Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/90ab908c-be55-3437-8ac3-a02bf5a66846.roa
File:                     90ab908c-be55-3437-8ac3-a02bf5a66846.roa (raw, json)
Hash identifier:          ZRSyjle87AxgH4hnFINGv87zA2XtWIehJFVx5FMIE9g=
Subject key identifier:   B5:FC:07:E2:C9:E8:E7:59:6A:D4:17:8B:80:02:92:67:61:78:61:85
Certificate issuer:       /CN=b3f5323f-8bea-48c6-aa03-949255dd1997
Certificate serial:       010D0C9F43285847C05C14B42D80392828EAF580
Authority key identifier: 53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/90ab908c-be55-3437-8ac3-a02bf5a66846.roa
Signing time:             Sun 03 Nov 2024 01:00:36 +0000
ROA not before:           Sun 03 Nov 2024 01:00:36 +0000
ROA not after:            Sat 01 Feb 2025 02:00:36 +0000
asID:                     46474
IP address blocks:        2602:819:e002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c0:5c:14:b4:2d:80:39:28:28:ea:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3f5323f-8bea-48c6-aa03-949255dd1997
        Validity
            Not Before: Nov  3 01:00:36 2024 GMT
            Not After : Feb  1 02:00:36 2025 GMT
        Subject: CN=0e685f6d-75de-4992-bf97-06322228c961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:29:e0:c9:d8:6a:a1:ac:9f:16:84:eb:cb:d4:
                    6b:52:7b:23:b1:13:21:cd:a2:c3:05:33:b2:7c:2d:
                    c3:d1:68:5c:c9:ff:6c:a3:71:11:34:76:50:36:ca:
                    bc:07:97:e8:76:b8:59:31:65:3d:72:13:94:ce:1b:
                    ff:d0:a8:13:f9:1f:10:04:5c:cd:37:0a:37:08:1c:
                    a0:26:9b:b4:ec:04:7f:7d:e8:e7:2d:d7:74:78:3a:
                    b3:e3:d2:6e:25:8e:bd:eb:62:10:6b:af:81:28:2f:
                    30:32:83:ed:da:97:95:df:e3:d3:6a:a7:c0:e3:f1:
                    7c:b9:6b:32:71:7a:eb:f4:11:47:0f:24:12:e5:a5:
                    93:99:0c:3c:a5:ee:0e:93:5c:3a:6c:3e:6d:3a:47:
                    14:a0:ec:55:29:55:a5:79:4a:3f:fb:ec:2c:f7:a1:
                    e6:10:8e:43:31:c4:50:fe:5e:12:a6:15:9c:07:5c:
                    43:b0:c6:0f:43:b2:0c:82:77:3f:d0:e3:60:02:cd:
                    a7:23:a3:22:6a:51:3a:94:7f:a2:a8:25:bd:f0:5e:
                    f2:05:c4:e2:7a:f4:6a:70:7c:f4:82:f4:74:9d:cc:
                    2a:bc:56:64:ef:db:dc:57:dc:56:65:e8:f0:03:a5:
                    fb:c2:50:e6:d9:97:60:e4:5d:31:d4:19:35:90:fd:
                    75:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FC:07:E2:C9:E8:E7:59:6A:D4:17:8B:80:02:92:67:61:78:61:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/90ab908c-be55-3437-8ac3-a02bf5a66846.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.crl

            X509v3 Authority Key Identifier:
                keyid:53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:819:e002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:1a:03:89:bf:de:62:0e:bc:f7:c7:61:fb:b3:38:20:aa:54:
         c8:ef:46:80:41:9b:aa:4e:f7:24:6c:25:c1:98:9f:9e:ec:18:
         d9:bb:c1:2e:ae:53:53:d7:dc:10:d0:58:0d:00:38:99:7e:4b:
         66:fa:a7:fb:65:8b:a7:84:d0:9b:70:f3:1c:44:c0:e3:a1:dd:
         5f:13:ad:05:c3:ad:4c:b0:15:60:52:e9:a0:a7:00:b3:ff:30:
         e1:af:9d:ae:e3:ea:27:3a:13:93:11:c9:84:ea:43:7b:d0:4c:
         0f:54:b1:07:30:10:bf:78:86:47:89:9c:66:99:a7:8e:1a:a1:
         a7:4c:9b:5e:2c:a7:17:62:30:48:7b:f4:78:51:a4:57:a6:5b:
         9b:69:d4:11:b5:43:53:f0:00:4a:b6:e4:6b:d6:37:a0:57:af:
         4f:bb:e8:2b:e2:10:e4:25:40:c1:19:99:d6:98:9a:33:04:26:
         10:81:7d:25:a0:e8:03:aa:47:db:bf:dc:64:59:18:ce:5e:1e:
         9f:78:b8:30:9d:0f:60:60:8b:1c:6a:15:03:81:68:72:ad:8d:
         6c:48:f7:30:66:19:a5:15:fa:c2:66:82:91:bf:88:9c:61:ff:
         4b:bd:f8:22:a7:6e:24:95:9c:fe:aa:a6:b2:6b:2c:6d:e3:e7:
         44:88:7c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:26:27 2024 by rpki-client on console-ams.rpki-client.org