Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/4a2c271a-6692-3179-941a-0d087d280308.roa
File:                     4a2c271a-6692-3179-941a-0d087d280308.roa (raw, json)
Hash identifier:          9s6TygPfb0E6K8E0ayOexbClhdJ8SKsEWxZp0DKfRvI=
Subject key identifier:   F8:47:6B:30:93:5D:DE:3C:29:A3:D6:92:46:BE:C7:93:58:BB:55:5E
Certificate issuer:       /CN=8baf6f06-4472-4c79-8a01-5c338d64c402
Certificate serial:       010D0C9F43285847E8F4CC6EA7923F75942C3400
Authority key identifier: 95:D3:B5:8C:0D:5D:5F:85:19:CD:8F:FA:39:F4:82:C2:33:BB:9D:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/4a2c271a-6692-3179-941a-0d087d280308.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     401082
IP address blocks:        2602:f8b4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:cc:6e:a7:92:3f:75:94:2c:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8baf6f06-4472-4c79-8a01-5c338d64c402
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=2ebe111c-9235-4252-957f-ff919fa31c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:bf:31:6d:11:30:e1:2f:b3:06:cc:8f:3f:32:
                    f4:c5:7d:97:35:6d:cb:23:17:49:fe:01:a4:64:4c:
                    42:0d:bf:cc:b3:7b:47:8a:e4:a8:1a:f8:66:61:6d:
                    43:90:82:20:2e:f9:17:22:46:43:b4:4d:8f:ff:b9:
                    81:af:9f:f5:19:28:81:9c:04:09:e8:b2:19:ca:8e:
                    04:f7:de:38:77:df:43:19:ea:33:fb:70:b3:fa:62:
                    bf:e6:7a:20:a8:76:54:f0:e4:c6:cb:69:68:da:e4:
                    ea:21:78:3d:2c:b4:d3:ca:76:45:a6:d0:a7:33:cc:
                    67:8b:c2:fd:cc:c4:f8:d1:f3:91:67:28:a0:3c:5d:
                    0b:91:1b:86:e4:a4:e0:b8:97:b3:36:38:4f:c8:4b:
                    32:01:0c:3d:5f:50:64:ad:6b:33:c0:a2:f2:a8:54:
                    7d:16:e1:57:01:74:33:ff:95:2e:d7:b0:fa:90:c7:
                    5d:d2:75:fa:af:c6:cc:b9:7a:b9:31:56:3a:e6:25:
                    aa:8c:72:cb:7c:3e:24:b3:36:4d:a1:6a:43:6e:9b:
                    8c:ad:d9:0a:f4:da:d8:4c:1d:92:31:5d:78:e2:2c:
                    50:b4:0c:87:38:80:8c:94:99:36:65:12:d4:12:d6:
                    36:4c:b8:16:93:57:2f:67:04:d8:92:1c:29:10:c1:
                    95:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:47:6B:30:93:5D:DE:3C:29:A3:D6:92:46:BE:C7:93:58:BB:55:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/4a2c271a-6692-3179-941a-0d087d280308.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.crl

            X509v3 Authority Key Identifier:
                keyid:95:D3:B5:8C:0D:5D:5F:85:19:CD:8F:FA:39:F4:82:C2:33:BB:9D:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8b4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:61:54:23:93:4b:11:af:5c:30:e8:d2:37:22:fb:6d:d0:57:
         8b:ad:f2:76:aa:02:57:36:53:ab:ae:99:ab:2d:99:e0:d3:61:
         e3:b0:15:30:31:06:47:a9:ac:73:d7:e2:0e:d6:fa:e6:22:9f:
         da:ef:3d:03:99:04:23:c6:b7:fb:1e:86:45:99:79:e0:02:dd:
         5e:d0:00:85:cf:b8:be:be:26:a4:f3:cb:3c:ec:30:c0:58:66:
         3b:d1:31:2d:5f:a7:20:17:98:0b:3b:4b:ee:a6:31:a8:48:7e:
         fb:eb:79:e6:a1:2f:ba:5f:ff:59:5b:ae:08:9a:05:ea:58:51:
         73:24:03:35:05:0a:2a:90:e6:a2:d4:c8:07:5f:1a:94:06:6a:
         03:fd:3a:99:59:35:81:47:69:22:94:7a:47:83:2a:83:2e:50:
         bd:e4:ca:e9:56:df:75:a8:57:ee:ec:af:32:ee:3b:b7:0f:aa:
         7d:6a:65:17:7b:66:fc:4a:4a:8c:1d:cc:a8:a8:5d:e0:b3:14:
         3a:6b:f0:12:a8:1c:a3:8a:9f:86:55:cc:8c:90:72:c0:96:2f:
         bd:b3:df:8b:eb:93:d8:04:60:a5:07:03:2f:8b:70:b8:33:4a:
         33:59:72:19:61:0c:42:9a:55:5e:cf:b3:65:f0:73:c0:4c:9b:
         cd:48:c9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:35 2024 by rpki-client on console-ams.rpki-client.org