c:e0:00:7a:ae:fe:
         3e:d9:1b:42:77:94:f7:8a:85:b8:c2:32:ed:f5:4a:68:09:06:
         cd:58:34:31:73:9e:5d:50:46:c9:fe:65:bc:ff:52:e5:78:22:
         a7:25:11:24:2f:25:25:27:f4:d3:08:91:23:30:2a:38:b7:9d:
         0b:84:0d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:12 2024 by rpki-client on console-ams.rpki-client.org