Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1/117c9dc2-d2a4-3d40-9840-ea817747b4ed.roa
File:                     117c9dc2-d2a4-3d40-9840-ea817747b4ed.roa (raw, json)
Hash identifier:          Y1B80TnvyBdUCCrnMGnocibSpyZuVv2QB4w8jGq6o3E=
Subject key identifier:   DD:D7:59:7A:81:7B:36:89:8C:F0:C1:30:14:BB:AA:75:F8:B6:9C:AD
Certificate issuer:       /CN=725a4aca-8e03-4420-8745-329c8962b4d1
Certificate serial:       010D0C9F43285847CE6F52DC9B1A3CBCFBFDE980
Authority key identifier: 49:6F:54:A1:0B:DB:44:EE:36:B9:B9:6D:A2:13:78:5C:E8:68:4B:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1/117c9dc2-d2a4-3d40-9840-ea817747b4ed.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     401003
IP address blocks:        2602:f9cf::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1/725a4aca-8e03-4420-8745-329c8962b4d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1/725a4aca-8e03-4420-8745-329c8962b4d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:52:dc:9b:1a:3c:bc:fb:fd:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725a4aca-8e03-4420-8745-329c8962b4d1
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=c056e4c6-aac8-4f0e-b49b-bda78082bd71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:95:3d:5e:27:f2:58:c1:91:e4:15:cb:55:f3:
                    1c:ab:03:40:cb:dd:36:b5:20:c5:2c:55:9f:6c:61:
                    f3:2f:0a:2e:0e:eb:49:91:34:d4:df:fc:7b:29:f3:
                    79:88:49:82:13:f6:1c:11:3d:86:4d:22:49:9f:8a:
                    e6:25:df:3a:9b:80:b5:1e:93:73:ce:72:ef:2c:11:
                    a1:02:48:60:f5:10:08:31:d7:62:15:3c:ad:d7:aa:
                    3e:47:dc:9a:1b:35:c9:69:56:8c:17:e9:52:3d:92:
                    66:5d:cb:6b:4f:a8:52:94:36:a0:98:9d:0c:60:3a:
                    89:6e:f1:02:d9:82:16:39:2c:c7:83:00:68:24:d9:
                    34:a5:0d:26:f5:0e:61:4b:7e:c9:39:90:40:9d:a3:
                    85:b3:26:3c:ff:f8:84:af:a5:9a:df:22:76:68:92:
                    22:e0:c4:68:2a:0b:3d:5f:c0:f1:d5:c4:9f:f5:be:
                    70:ee:cc:9f:2b:a4:95:dc:92:86:3f:68:21:86:29:
                    16:52:50:dd:25:5f:fc:2e:d1:0e:5c:c3:50:75:91:
                    5c:62:34:82:1f:d3:4d:35:e6:4b:8b:1f:07:19:cc:
                    4a:33:c8:8e:cd:95:e9:f8:02:3a:a4:e0:df:da:be:
                    78:94:f1:b3:0f:04:f8:4c:74:11:8c:20:b4:dc:9c:
                    c5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D7:59:7A:81:7B:36:89:8C:F0:C1:30:14:BB:AA:75:F8:B6:9C:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1/117c9dc2-d2a4-3d40-9840-ea817747b4ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1/725a4aca-8e03-4420-8745-329c8962b4d1.crl

            X509v3 Authority Key Identifier:
                keyid:49:6F:54:A1:0B:DB:44:EE:36:B9:B9:6D:A2:13:78:5C:E8:68:4B:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9cf::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:f6:3b:2d:d6:94:2d:27:b5:d2:0b:5a:99:d3:a0:4d:74:9d:
         de:c7:02:a1:b9:f9:ef:13:f8:7e:80:7f:bf:c5:a9:83:62:1c:
         67:00:fd:9e:94:95:53:16:94:5f:e0:5a:83:7d:2c:3b:8f:73:
         6d:0c:02:c5:3f:49:2c:d8:bd:63:a1:bc:50:df:07:72:b0:90:
         07:e7:14:fa:e9:00:a9:a3:db:c6:10:a7:24:40:14:b6:54:3f:
         cd:4b:0f:e1:de:20:24:f5:eb:cc:af:77:fa:d4:d4:4b:17:d9:
         36:66:fd:2c:ac:14:ec:57:62:8c:45:a1:1a:0b:b5:e1:ed:1b:
         1d:35:ab:97:c6:d4:dc:75:29:8e:a0:e3:63:05:2d:06:25:94:
         10:8a:65:b4:0c:cb:ab:1f:e5:dc:9f:c1:c0:cf:e1:1d:d0:53:
         1d:3b:cf:5c:16:63:8d:dd:78:e5:80:65:0d:e5:cb:54:9c:65:
         8b:2e:d6:5e:f6:44:bb:02:f4:f8:d2:15:77:72:90:8a:98:f2:
         36:f9:cb:4c:b9:16:b5:64:a9:d4:8c:fa:b1:09:c8:b9:ae:4a:
         92:8e:4d:87:d4:ae:39:dc:a1:58:4b:5f:c0:e5:a2:90:aa:f9:
         5f:e7:e4:9e:67:8a:28:71:5b:64:4d:81:97:0b:b7:12:2d:d1:
         11:9e:fc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:38 2024 by rpki-client on console-fra.rpki-client.org