Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/304f07f6-04cc-39ec-8d73-e2fe0365d858.roa
File:                     304f07f6-04cc-39ec-8d73-e2fe0365d858.roa (raw, json)
Hash identifier:          pMFZigvSlsLhxycgVoGbcC5QUlKeXyWPl66Q4KmA5Z0=
Subject key identifier:   AA:4F:BB:5E:DF:DB:B1:6F:63:36:16:0F:57:28:C6:73:50:48:60:68
Certificate issuer:       /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial:       010D0C9F432858474C80B34AAD9EDA1501E34400
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/304f07f6-04cc-39ec-8d73-e2fe0365d858.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     18450
IP address blocks:        2602:f919:103::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:b3:4a:ad:9e:da:15:01:e3:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=a582473e-4b60-4b91-a01e-3214ac05e9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9d:b5:24:1b:f9:62:49:3d:02:c6:e8:b8:5e:
                    1a:a1:7b:87:db:cb:25:0e:75:88:5b:5c:ad:a5:7d:
                    64:2a:e8:61:ca:47:d3:0a:74:ef:67:a6:86:d0:46:
                    34:e7:b5:f4:69:77:f5:be:c4:37:9c:8e:73:8f:15:
                    22:65:e0:77:1e:05:1d:10:fa:65:a6:f4:d0:0a:28:
                    34:31:ad:fd:75:da:b3:f0:1c:33:b6:a9:23:b7:d0:
                    52:c3:90:d0:a1:dc:2f:74:df:5b:e9:93:d1:18:75:
                    86:c5:14:c3:19:e4:0d:43:96:a9:ca:04:fe:a8:b4:
                    8e:af:18:e0:08:14:80:79:9e:77:09:75:8c:69:05:
                    10:5f:da:58:3a:37:ee:bf:78:97:cd:33:a9:da:a3:
                    2b:1a:4a:c5:b0:fd:68:bd:3a:19:a2:57:3d:bd:83:
                    d0:c8:6c:3b:af:40:59:09:d3:d6:66:37:05:b5:b1:
                    ba:ef:a0:07:a7:54:87:eb:ac:f1:33:67:af:5e:df:
                    3c:c1:6f:8a:4b:45:f3:9f:a5:0b:38:08:25:5f:f1:
                    16:2f:eb:84:19:16:8f:e6:24:31:be:ef:10:da:c1:
                    93:b8:ae:59:7b:b9:29:21:cd:58:a2:0c:54:31:f4:
                    90:73:94:0d:d2:39:22:cc:7c:47:50:61:52:e2:f6:
                    b7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4F:BB:5E:DF:DB:B1:6F:63:36:16:0F:57:28:C6:73:50:48:60:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/304f07f6-04cc-39ec-8d73-e2fe0365d858.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl

            X509v3 Authority Key Identifier:
                keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f919:103::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:ae:1d:c4:0e:2a:2e:27:ac:99:4c:d2:8a:a3:8d:f4:8f:c6:
         3d:ab:4d:02:5d:2f:63:49:53:11:01:7c:5f:b0:b3:69:8e:c7:
         7f:c4:27:b6:2e:c9:a9:70:f1:f6:ca:3d:27:64:43:18:55:13:
         bb:b6:22:75:34:da:08:aa:58:d9:1a:cc:fd:1a:9a:3a:f2:94:
         63:4a:fa:97:0b:b0:13:d8:00:b3:94:7d:ca:9d:58:fb:70:f5:
         d9:fc:87:2e:12:9c:9a:81:39:6d:2d:f7:08:58:4f:a7:2b:7d:
         4b:ea:3a:55:f1:96:d9:10:dd:34:06:1b:5c:71:20:5f:e3:5a:
         13:81:5a:ee:4c:0d:68:c9:28:09:9a:cc:43:b1:29:d0:2d:93:
         61:94:cb:9e:a8:6d:31:92:eb:82:99:a6:3c:12:0a:8c:94:93:
         cd:ce:f4:34:05:bd:cf:37:e0:95:ee:12:d1:bd:f3:63:27:cb:
         88:4a:95:04:eb:1d:39:b0:58:fc:79:10:06:47:5d:9b:d5:bc:
         8b:5d:08:53:ff:88:45:4b:38:da:f3:2f:bb:68:2b:cf:ae:55:
         4c:30:18:0e:98:8e:41:49:8d:5e:0b:84:61:7f:6a:2e:79:34:
         b2:35:f8:c5:65:ba:92:e5:05:38:a3:37:14:51:56:4f:57:03:
         8d:97:9d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:04:40 2024 by rpki-client on console-fra.rpki-client.org