Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/0dc2ca7e-4ac7-3488-b35a-d609510474c3.roa
File:                     0dc2ca7e-4ac7-3488-b35a-d609510474c3.roa (raw, json)
Hash identifier:          4/xcv2n9wakE2tD3iv423G6we5QhlNaLD2p9scAXxhs=
Subject key identifier:   EE:AC:E7:50:72:34:82:78:74:AA:BA:24:E6:10:15:B0:7A:57:87:BD
Certificate issuer:       /CN=71694d9a-8a1f-478d-8d5f-c3d4c84ddea8
Certificate serial:       010D0C9F43285847EE8A3CD8CD6082EB7295F498
Authority key identifier: 2D:D7:F3:49:98:6C:58:6B:C7:BF:E0:C1:9D:BF:8F:BC:2E:E4:BC:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/0dc2ca7e-4ac7-3488-b35a-d609510474c3.roa
Signing time:             Tue 19 Nov 2024 14:00:39 +0000
ROA not before:           Tue 19 Nov 2024 14:00:39 +0000
ROA not after:            Mon 17 Feb 2025 14:00:39 +0000
asID:                     401170
IP address blocks:        2602:f8bf::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:8a:3c:d8:cd:60:82:eb:72:95:f4:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71694d9a-8a1f-478d-8d5f-c3d4c84ddea8
        Validity
            Not Before: Nov 19 14:00:39 2024 GMT
            Not After : Feb 17 14:00:39 2025 GMT
        Subject: CN=352bf9d4-6f2e-430f-818f-bcf707ce1064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:38:1c:6b:fd:bf:a8:fe:95:11:3d:df:85:e7:
                    ac:a0:7b:46:ca:e4:09:18:ed:00:0f:82:f3:7c:fd:
                    6b:36:5f:8d:cb:17:c0:da:db:0f:55:d7:57:a0:ba:
                    5f:b6:40:b4:ee:77:54:b7:3a:14:41:2d:01:33:d1:
                    79:93:5f:11:b2:b4:dd:ea:7b:bf:2a:23:bb:9b:99:
                    52:b3:d7:ed:31:f8:b7:12:78:ea:67:f6:0f:6d:49:
                    81:ff:a7:bf:12:3a:6f:fa:6a:2c:10:4b:50:c6:69:
                    7f:93:23:10:35:d6:79:a6:d7:58:fe:b8:36:2a:70:
                    f6:b4:2e:e5:e5:62:24:45:58:28:cc:86:06:9c:05:
                    09:59:34:82:05:cf:2d:dc:1e:2a:0e:b7:5b:d3:dc:
                    53:ac:f9:81:c7:bd:92:89:ba:42:ab:49:9c:3a:d0:
                    03:52:1a:50:c1:bd:33:45:a5:54:05:de:cb:0d:56:
                    9e:6e:31:14:da:98:95:06:e1:aa:45:a2:fa:ef:0f:
                    4f:4f:85:cd:99:33:69:b8:ab:4c:a1:c6:41:e2:97:
                    43:16:d2:c6:79:19:22:f8:16:c9:42:d1:6c:eb:fa:
                    dd:97:ae:8b:fd:be:34:29:f1:fd:52:34:9d:6c:b9:
                    20:d4:c5:c0:33:48:90:03:ee:02:29:0d:d0:a3:28:
                    1b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AC:E7:50:72:34:82:78:74:AA:BA:24:E6:10:15:B0:7A:57:87:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/0dc2ca7e-4ac7-3488-b35a-d609510474c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.crl

            X509v3 Authority Key Identifier:
                keyid:2D:D7:F3:49:98:6C:58:6B:C7:BF:E0:C1:9D:BF:8F:BC:2E:E4:BC:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8bf::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:07:ca:a2:29:15:00:4b:b5:68:f5:1f:bc:94:69:1a:82:ba:
         0d:9d:c9:67:a8:81:07:70:10:27:f8:0f:73:16:ea:a7:15:4b:
         43:ac:e6:f3:d2:0e:b2:de:9f:5d:0a:2c:15:c9:69:29:49:99:
         85:09:26:3b:2a:f6:ae:d0:ba:57:31:c0:95:41:b2:fc:b0:dc:
         72:b3:5e:8c:5a:ae:7f:7c:e7:c4:6f:1d:8e:2c:08:1c:7a:1c:
         94:b4:b5:e3:3f:69:86:3f:ed:49:05:07:b8:e2:77:29:68:ed:
         30:d6:56:d0:ba:1f:b6:3d:0d:ec:97:09:bc:93:82:c2:6d:ba:
         2d:c1:6a:42:68:ff:88:1d:15:f8:67:fb:50:42:05:2f:85:75:
         62:ce:c8:57:03:8a:3d:12:53:ed:83:9a:1c:05:2b:f1:9e:1c:
         f4:cf:2a:8a:6b:d1:2f:fb:ee:eb:f6:ee:c5:31:05:1c:d9:94:
         1f:53:7b:be:b3:90:c3:f3:28:2d:c5:9a:5b:93:4f:5e:f7:af:
         ee:28:a8:9c:8c:44:95:09:cc:ae:7a:e1:af:e7:c2:fe:ce:30:
         10:c8:10:07:3c:78:cc:83:2a:e2:e8:84:69:ca:cb:af:23:c3:
         28:55:d0:af:18:2e:1c:d2:37:e7:87:dc:4c:f9:ce:dd:e1:0e:
         11:b5:f5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:26:19 2024 by rpki-client on console-ams.rpki-client.org