Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/b8c1b57b-a7e4-3d17-918d-bc9f3efa53e8.roa
File:                     b8c1b57b-a7e4-3d17-918d-bc9f3efa53e8.roa (raw, json)
Hash identifier:          AfUNB6D820uIQH+zM3K61H3BqihdgTK69RrzWMO5NJ4=
Subject key identifier:   CB:5B:F0:1E:AF:70:FB:08:83:F2:A3:DA:13:72:9B:34:AE:BB:13:48
Certificate issuer:       /CN=016f87b6-3d90-449f-9ca3-d057fc7b2a5f
Certificate serial:       010D0C9F432858475BDB65E2D99847EAE8D1CEA8
Authority key identifier: 54:E4:33:B8:3D:BD:A7:6D:51:01:AE:42:13:76:4F:3D:EC:1C:FC:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/b8c1b57b-a7e4-3d17-918d-bc9f3efa53e8.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     1742
IP address blocks:        2602:fca9::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:65:e2:d9:98:47:ea:e8:d1:ce:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=016f87b6-3d90-449f-9ca3-d057fc7b2a5f
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=a15ad97d-5c53-48b9-8447-58cf5e706dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d5:4e:de:37:f4:ff:0a:ea:5b:9f:72:95:4d:
                    cd:c9:1e:4c:37:0b:c6:7a:41:8e:f5:5b:69:78:6f:
                    0f:5f:3c:15:fb:6e:cd:05:a6:f1:a1:46:6c:12:27:
                    d3:84:3e:0a:a1:49:b8:93:4e:a2:ec:69:b9:4d:cf:
                    d2:a7:4f:18:81:ce:c3:a6:c6:3e:e8:88:6e:34:dd:
                    06:74:fb:1a:cd:4c:7a:49:fe:1e:0b:46:86:d6:46:
                    6a:3e:84:6e:84:36:87:75:35:01:7f:75:a0:cf:0d:
                    c7:1c:6a:72:4f:44:a5:97:0f:e0:c4:87:fa:73:99:
                    39:8d:ba:fb:70:da:73:75:a7:07:e5:a7:17:04:95:
                    7d:e0:a9:76:b0:ab:00:4c:a5:15:ab:7c:e8:ff:97:
                    5c:91:ba:82:a2:de:94:09:7e:f4:4c:3e:e1:8a:3d:
                    01:91:a4:66:d9:e0:fd:2c:a0:1e:d2:ca:b9:c5:f0:
                    81:d6:42:84:2d:6d:68:96:10:91:b0:60:fc:7f:7c:
                    d4:2d:99:ab:72:f8:20:6d:29:55:ce:e4:f8:fc:b6:
                    2a:9e:be:2a:d5:35:d0:66:8b:8b:a3:ff:4a:a5:29:
                    95:7e:a6:b0:b5:1f:be:1d:de:1d:b4:bb:44:12:c2:
                    bd:b7:24:e2:7f:a1:f7:e9:8a:04:d0:72:fe:3a:08:
                    90:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:5B:F0:1E:AF:70:FB:08:83:F2:A3:DA:13:72:9B:34:AE:BB:13:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/b8c1b57b-a7e4-3d17-918d-bc9f3efa53e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.crl

            X509v3 Authority Key Identifier:
                keyid:54:E4:33:B8:3D:BD:A7:6D:51:01:AE:42:13:76:4F:3D:EC:1C:FC:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fca9::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:f7:67:84:e4:2f:59:f0:10:0f:a5:f2:f1:50:d9:7b:1a:33:
         74:fd:f9:10:e5:86:0a:6a:a9:0f:90:2f:c8:13:1f:17:44:22:
         6a:e0:91:ad:ec:0f:28:f7:90:e6:1b:12:da:c7:b7:4a:ba:a9:
         b9:be:5b:e2:dc:1e:09:48:21:b9:3b:08:d4:bb:ad:98:4d:6a:
         4a:f5:6a:96:fa:60:0f:6c:a9:3e:bd:a7:48:f8:ba:ae:d1:ea:
         67:aa:58:51:16:80:5c:5c:4e:f8:90:a7:a6:19:d5:97:b7:ba:
         fd:e5:5a:2e:f1:c5:fc:0c:94:e9:b7:85:c0:a2:a5:40:2f:a2:
         5b:0c:2e:32:0d:d5:fb:0b:9c:1b:8b:d6:34:86:76:b7:0a:58:
         9f:f7:f4:67:08:18:44:92:8b:b9:cc:2f:7f:fe:73:b9:74:3a:
         9f:68:15:20:9f:3c:bf:54:65:0a:2e:fc:c4:27:16:71:10:f5:
         d0:7e:82:ad:f9:cb:d5:66:66:aa:66:e8:4f:f6:7f:49:b1:64:
         43:30:9d:c6:0f:9e:55:e5:7b:70:55:25:30:86:73:de:74:63:
         04:75:11:fd:a9:ad:6f:dd:06:9a:37:7d:5d:08:89:d3:3d:f3:
         4b:76:c7:84:20:c8:5f:0d:90:99:af:7b:de:e2:9c:89:c1:bb:
         c6:a0:b8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:02 2024 by rpki-client on console-fra.rpki-client.org