Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857/02e35e7b-e901-37bd-8261-0d1a1c8fce7e.roa
File:                     02e35e7b-e901-37bd-8261-0d1a1c8fce7e.roa (raw, json)
Hash identifier:          4D4bLdoxsiz/L2zJBSCyfTO1R1veGtWw6BcqQhDXCkk=
Subject key identifier:   E5:87:F0:16:4E:8B:A9:22:24:02:73:26:14:2B:1B:AE:FF:32:9A:88
Certificate issuer:       /CN=e268af9f-122d-49b0-8f39-22b20b9bb857
Certificate serial:       010D0C9F43285847EEA0EEC4D05209D86709CD40
Authority key identifier: 9F:5B:48:75:C6:2B:82:8A:BA:1E:57:CE:2D:6C:D9:E6:99:13:F5:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857/02e35e7b-e901-37bd-8261-0d1a1c8fce7e.roa
Signing time:             Tue 19 Nov 2024 14:46:36 +0000
ROA not before:           Tue 19 Nov 2024 14:46:36 +0000
ROA not after:            Mon 17 Feb 2025 14:46:36 +0000
asID:                     54975
IP address blocks:        2602:f847::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857/e268af9f-122d-49b0-8f39-22b20b9bb857.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857/e268af9f-122d-49b0-8f39-22b20b9bb857.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:a0:ee:c4:d0:52:09:d8:67:09:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e268af9f-122d-49b0-8f39-22b20b9bb857
        Validity
            Not Before: Nov 19 14:46:36 2024 GMT
            Not After : Feb 17 14:46:36 2025 GMT
        Subject: CN=0fa7041d-df14-40ac-9ea6-1bc91ad1c4ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5f:a9:a2:8c:11:95:68:79:01:5c:b6:19:d3:
                    83:62:24:61:b4:36:ac:65:06:3e:b2:3b:5a:5f:e0:
                    c5:41:00:31:66:42:fa:0f:4c:73:9b:7e:b5:24:c8:
                    5d:ef:29:a5:1e:df:e3:28:0a:6d:7b:7a:e4:13:9a:
                    b0:9c:1b:ce:03:0d:17:fb:13:d5:b3:43:1a:a8:24:
                    25:f4:b2:b5:13:0b:60:96:cb:72:4e:1d:1c:32:96:
                    d0:fe:fc:7c:d7:55:fe:e7:13:02:ea:32:48:f2:d4:
                    77:20:38:15:e7:51:e6:1c:f0:9c:33:6e:73:82:90:
                    7e:89:08:cf:fe:66:e8:59:c0:0e:71:69:55:3e:a4:
                    d4:38:d2:42:f7:75:7f:b7:01:11:92:7c:52:34:d4:
                    e4:ef:ce:bd:9f:fe:cf:fe:79:d7:d3:d3:f1:66:16:
                    dc:06:d2:95:7c:b5:4e:2d:1e:00:ab:4f:16:90:18:
                    b6:ef:09:b4:24:45:76:d5:f9:f0:7e:d8:cf:3e:5f:
                    1a:f8:f9:8f:77:7e:aa:67:35:b2:b3:a8:00:a7:ab:
                    81:2b:c6:f4:36:ad:fd:61:63:0b:e5:73:c7:8f:1d:
                    31:ba:4c:81:16:d8:f9:b8:91:99:fa:74:69:13:22:
                    b8:fe:a8:99:97:b0:e5:bd:e8:f0:0d:4a:c8:03:53:
                    bf:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:87:F0:16:4E:8B:A9:22:24:02:73:26:14:2B:1B:AE:FF:32:9A:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857/02e35e7b-e901-37bd-8261-0d1a1c8fce7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857/e268af9f-122d-49b0-8f39-22b20b9bb857.crl

            X509v3 Authority Key Identifier:
                keyid:9F:5B:48:75:C6:2B:82:8A:BA:1E:57:CE:2D:6C:D9:E6:99:13:F5:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f847::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:5b:c7:33:b6:92:94:33:8b:aa:20:d1:5c:c5:15:6d:1b:95:
         e7:82:36:ec:8b:df:f5:f9:da:88:75:93:3e:c0:a7:6b:c5:00:
         a5:72:9d:80:28:70:c4:f1:21:76:01:d5:54:ca:d0:e7:3e:48:
         74:f3:c3:c7:da:20:22:e4:f8:f5:ed:57:8c:95:72:5f:7f:23:
         fc:d4:01:7b:5c:fc:59:a7:02:1e:28:4d:6a:db:bc:e8:9d:b4:
         63:b5:5e:23:31:99:eb:c3:3e:6d:a4:55:58:77:5d:64:ff:d4:
         4d:20:86:1b:d8:94:ad:5d:01:e4:0e:a2:02:a8:42:5f:49:b2:
         fe:b1:23:5c:a1:3e:ef:93:34:bc:03:dc:b8:36:7b:d8:ab:b2:
         22:e9:b6:16:09:f0:13:c6:62:09:c4:c4:ae:4c:22:f7:a0:67:
         62:35:2d:9e:9d:f1:97:bf:25:85:23:15:68:2a:09:1e:72:7d:
         79:fe:36:8a:a2:8b:bd:8b:4e:f5:86:2a:b5:2e:24:c7:3d:36:
         e7:8a:ac:0b:19:81:83:49:31:21:93:2c:5e:b8:77:cd:8b:67:
         d6:7c:f9:0d:5d:06:80:80:f7:a8:f1:34:97:35:43:61:f6:9e:
         0a:63:45:4e:4f:f7:18:1a:fb:b0:77:57:fa:c7:54:d7:05:20:
         c7:49:da:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:40:34 2024 by rpki-client on console-ams.rpki-client.org