Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/02030b63-2c8a-39dc-b173-931ab6a148c4.roa
File:                     02030b63-2c8a-39dc-b173-931ab6a148c4.roa (raw, json)
Hash identifier:          2lVHKQnloVyDp5N2nrlBu5PdmNeOmJQybx5+f07R5rc=
Subject key identifier:   85:32:A7:0B:30:7A:38:64:78:79:07:7F:19:07:00:9E:DA:30:5A:6E
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F43285847205D22087F5B37A4986AEB80
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/02030b63-2c8a-39dc-b173-931ab6a148c4.roa
Signing time:             Fri 06 Sep 2024 17:33:28 +0000
ROA not before:           Fri 06 Sep 2024 17:33:28 +0000
ROA not after:            Thu 05 Dec 2024 18:33:28 +0000
asID:                     38047
IP address blocks:        2602:f83b:1::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:20:5d:22:08:7f:5b:37:a4:98:6a:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Sep  6 17:33:28 2024 GMT
            Not After : Dec  5 18:33:28 2024 GMT
        Subject: CN=ecaa643e-12fe-4cfb-b7d2-fc76672e3c58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:73:a1:df:58:8a:e6:8d:d7:e1:39:ac:80:63:
                    0f:3b:df:e8:c3:30:83:08:9d:5e:d1:e6:39:6f:a3:
                    b9:c0:cb:7c:27:d4:90:66:6e:dd:5b:6f:19:dd:32:
                    37:ae:77:ca:6b:6d:ca:f1:8f:b6:30:1e:50:1f:15:
                    09:22:3b:bf:f6:e6:76:3c:3e:71:88:7c:d9:56:8a:
                    66:8b:13:0a:1e:18:b1:ab:8c:48:f7:0b:06:ef:5b:
                    d8:70:cb:9a:d3:91:07:0c:67:04:85:76:a5:79:93:
                    a5:3d:84:5b:d2:be:8e:c4:8c:ad:22:7a:e3:bb:0e:
                    9c:e2:ef:1e:0a:ef:4a:81:1f:fa:a8:02:9d:f5:87:
                    c0:d1:b1:43:43:c2:eb:e7:a1:24:ff:b8:f6:9a:1e:
                    95:44:1c:ad:4f:37:75:ce:58:8d:4d:21:ed:b4:9c:
                    5d:ea:b6:61:59:8f:b3:ed:41:74:97:a9:76:bb:06:
                    63:9b:c1:6d:67:2f:09:ca:59:df:74:f4:fc:61:d0:
                    e8:f9:87:9c:68:a5:90:a4:90:5e:30:2d:f6:51:1b:
                    6c:03:eb:6b:d0:1f:aa:ce:17:77:24:29:5f:f8:0a:
                    92:6b:4e:bf:c4:70:07:be:4e:e0:d0:3a:aa:c9:a2:
                    3d:a2:e4:30:5f:b6:26:ad:74:25:6e:cc:d7:aa:0d:
                    7d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:32:A7:0B:30:7A:38:64:78:79:07:7F:19:07:00:9E:DA:30:5A:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/02030b63-2c8a-39dc-b173-931ab6a148c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:70:48:39:32:7e:61:80:66:b2:d7:c0:66:54:c4:52:4c:df:
         18:a4:04:f4:4a:ff:f1:55:28:e1:4a:99:70:51:53:07:e6:8a:
         d5:81:ae:d9:c8:c4:82:ac:f7:1a:1b:3f:f7:bd:6d:98:a5:6c:
         17:d2:77:ef:7d:5b:ef:93:f1:cc:95:22:f1:0d:19:38:31:a8:
         b4:e0:6e:b8:ab:01:ac:23:3a:83:f0:82:b9:78:45:8e:8c:fa:
         c5:72:66:96:ab:45:be:c9:f4:ea:a2:de:bc:12:dc:f6:08:2a:
         a4:65:67:a9:c6:80:29:ff:7b:a4:51:6f:0c:cf:2a:2a:77:24:
         1b:a2:70:b4:e8:69:50:ee:8c:32:c8:3d:ff:0e:13:19:ec:74:
         e2:d4:28:61:d9:ef:0c:3c:77:fa:04:7e:c2:f1:00:93:54:7e:
         3b:d8:3e:a2:8c:4c:4a:2c:f6:2b:41:0a:25:4f:c3:68:4f:d4:
         77:be:3c:60:f4:ea:e8:dc:92:c0:ae:22:d6:4f:88:28:d8:36:
         46:4b:4b:59:a0:a5:e3:64:e1:25:75:93:32:10:dd:d6:7c:77:
         0c:c2:1b:29:0a:9a:31:71:be:95:88:19:5e:e1:f9:90:7f:18:
         ef:a3:1f:2e:8b:86:78:30:f4:e3:b2:a6:21:ac:64:4c:e6:74:
         88:3f:fa:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 05:59:12 2024 by rpki-client on console-fra.rpki-client.org