Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/034af942-1859-3cb4-8f29-48f9586b4749.roa
File:                     034af942-1859-3cb4-8f29-48f9586b4749.roa (raw, json)
Hash identifier:          Kp+J1kMatI1qXgPedMUUrn/QFXu1zGWIlQkqUOEgfGE=
Subject key identifier:   41:26:11:0A:D1:F9:3A:45:77:A7:DE:1E:1C:F7:ED:E6:CB:C1:B4:C8
Certificate issuer:       /CN=9de2e0c2-2707-42c9-b26d-59fe7d0b342f
Certificate serial:       010D0C9F43285847ACD137FCFE956F25C0635800
Authority key identifier: 44:24:09:83:D6:FE:E5:17:5D:60:BD:AC:DC:B3:27:E5:CC:C5:BF:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/034af942-1859-3cb4-8f29-48f9586b4749.roa
Signing time:             Sun 27 Oct 2024 01:00:31 +0000
ROA not before:           Sun 27 Oct 2024 01:00:31 +0000
ROA not after:            Sat 25 Jan 2025 02:00:31 +0000
asID:                     399542
IP address blocks:        2602:f8ef:fe::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ac:d1:37:fc:fe:95:6f:25:c0:63:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de2e0c2-2707-42c9-b26d-59fe7d0b342f
        Validity
            Not Before: Oct 27 01:00:31 2024 GMT
            Not After : Jan 25 02:00:31 2025 GMT
        Subject: CN=b62e1538-e1ff-472d-a678-3c913b70c0e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:02:5a:c1:37:1d:2a:44:b8:aa:d5:2f:79:cd:
                    15:a0:7b:14:9a:b9:c8:2d:02:52:0b:39:d0:e4:8a:
                    06:03:11:7d:1f:0f:ae:56:a8:0c:9d:b1:23:05:f9:
                    01:e0:f2:0f:99:de:de:5f:84:b5:84:dd:27:3b:d2:
                    6b:49:79:3d:03:e5:8b:35:79:a2:0c:fc:1d:6c:90:
                    fd:87:51:bd:6b:3d:bc:f8:56:13:cb:a3:34:65:30:
                    ca:a5:2f:2b:26:20:e8:bc:04:24:79:6d:ea:b0:eb:
                    9e:08:75:8f:b3:9d:5d:cd:90:04:88:a4:1d:f1:88:
                    3d:f5:a2:48:59:1d:97:b1:1f:a2:99:8c:5e:da:cc:
                    c2:96:31:80:af:6d:d0:8e:b1:fa:d5:0a:09:51:53:
                    47:97:83:3f:45:da:1d:85:59:ec:b9:0b:9e:d2:57:
                    f6:94:7b:c3:bc:da:c2:de:56:09:97:42:7d:58:35:
                    62:60:31:3d:79:ec:db:1d:1f:1b:46:3d:4d:c6:d4:
                    f9:86:67:3e:2c:16:08:af:42:53:1e:f1:c0:79:5b:
                    d3:5d:a7:b2:4e:46:c5:01:51:58:eb:5d:a0:10:59:
                    21:b9:f5:97:aa:53:85:eb:8c:0d:c8:ab:de:6f:ef:
                    18:91:5f:e5:cd:3f:b8:35:fb:17:99:f8:10:95:f6:
                    9b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:26:11:0A:D1:F9:3A:45:77:A7:DE:1E:1C:F7:ED:E6:CB:C1:B4:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/034af942-1859-3cb4-8f29-48f9586b4749.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.crl

            X509v3 Authority Key Identifier:
                keyid:44:24:09:83:D6:FE:E5:17:5D:60:BD:AC:DC:B3:27:E5:CC:C5:BF:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8ef:fe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:81:8e:7c:0c:28:27:1c:92:64:3f:29:6f:65:e9:8b:22:c6:
         4d:be:00:bf:8b:dc:61:5c:79:00:27:31:cd:c9:01:71:61:b0:
         25:30:fa:12:9c:77:9d:21:7c:3c:97:9b:e6:ce:7d:bd:ef:13:
         b1:f4:e3:77:b7:53:56:34:79:36:50:75:16:59:29:c9:00:e5:
         ee:03:33:e2:af:53:8b:74:f6:58:16:e4:1a:cb:8d:ed:18:92:
         30:10:5a:9b:a8:f9:2f:6f:12:bc:03:f1:79:a8:c7:5c:b6:77:
         32:eb:d6:be:7c:97:e6:d6:29:db:5b:08:42:3b:8c:33:29:f1:
         94:b2:d0:17:0e:a5:01:64:5f:0a:78:d5:6c:18:6f:dd:5b:1b:
         41:b9:1d:b8:6f:2d:e4:b0:65:be:e0:b1:fb:39:bf:ab:db:31:
         70:ce:a8:e9:c4:0d:7c:3a:3d:a5:6b:90:45:69:ac:6b:83:63:
         e3:a3:91:b3:d5:8a:d5:81:0a:8e:f0:68:b1:98:f2:c8:ea:0c:
         8e:67:31:4b:25:15:5d:d3:0d:f7:67:64:d1:65:1b:8b:1e:62:
         19:e8:3c:da:cb:ea:c7:9b:75:ec:94:3f:8e:44:a1:e6:be:a3:
         75:fb:61:1c:54:7b:d2:96:37:e3:bd:32:4a:7a:be:e3:02:90:
         a3:b0:21:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:04:43 2024 by rpki-client on console-fra.rpki-client.org