Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7dc3020d-633c-4147-90a4-2daf4afdc33d/b7f37f46-3ddb-33eb-bb56-0c05b06f48be.roa
File:                     b7f37f46-3ddb-33eb-bb56-0c05b06f48be.roa (raw, json)
Hash identifier:          AdG+LpP/rhDPCYkzj66qXRYe2gqIMy8uckEh7awn2Pk=
Subject key identifier:   C3:3B:34:EF:4B:CE:18:6C:B0:D7:47:14:CD:BB:6F:D2:E5:E5:1C:3F
Certificate issuer:       /CN=7dc3020d-633c-4147-90a4-2daf4afdc33d
Certificate serial:       010D0C9F4328584765A0F7D292CC34AE85BC7580
Authority key identifier: 1C:4F:8C:B2:CF:AB:FC:C4:D2:08:9B:7C:AF:0C:87:3F:0E:89:83:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7dc3020d-633c-4147-90a4-2daf4afdc33d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7dc3020d-633c-4147-90a4-2daf4afdc33d/b7f37f46-3ddb-33eb-bb56-0c05b06f48be.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     401024
IP address blocks:        2602:f910::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7dc3020d-633c-4147-90a4-2daf4afdc33d/7dc3020d-633c-4147-90a4-2daf4afdc33d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7dc3020d-633c-4147-90a4-2daf4afdc33d/7dc3020d-633c-4147-90a4-2daf4afdc33d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7dc3020d-633c-4147-90a4-2daf4afdc33d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:f7:d2:92:cc:34:ae:85:bc:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc3020d-633c-4147-90a4-2daf4afdc33d
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=b73a64dd-720b-4b29-afd2-2fabbf164523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ec:7a:af:be:0a:ad:19:43:78:99:d5:24:69:
                    3f:fc:db:45:bc:56:2b:0f:64:4b:fb:5b:8a:29:7d:
                    2a:32:c0:19:e7:71:ae:16:49:2e:8b:e1:74:39:54:
                    8b:9a:59:4d:06:dd:c3:80:fd:b9:b6:eb:1a:64:42:
                    06:d1:9b:8f:b4:45:71:07:01:e3:a0:82:a5:5e:1a:
                    a3:89:c2:38:8b:3e:79:27:85:18:40:36:65:b5:33:
                    08:8d:f3:f4:30:8e:65:bf:da:1d:37:75:ca:5a:c0:
                    c6:da:25:3b:92:47:1e:8e:c9:0e:59:9b:f1:b9:2e:
                    65:17:a7:91:6f:eb:8d:86:29:7e:34:88:ce:82:9a:
                    46:65:bc:0f:43:f5:2d:89:59:db:19:15:8a:24:f2:
                    21:bf:7f:6f:6a:6e:ff:38:35:de:8f:7e:92:68:e6:
                    78:10:f4:a8:e5:c1:03:32:4a:2c:25:ba:61:48:28:
                    fb:ec:0f:71:c9:91:ff:b5:62:dc:98:fc:7d:1e:0b:
                    65:d3:e1:a8:19:39:60:03:fb:f1:af:12:8b:a0:d8:
                    56:46:03:c8:3a:a7:f7:ac:96:f0:85:ad:88:50:80:
                    83:d8:da:33:87:c1:58:c1:1a:70:4c:cd:0a:cf:80:
                    9a:ee:48:e9:2b:ad:33:20:69:4c:3d:18:c7:2c:ca:
                    75:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3B:34:EF:4B:CE:18:6C:B0:D7:47:14:CD:BB:6F:D2:E5:E5:1C:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7dc3020d-633c-4147-90a4-2daf4afdc33d/b7f37f46-3ddb-33eb-bb56-0c05b06f48be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7dc3020d-633c-4147-90a4-2daf4afdc33d/7dc3020d-633c-4147-90a4-2daf4afdc33d.crl

            X509v3 Authority Key Identifier:
                keyid:1C:4F:8C:B2:CF:AB:FC:C4:D2:08:9B:7C:AF:0C:87:3F:0E:89:83:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7dc3020d-633c-4147-90a4-2daf4afdc33d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f910::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:7c:c5:d6:5a:82:41:10:2f:56:41:ba:4b:3f:76:de:67:3d:
         96:e2:f9:29:d9:56:64:3a:af:0d:2a:aa:3f:0e:87:81:d2:fa:
         6b:80:c3:46:30:7b:10:2a:4a:72:8c:df:dd:1a:d3:70:e4:ca:
         fc:84:cd:3e:13:c0:cd:65:8e:c9:25:ce:46:33:12:0e:06:4e:
         5f:23:0d:0e:fa:e9:30:da:c9:c3:38:75:ef:cb:f6:a5:d0:62:
         af:b8:21:6a:3c:76:13:39:ac:6e:76:78:29:1c:99:26:e5:6d:
         1b:7d:c2:22:b3:49:e7:cd:4a:40:9e:c0:b1:88:f0:8a:97:42:
         ad:5e:75:fa:99:d9:0f:36:39:95:97:a5:e1:5c:ac:fb:d8:0d:
         36:4f:0e:1e:4f:19:6c:3a:d9:dd:a4:c7:e1:94:27:ea:15:1d:
         03:c3:54:b5:9a:aa:e3:e6:36:f3:97:44:6c:b4:00:f0:04:50:
         45:3a:d1:a8:c9:c0:9d:28:75:48:72:90:b1:15:06:7f:d1:d9:
         54:75:c3:b4:db:89:c7:29:85:9c:ac:56:30:6a:88:7d:0f:b4:
         82:be:9c:00:40:22:ef:13:df:28:eb:3b:5e:4b:7f:28:7d:2d:
         16:19:1a:02:86:bf:c9:ce:b9:fb:3a:a6:76:0c:2c:e6:be:2f:
         a6:64:b6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:37:22 2024 by rpki-client on console-fra.rpki-client.org