Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/4a6b6451-8445-3cbd-8767-c10ab07c9f40.roa
File:                     4a6b6451-8445-3cbd-8767-c10ab07c9f40.roa (raw, json)
Hash identifier:          SCYOaSVYv34G1nym4etBi6UXsL4uPZ5D1i7RRvyLsEM=
Subject key identifier:   2B:90:72:A2:5D:4A:9E:13:B5:BE:53:F1:F2:72:8C:75:00:44:D2:6D
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F43285847205DB58C4BFEF4057315AB2C
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/4a6b6451-8445-3cbd-8767-c10ab07c9f40.roa
Signing time:             Fri 06 Sep 2024 17:34:38 +0000
ROA not before:           Fri 06 Sep 2024 17:34:38 +0000
ROA not after:            Thu 05 Dec 2024 18:34:38 +0000
asID:                     38047
IP address blocks:        2602:f83b:54::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:20:5d:b5:8c:4b:fe:f4:05:73:15:ab:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Sep  6 17:34:38 2024 GMT
            Not After : Dec  5 18:34:38 2024 GMT
        Subject: CN=7a02dd31-12e5-4cf6-9700-4d54a7a18f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fc:b9:38:91:b6:89:74:d7:5c:28:6e:b5:fa:
                    02:3e:c8:b0:26:62:76:95:db:d4:0d:43:fd:b5:9c:
                    aa:18:a4:1e:a0:3e:eb:a3:c2:de:87:29:93:76:80:
                    e9:62:6b:31:43:fb:48:90:f4:b5:d0:43:6f:04:fd:
                    c1:29:ad:d8:49:6e:15:43:57:ea:0d:f3:00:bc:6d:
                    5c:ce:60:6a:f4:6e:89:f5:46:6a:10:1c:e3:25:5e:
                    4a:ed:c1:76:1b:23:ab:82:e2:da:09:79:6b:2e:8e:
                    c8:fd:27:ab:bc:92:2f:34:e1:29:f9:2d:32:7a:ce:
                    4f:10:b8:65:3d:be:78:9d:80:14:78:3d:f1:bc:49:
                    5d:09:7c:03:ba:7c:e6:07:11:e0:14:18:17:1a:11:
                    7f:5f:b0:bf:66:2d:48:01:bf:8a:af:42:85:b7:a1:
                    de:5c:e5:ca:9a:0d:d6:f4:d6:17:85:06:f3:c7:cd:
                    f5:c9:74:28:ee:9d:aa:d0:70:eb:e3:48:28:52:1c:
                    b1:bf:c8:98:10:9a:1e:10:c3:3b:69:0e:b2:49:f7:
                    53:a5:a0:6f:b6:f9:81:62:26:4e:21:19:f2:08:08:
                    bd:91:9d:ee:d1:6e:53:5b:df:53:ba:b3:fe:b8:d1:
                    b1:07:98:a3:9c:5c:e0:73:f2:de:e7:49:2c:a8:d4:
                    23:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:90:72:A2:5D:4A:9E:13:B5:BE:53:F1:F2:72:8C:75:00:44:D2:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/4a6b6451-8445-3cbd-8767-c10ab07c9f40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:54::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:d1:b8:49:3a:3d:e8:bb:4c:75:09:a5:20:b5:46:df:5a:a5:
         16:14:a4:4a:32:77:2c:2a:d9:bb:6f:4e:d2:47:1e:5d:9e:38:
         f1:36:88:02:d4:eb:13:1f:fc:59:f0:c0:5f:9d:44:f5:9b:86:
         8d:0e:f4:fa:00:95:88:80:ca:c8:fd:ca:88:a8:86:90:43:88:
         dc:42:38:92:96:06:c6:19:f5:91:fa:17:10:6a:04:53:7b:0d:
         b2:ff:d0:ee:96:df:0b:96:f9:70:5b:57:82:ee:7b:93:2d:e1:
         7f:d9:df:8f:dc:29:5d:cc:6b:a1:3a:98:87:2e:41:f5:c5:f8:
         fa:af:85:3c:be:8b:a9:6c:ce:ed:fa:b1:fe:23:0b:53:f4:e9:
         8c:df:d7:66:d6:b6:05:93:4b:64:db:13:e9:67:4a:0a:d6:68:
         36:cb:ae:f0:fd:ef:c6:b3:52:e2:93:20:c5:8b:3b:ce:4f:18:
         7a:0f:06:63:78:b4:de:45:62:0a:9d:d1:c5:25:54:76:81:83:
         4e:e3:d1:e4:39:14:21:b9:85:8a:72:e2:6f:04:59:6d:55:0c:
         7f:fa:0a:22:20:b9:6c:da:42:49:95:cb:e7:28:27:d8:30:aa:
         8c:fb:4d:cf:6a:9f:62:10:a3:31:36:ff:d6:e9:74:ae:09:b6:
         7c:3e:24:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 06:06:21 2024 by rpki-client on console-fra.rpki-client.org