Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8753d24f-ff99-413d-8183-c80052947f59/5837aca7-3356-33be-ba42-d4134eb166a1.roa
File:                     5837aca7-3356-33be-ba42-d4134eb166a1.roa (raw, json)
Hash identifier:          tH7OVcGcWudPq9/K0RDjLewY07ntQXzS7H7fLkpssHA=
Subject key identifier:   25:12:90:7B:F0:90:6B:A4:51:AA:C6:D7:E1:3D:82:E4:D8:6A:A2:11
Certificate issuer:       /CN=8753d24f-ff99-413d-8183-c80052947f59
Certificate serial:       010D0C9F432858473FF089A94933F09B26578E80
Authority key identifier: 40:C9:4A:45:27:21:95:AA:3A:E5:B3:18:49:08:DB:44:D4:D0:2E:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8753d24f-ff99-413d-8183-c80052947f59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8753d24f-ff99-413d-8183-c80052947f59/5837aca7-3356-33be-ba42-d4134eb166a1.roa
Signing time:             Wed 18 Sep 2024 01:00:30 +0000
ROA not before:           Wed 18 Sep 2024 01:00:30 +0000
ROA not after:            Tue 17 Dec 2024 02:00:30 +0000
asID:                     401104
IP address blocks:        2602:f8d2::/41 maxlen: 41

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8753d24f-ff99-413d-8183-c80052947f59/8753d24f-ff99-413d-8183-c80052947f59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8753d24f-ff99-413d-8183-c80052947f59/8753d24f-ff99-413d-8183-c80052947f59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8753d24f-ff99-413d-8183-c80052947f59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Sep 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:f0:89:a9:49:33:f0:9b:26:57:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8753d24f-ff99-413d-8183-c80052947f59
        Validity
            Not Before: Sep 18 01:00:30 2024 GMT
            Not After : Dec 17 02:00:30 2024 GMT
        Subject: CN=28fb3864-41de-40e9-86fd-e3d9b8112c0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:fb:e9:02:c2:21:46:57:26:0f:41:f4:78:0c:
                    35:eb:5b:7f:fd:5f:cd:87:cb:61:5e:2f:8f:3d:7a:
                    d7:e5:f0:49:0c:ba:8c:c4:cf:0c:7d:2a:75:6f:24:
                    2a:e3:a3:fb:83:cb:66:31:02:2b:1c:20:f1:9b:9b:
                    be:89:1d:78:42:28:78:58:24:61:e7:0f:c3:ed:34:
                    b7:b5:88:e3:41:6e:f2:71:16:a4:14:d7:6a:97:25:
                    ff:3a:4a:9e:0f:eb:29:fd:8f:60:a8:2e:11:eb:7d:
                    6d:d2:09:d7:16:c3:26:7e:e9:0e:24:4c:c8:9f:96:
                    a7:c0:f7:4d:6f:44:1b:0c:e7:84:df:0c:fc:f9:e6:
                    55:6d:49:5d:9f:ca:9a:69:ec:d9:e0:45:39:fd:99:
                    08:13:24:22:40:10:87:c8:d7:81:e2:90:b7:7a:27:
                    79:d1:03:e3:a8:6d:0c:69:36:b2:a0:fa:a3:94:63:
                    ea:8d:47:8b:f7:3b:90:47:0f:ae:6b:ba:51:6b:dc:
                    7c:24:77:c8:d8:3e:9c:ec:4f:e0:15:db:c4:2d:d5:
                    f5:75:1f:f9:86:3b:0f:f8:ca:fc:5e:7e:d4:c8:bc:
                    7f:35:b4:9f:d8:8d:fc:85:1d:77:b4:d3:36:7c:92:
                    03:0b:b3:85:63:80:06:6a:99:30:94:e3:83:3e:02:
                    20:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:12:90:7B:F0:90:6B:A4:51:AA:C6:D7:E1:3D:82:E4:D8:6A:A2:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8753d24f-ff99-413d-8183-c80052947f59/5837aca7-3356-33be-ba42-d4134eb166a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8753d24f-ff99-413d-8183-c80052947f59/8753d24f-ff99-413d-8183-c80052947f59.crl

            X509v3 Authority Key Identifier:
                keyid:40:C9:4A:45:27:21:95:AA:3A:E5:B3:18:49:08:DB:44:D4:D0:2E:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8753d24f-ff99-413d-8183-c80052947f59.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8d2::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:56:15:11:e7:29:e4:90:d5:d7:5a:ca:fa:49:bf:51:33:74:
         bb:89:bf:d8:a2:91:62:22:09:52:b2:03:01:ae:c2:8a:95:d8:
         f2:12:b3:11:10:55:83:21:f9:61:30:20:dc:88:4a:b6:5d:fb:
         0e:55:64:ac:09:aa:b7:0a:4a:81:f0:2f:81:b1:48:41:4e:ab:
         2c:20:66:6d:f8:12:d2:12:f4:a1:41:31:1b:c5:ba:e0:b3:09:
         be:a4:dc:e5:fb:9f:4f:a7:4b:c0:41:9c:f8:cf:ff:1e:be:e0:
         b9:0b:f5:d9:2b:d1:e4:65:3f:92:60:70:72:ac:ea:c1:f7:bd:
         1b:7f:0e:e6:23:28:c0:58:60:7e:6b:48:19:48:bf:82:20:f1:
         20:73:39:5c:3e:5a:60:b9:2c:46:44:56:4c:13:28:01:93:3c:
         95:51:31:0c:5c:21:c2:ba:a3:a4:21:1e:3d:fb:b7:96:4a:9d:
         53:b1:4f:26:99:38:86:ed:9b:5f:15:91:96:71:6e:5f:a4:0a:
         27:9f:98:f4:4d:99:a6:a6:8e:f7:df:ed:f9:88:22:d5:e2:eb:
         6d:44:a8:4e:a6:07:69:e8:6f:fc:f4:ac:81:c7:2f:3e:ac:42:
         48:71:08:04:3e:e5:b3:fb:44:1c:d5:c5:27:42:92:2e:94:5a:
         51:46:a3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 18:36:04 2024 by rpki-client on console-fra.rpki-client.org