Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3901fcdf-1cb4-4386-9219-5c784ac6c299/162675bb-0ed8-3214-999f-5d16ac4b7244.roa
File:                     162675bb-0ed8-3214-999f-5d16ac4b7244.roa (raw, json)
Hash identifier:          ZjP653dxBlknfyvdNpVL5hQukE/kba8lIozbpdR6oZk=
Subject key identifier:   BE:1B:4C:11:D1:96:C6:85:39:D8:31:92:08:62:A9:C0:63:A9:0D:EB
Certificate issuer:       /CN=3901fcdf-1cb4-4386-9219-5c784ac6c299
Certificate serial:       010D0C9F4328584770CB9A0993DE3DA40591D080
Authority key identifier: E4:27:69:72:1D:E1:2B:19:FE:F8:9F:51:F7:8A:09:08:65:CC:B3:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3901fcdf-1cb4-4386-9219-5c784ac6c299.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3901fcdf-1cb4-4386-9219-5c784ac6c299/162675bb-0ed8-3214-999f-5d16ac4b7244.roa
Signing time:             Sat 05 Oct 2024 13:00:42 +0000
ROA not before:           Sat 05 Oct 2024 13:00:42 +0000
ROA not after:            Fri 03 Jan 2025 14:00:42 +0000
asID:                     393435
IP address blocks:        2602:f87a::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3901fcdf-1cb4-4386-9219-5c784ac6c299/3901fcdf-1cb4-4386-9219-5c784ac6c299.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3901fcdf-1cb4-4386-9219-5c784ac6c299/3901fcdf-1cb4-4386-9219-5c784ac6c299.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3901fcdf-1cb4-4386-9219-5c784ac6c299.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:70:cb:9a:09:93:de:3d:a4:05:91:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3901fcdf-1cb4-4386-9219-5c784ac6c299
        Validity
            Not Before: Oct  5 13:00:42 2024 GMT
            Not After : Jan  3 14:00:42 2025 GMT
        Subject: CN=2a8ec885-8cbd-4206-8e4e-8d8ec768c4ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2e:5c:5a:67:39:aa:94:75:ee:ff:21:fd:e2:
                    fd:98:05:35:6f:a3:4e:4a:78:9d:cf:5b:2d:d2:df:
                    c5:a3:24:06:e9:31:81:26:fd:ee:dc:f4:dc:e9:99:
                    7d:98:be:25:c9:8d:23:34:7f:90:dc:c3:fd:e6:c2:
                    7e:ce:03:a2:a1:0e:cb:9c:a2:4a:2b:42:d0:dc:b3:
                    65:94:cd:7f:4f:f5:15:f2:8c:0a:ce:d9:0d:44:55:
                    6d:72:84:dd:99:40:69:0a:28:05:c6:a0:33:e7:75:
                    9f:f2:bb:26:73:9b:75:0d:b5:03:09:64:b6:26:88:
                    16:77:29:63:86:a9:a0:8d:58:ee:7d:60:39:de:d4:
                    df:b2:bb:f9:d9:93:ef:d2:13:4d:b1:93:ef:c3:76:
                    b6:85:3e:50:f3:d8:44:7f:c1:cd:05:59:dc:ce:07:
                    10:4e:93:e4:c2:5f:75:1d:70:8f:98:12:26:8d:a0:
                    8a:7d:b3:67:b4:f2:1a:bb:32:43:1e:03:5c:cf:6d:
                    19:df:05:d0:86:44:88:4d:13:63:0a:41:cb:94:85:
                    35:19:c5:bd:8f:31:f7:04:4f:70:37:bb:89:21:63:
                    d3:d3:39:c9:84:f3:39:fa:5b:8e:ed:f1:fa:db:8a:
                    90:ab:e2:7b:d9:e7:8c:6a:3d:50:7d:ae:5e:52:f2:
                    c5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1B:4C:11:D1:96:C6:85:39:D8:31:92:08:62:A9:C0:63:A9:0D:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3901fcdf-1cb4-4386-9219-5c784ac6c299/162675bb-0ed8-3214-999f-5d16ac4b7244.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3901fcdf-1cb4-4386-9219-5c784ac6c299/3901fcdf-1cb4-4386-9219-5c784ac6c299.crl

            X509v3 Authority Key Identifier:
                keyid:E4:27:69:72:1D:E1:2B:19:FE:F8:9F:51:F7:8A:09:08:65:CC:B3:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3901fcdf-1cb4-4386-9219-5c784ac6c299.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f87a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:85:1f:97:bf:f4:a4:19:ec:92:1c:b6:07:a7:c0:68:cb:16:
         f8:eb:c9:d5:bd:cb:3a:8e:22:19:49:2c:25:96:29:0e:46:aa:
         6a:34:0c:32:37:0f:07:f9:48:bc:8c:7b:20:d1:90:95:82:72:
         63:e2:9c:f6:16:26:45:6e:5d:05:85:cd:05:61:d7:d8:6a:a1:
         1d:56:d3:bf:f1:c0:b4:76:b9:20:a4:ad:1c:4a:f4:6f:ad:76:
         03:03:c1:ec:b5:5b:96:de:8a:7b:63:54:6a:42:44:4a:ff:54:
         3b:94:2f:1c:a5:73:a7:1f:a8:cc:88:20:9b:60:86:84:38:60:
         83:c9:68:04:68:4e:a4:6c:3c:ac:14:4c:40:ac:a0:66:d5:25:
         43:2a:0d:35:d6:2e:3a:b1:91:f6:d7:b5:2e:58:89:b6:31:41:
         6e:a7:3d:53:6b:35:ca:a1:ae:05:58:c2:33:94:56:08:96:fe:
         d2:e6:c5:9a:e3:25:e2:6d:e7:8c:9d:ef:7c:49:88:7e:ea:55:
         24:39:7b:b3:48:84:32:c6:f8:8e:b7:cd:e7:68:30:4e:fe:e9:
         db:b3:7d:3f:ec:fd:06:9c:6e:76:84:f1:79:03:c1:b1:75:48:
         c0:4c:b7:e7:e3:ff:99:e7:47:cc:67:7a:5f:f6:92:9a:03:c1:
         3a:df:8c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:26:14 2024 by rpki-client on console-ams.rpki-client.org