Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7aeaa4fc-1808-4eb1-b0b2-74151aa097da/b2ca9e03-713d-337f-819e-cb681e5620a8.roa
File:                     b2ca9e03-713d-337f-819e-cb681e5620a8.roa (raw, json)
Hash identifier:          Gfoxrbg/7YYwaXITMPRDTgI7X2RG/A0DSzkOfQdAlu0=
Subject key identifier:   56:BB:AA:3E:50:17:D4:79:99:F0:75:96:82:14:D6:F8:C6:67:31:99
Certificate issuer:       /CN=7aeaa4fc-1808-4eb1-b0b2-74151aa097da
Certificate serial:       010D0C9F432858476C9DC0BBC784D280E2AE3400
Authority key identifier: A8:6A:7A:27:D8:5C:9A:6C:AF:47:AE:C4:96:8B:AA:79:EF:F6:C4:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7aeaa4fc-1808-4eb1-b0b2-74151aa097da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7aeaa4fc-1808-4eb1-b0b2-74151aa097da/b2ca9e03-713d-337f-819e-cb681e5620a8.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     395522
IP address blocks:        2602:817:b000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7aeaa4fc-1808-4eb1-b0b2-74151aa097da/7aeaa4fc-1808-4eb1-b0b2-74151aa097da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7aeaa4fc-1808-4eb1-b0b2-74151aa097da/7aeaa4fc-1808-4eb1-b0b2-74151aa097da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7aeaa4fc-1808-4eb1-b0b2-74151aa097da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:c0:bb:c7:84:d2:80:e2:ae:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aeaa4fc-1808-4eb1-b0b2-74151aa097da
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=b72aeffb-d731-4bb3-9ecd-098bb104276f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c7:22:ce:35:69:a1:f9:c6:a0:3b:ff:e8:58:
                    bc:b6:cc:f3:76:87:e0:86:f5:00:3d:cb:5e:5f:61:
                    30:43:cf:bd:c9:a0:0c:5d:db:47:bf:fc:24:b9:2f:
                    91:0c:94:f5:0b:eb:f6:c3:22:8c:91:4e:ca:c9:63:
                    fd:cf:14:ed:f9:76:db:d1:9f:0d:2c:8e:9b:e3:88:
                    a1:59:2c:04:f8:ab:4d:a0:ec:de:66:59:35:06:43:
                    cc:f7:b4:35:27:29:fa:5d:38:6f:d7:85:14:e6:36:
                    1e:19:c9:55:90:63:30:00:7b:30:0f:0f:4f:fb:d5:
                    72:15:30:81:43:1e:f5:3b:66:01:15:e0:28:e7:45:
                    32:1e:0b:6e:ae:cd:52:8d:2c:97:08:5d:a7:b3:26:
                    95:f3:9f:e9:64:64:ea:f5:a3:1d:9a:d3:bd:ad:1f:
                    d5:39:a1:13:fa:16:91:1c:a0:aa:ec:a7:40:c4:20:
                    03:35:b8:ee:c0:bf:4b:02:f8:25:68:05:e0:c7:6d:
                    f3:0e:ce:9a:6b:06:f8:1b:22:52:73:4c:3e:09:ff:
                    d8:9e:52:8a:5e:00:6c:73:98:1c:d5:4e:61:9d:95:
                    cc:e4:eb:7e:85:99:3b:67:a4:15:65:0e:cd:f8:03:
                    78:c1:14:c3:6d:74:4a:3b:8e:4c:95:4b:e4:9b:ea:
                    07:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BB:AA:3E:50:17:D4:79:99:F0:75:96:82:14:D6:F8:C6:67:31:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7aeaa4fc-1808-4eb1-b0b2-74151aa097da/b2ca9e03-713d-337f-819e-cb681e5620a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7aeaa4fc-1808-4eb1-b0b2-74151aa097da/7aeaa4fc-1808-4eb1-b0b2-74151aa097da.crl

            X509v3 Authority Key Identifier:
                keyid:A8:6A:7A:27:D8:5C:9A:6C:AF:47:AE:C4:96:8B:AA:79:EF:F6:C4:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7aeaa4fc-1808-4eb1-b0b2-74151aa097da.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:817:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:8c:a3:8e:c5:b5:95:bf:f2:2e:db:de:98:19:1c:02:63:99:
         81:1d:32:c4:30:3e:2e:76:2d:b0:2c:04:b2:2b:f4:2b:02:e6:
         58:86:8f:f9:25:24:46:ed:41:72:3d:7c:33:e0:72:09:74:18:
         5b:b2:b0:3c:77:1a:fd:f8:d4:ba:23:3c:e4:68:fa:1c:5c:81:
         5d:ba:f5:4b:5b:c2:a8:b1:02:0c:37:84:d0:ff:87:70:3a:31:
         fe:83:97:25:4d:fe:a0:ae:6a:c3:60:b7:27:3f:6d:97:de:1e:
         65:1c:af:bd:68:c9:e3:68:d2:1c:57:28:29:3a:ac:a9:e5:95:
         33:97:45:c8:4f:51:2d:8a:59:a5:66:8a:a3:d7:f3:9b:7b:0a:
         e2:1b:8d:fb:29:b9:45:cb:71:7a:d0:ef:79:92:e5:50:2f:f6:
         20:b7:ab:e0:90:58:8c:08:64:f1:9a:a8:13:74:45:7d:0d:4e:
         c5:88:85:f6:29:1a:f0:33:35:1c:91:3a:ef:97:8b:d2:db:57:
         5b:ee:69:64:a5:91:47:6e:14:58:d6:29:e3:91:43:cc:13:9b:
         c5:37:a0:ba:60:ef:a8:01:59:d9:1d:81:f6:2e:43:6f:8d:d0:
         f9:b7:46:46:30:c9:2b:69:18:b9:07:3f:8f:f0:4a:8f:93:b9:
         71:de:c6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:19:14 2024 by rpki-client on console-ams.rpki-client.org