Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/84a6cb81-8bd5-38db-b496-fd0e590df645.roa
File:                     84a6cb81-8bd5-38db-b496-fd0e590df645.roa (raw, json)
Hash identifier:          xUyNNEz4pKDzElT85qmjppHkw/oleqsgCbmxoLLJNjM=
Subject key identifier:   F2:2C:E5:01:33:E4:F2:FF:D0:DD:6A:39:0C:9D:77:AA:DC:BE:00:EC
Certificate issuer:       /CN=71694d9a-8a1f-478d-8d5f-c3d4c84ddea8
Certificate serial:       010D0C9F43285847EE8A3C98DF98EB4FA2F1DB00
Authority key identifier: 2D:D7:F3:49:98:6C:58:6B:C7:BF:E0:C1:9D:BF:8F:BC:2E:E4:BC:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/84a6cb81-8bd5-38db-b496-fd0e590df645.roa
Signing time:             Tue 19 Nov 2024 14:00:39 +0000
ROA not before:           Tue 19 Nov 2024 14:00:39 +0000
ROA not after:            Mon 17 Feb 2025 14:00:39 +0000
asID:                     401170
IP address blocks:        2602:f8bf::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:8a:3c:98:df:98:eb:4f:a2:f1:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71694d9a-8a1f-478d-8d5f-c3d4c84ddea8
        Validity
            Not Before: Nov 19 14:00:39 2024 GMT
            Not After : Feb 17 14:00:39 2025 GMT
        Subject: CN=33d19b8a-06bc-4972-8e3b-c177a5ae6856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8a:ee:7f:9d:5a:bd:a8:8a:b0:ff:8c:86:b9:
                    46:04:56:25:26:e4:1f:46:be:bf:d2:da:c8:13:29:
                    10:09:6d:3d:ff:b5:72:85:92:f6:7a:da:53:fd:31:
                    23:6a:f6:da:80:29:b3:c4:f8:91:14:59:e5:02:3e:
                    f5:f0:f0:1f:f4:9e:7c:41:ed:83:af:f8:dc:de:d4:
                    2d:ac:28:4f:0f:8f:df:08:a1:34:8c:58:af:71:b1:
                    cd:4b:38:33:3c:45:d9:a2:ae:aa:30:e3:9f:cc:99:
                    44:ab:5b:a3:45:26:fb:d9:dc:be:fe:79:0c:67:30:
                    5c:b0:4e:28:ad:f4:7b:bf:7d:49:97:de:d9:74:77:
                    bb:5f:0a:9f:70:2b:b9:92:2b:f8:79:f5:1a:99:13:
                    54:e2:cf:0f:32:5a:9d:a0:ff:07:19:6e:3e:39:38:
                    09:3a:6e:5f:a6:e8:97:83:d1:43:8d:7c:c5:b1:a0:
                    1a:0b:26:a2:54:7f:f0:89:93:14:0b:8f:7c:0e:00:
                    e3:ae:6f:21:c5:57:6c:21:5a:d9:1d:b1:79:1d:12:
                    71:38:06:33:54:90:63:2d:25:84:88:c1:4c:88:d7:
                    04:e2:f2:50:33:0e:5e:cb:26:03:ad:3c:80:08:ba:
                    47:b3:e8:5a:05:04:d5:fd:5a:40:8d:88:cf:4b:69:
                    db:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2C:E5:01:33:E4:F2:FF:D0:DD:6A:39:0C:9D:77:AA:DC:BE:00:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/84a6cb81-8bd5-38db-b496-fd0e590df645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.crl

            X509v3 Authority Key Identifier:
                keyid:2D:D7:F3:49:98:6C:58:6B:C7:BF:E0:C1:9D:BF:8F:BC:2E:E4:BC:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8bf::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:39:39:c7:9d:7e:9f:4e:ec:a4:56:e8:5e:f0:8e:8e:10:5a:
         94:d1:64:ef:c3:e8:04:33:ec:32:f3:5b:fc:91:b3:25:ff:73:
         55:f2:6f:cb:92:54:20:ad:72:ff:2f:b3:a2:09:54:2b:e4:2c:
         ea:12:30:71:74:7e:ca:92:76:57:4c:5d:30:df:11:91:d4:0f:
         5e:34:5f:cf:a3:69:90:df:8d:d8:c7:d4:4b:3f:fb:29:d8:1c:
         ec:5c:83:41:58:08:4f:46:14:c4:97:32:a4:7a:cc:80:9d:a6:
         e3:70:f5:de:91:d8:30:0d:db:98:6b:ad:3b:13:86:a8:2f:2a:
         f8:76:2f:a7:4c:c3:8c:de:9f:60:ad:f5:e4:ad:e7:3d:39:da:
         0f:d7:04:7d:03:ee:24:27:2a:0b:4b:e1:e0:10:b5:f0:75:83:
         d2:cc:ef:ee:5a:d6:e7:9e:38:50:24:f2:63:d5:ed:d1:b4:43:
         05:30:14:4c:be:bb:bf:55:be:c0:92:67:b9:d8:fd:5b:b7:35:
         d2:b3:84:ba:c8:b2:44:c8:e5:27:5c:b9:9c:64:9e:5e:b5:25:
         aa:7b:6e:3e:de:88:56:69:e5:69:31:b2:cd:9a:d1:af:cd:f4:
         32:f7:9c:e9:ef:7b:41:8a:9e:0a:be:aa:f4:23:00:d2:c0:f6:
         ba:94:7c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:18 2024 by rpki-client on console-ams.rpki-client.org