Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/f681d9d7-b2e1-3c8d-8986-202fb96c0322.roa
File:                     f681d9d7-b2e1-3c8d-8986-202fb96c0322.roa (raw, json)
Hash identifier:          atFmmaOWZF53KsRDrCbdRoMjPnc0gVn64EXoADGb83s=
Subject key identifier:   CD:94:63:5D:C0:00:11:B7:72:E1:10:FE:F8:40:E2:6C:06:43:6B:E8
Certificate issuer:       /CN=e0010d92-35a7-4dba-807b-0f229b3e2e50
Certificate serial:       010D0C9F43285847AB4E06D5D3E8B4F2713FC6C0
Authority key identifier: A8:0D:A4:D9:0D:AA:9A:84:78:46:1C:00:A5:75:D2:08:D0:1A:3E:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/f681d9d7-b2e1-3c8d-8986-202fb96c0322.roa
Signing time:             Sat 26 Oct 2024 12:00:23 +0000
ROA not before:           Sat 26 Oct 2024 12:00:23 +0000
ROA not after:            Fri 24 Jan 2025 13:00:23 +0000
asID:                     214134
IP address blocks:        2602:f803:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/e0010d92-35a7-4dba-807b-0f229b3e2e50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/e0010d92-35a7-4dba-807b-0f229b3e2e50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ab:4e:06:d5:d3:e8:b4:f2:71:3f:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0010d92-35a7-4dba-807b-0f229b3e2e50
        Validity
            Not Before: Oct 26 12:00:23 2024 GMT
            Not After : Jan 24 13:00:23 2025 GMT
        Subject: CN=3473d2d1-fd2e-4b00-bf92-850b0232b0fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c3:3a:e1:c4:98:dd:09:bf:f9:2f:2a:04:a0:
                    a6:db:9c:fd:6c:90:10:5a:31:bc:e6:89:d0:5b:b4:
                    8a:23:f6:1f:3c:3c:6b:d9:0e:a7:55:f5:d8:36:2c:
                    10:bb:82:89:f1:23:d0:33:a8:18:3b:ae:32:7f:6e:
                    df:f0:de:04:c2:d8:e5:f7:e1:b8:db:10:1e:16:d7:
                    a0:b9:01:00:75:5d:dc:3f:c5:7b:7d:59:e8:72:b9:
                    75:f4:b1:96:89:2c:1d:b6:9c:06:aa:42:5a:e5:7b:
                    58:8b:c4:2e:cd:5c:a7:e9:04:30:99:ce:8a:df:3b:
                    f5:48:ef:53:3e:26:f6:a8:fa:63:6b:5a:63:b8:9f:
                    07:6c:7e:b7:1a:7f:ca:08:50:54:e7:e3:cd:b8:fe:
                    4d:c9:7f:27:e4:c3:69:0f:57:83:71:45:a3:34:33:
                    b4:e2:ae:b7:23:9e:c6:81:77:65:15:c6:26:fb:02:
                    03:b2:30:6b:d6:5a:80:22:d0:51:e1:3e:72:86:ce:
                    44:e8:dc:30:67:e1:37:ca:a4:9e:f1:ea:71:40:b0:
                    ab:3d:31:a2:af:dc:25:3e:65:8c:40:ef:e9:28:fc:
                    8d:ee:f8:f4:48:8a:d9:ae:c9:a8:c3:dd:6a:7c:8e:
                    25:4f:f4:cd:83:82:05:ca:e1:6b:f6:1c:48:9b:fc:
                    9a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:94:63:5D:C0:00:11:B7:72:E1:10:FE:F8:40:E2:6C:06:43:6B:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/f681d9d7-b2e1-3c8d-8986-202fb96c0322.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50/e0010d92-35a7-4dba-807b-0f229b3e2e50.crl

            X509v3 Authority Key Identifier:
                keyid:A8:0D:A4:D9:0D:AA:9A:84:78:46:1C:00:A5:75:D2:08:D0:1A:3E:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e0010d92-35a7-4dba-807b-0f229b3e2e50.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f803:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:98:0b:e3:35:e5:fc:a7:36:96:3a:3e:2a:b3:da:09:fc:af:
         1d:9c:75:a5:8b:99:6b:0b:39:b1:a7:94:28:6f:82:b6:a0:97:
         95:a6:19:e8:7d:1a:cc:72:b1:b9:04:4d:a3:6c:71:f6:13:20:
         c4:c6:ce:26:a3:1a:58:b4:7e:5a:0a:51:15:53:2e:22:9c:36:
         3a:8d:99:3b:d5:ad:43:c8:74:c2:3a:0a:41:34:18:91:75:3c:
         86:c4:79:7c:da:d4:c2:23:4d:1a:75:72:17:59:27:46:aa:ec:
         d1:3a:97:d3:05:2e:9e:2c:74:47:ac:b4:24:75:11:2e:61:09:
         47:6f:ea:e9:0c:7a:54:11:cf:95:55:41:fc:ee:0a:4a:2f:ee:
         1b:17:a9:ed:ac:3e:dc:44:b0:7b:e0:c9:06:51:79:e2:5b:e5:
         53:31:15:13:44:74:db:b7:30:b3:10:44:37:37:a7:34:30:16:
         d1:9f:cc:fc:db:40:a7:e7:c2:8e:5e:1e:f1:25:36:0b:11:78:
         65:5e:42:2c:48:13:2b:cc:90:1e:7f:92:f8:f1:3a:92:63:07:
         f7:2d:48:2b:33:84:e8:2a:25:e1:e8:e7:d6:44:77:d2:aa:f3:
         17:10:b2:20:47:46:ae:8d:1b:29:6e:2b:16:a3:04:b5:c7:d9:
         4d:f4:94:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:27:22 2024 by rpki-client on console-fra.rpki-client.org