Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/16e040f3-42b1-387b-aca6-5b8efee58de6.roa
File:                     16e040f3-42b1-387b-aca6-5b8efee58de6.roa (raw, json)
Hash identifier:          gn4KCE3qw2W6w4dbwVVHiSri43TvPOnkof/YkqQiBlQ=
Subject key identifier:   C7:C2:F3:AA:0B:60:7E:8B:D3:E8:46:31:75:1C:32:05:EC:57:6C:65
Certificate issuer:       /CN=d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b
Certificate serial:       010D0C9F43285847CD09F67C5E27B9DD1C492F60
Authority key identifier: D6:50:41:77:70:B6:91:D2:6F:48:C0:44:1E:81:9A:0C:B4:79:69:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/16e040f3-42b1-387b-aca6-5b8efee58de6.roa
Signing time:             Thu 07 Nov 2024 14:00:39 +0000
ROA not before:           Thu 07 Nov 2024 14:00:39 +0000
ROA not after:            Wed 05 Feb 2025 14:00:39 +0000
asID:                     394593
IP address blocks:        2602:f99c:132::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:09:f6:7c:5e:27:b9:dd:1c:49:2f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b
        Validity
            Not Before: Nov  7 14:00:39 2024 GMT
            Not After : Feb  5 14:00:39 2025 GMT
        Subject: CN=0b6bf372-34a5-49f2-8b74-9cf1db665a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:68:97:56:dc:b9:53:87:ec:38:3a:26:fa:e0:
                    23:39:ce:89:3c:8f:0a:ba:76:e8:b1:67:5d:34:9b:
                    b7:c1:fb:f3:5a:8a:6a:4c:38:8e:8e:22:c4:fe:cc:
                    d3:34:f5:90:cc:2d:d1:be:94:24:f5:51:12:0e:16:
                    b9:5f:d6:7e:82:ce:a8:7f:6a:f2:03:6b:9c:ab:83:
                    01:93:4f:1e:cf:f5:bc:50:35:22:49:6f:b9:e4:8e:
                    73:df:32:c7:bf:0d:3a:df:ad:81:79:aa:13:78:07:
                    79:f4:42:81:10:e3:e9:cd:22:08:62:56:a7:8c:09:
                    b7:ee:2e:d1:e7:55:c1:08:e9:fc:cd:b5:49:e3:5a:
                    04:3f:82:f4:6e:f7:3e:d1:68:15:6b:4d:75:62:0c:
                    9f:c7:73:54:49:98:72:11:e9:53:62:72:80:41:95:
                    18:31:f7:b2:0c:d9:b6:3a:65:29:17:84:68:de:8f:
                    23:2a:8e:d1:41:d8:d5:65:ea:11:f9:17:29:ec:ac:
                    40:04:44:28:eb:16:a7:2f:20:4c:e2:78:c0:92:7a:
                    7d:d4:fa:f2:89:04:af:1d:6c:81:d5:54:bf:b6:15:
                    da:f3:7e:f9:31:12:98:87:ae:da:8b:43:4c:fd:2c:
                    60:65:97:8e:85:4c:4f:7c:18:f6:7b:39:32:3e:c5:
                    80:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C2:F3:AA:0B:60:7E:8B:D3:E8:46:31:75:1C:32:05:EC:57:6C:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/16e040f3-42b1-387b-aca6-5b8efee58de6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.crl

            X509v3 Authority Key Identifier:
                keyid:D6:50:41:77:70:B6:91:D2:6F:48:C0:44:1E:81:9A:0C:B4:79:69:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f99c:132::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:76:86:fc:55:9b:c6:af:58:2f:6f:25:c5:8e:c0:54:54:9e:
         87:0e:e0:17:a7:16:e4:c7:97:ad:bf:12:6c:84:17:a6:6f:16:
         0a:dc:55:75:af:28:11:d4:b3:fc:0e:a1:65:da:c0:65:0d:e5:
         81:ba:98:48:1c:e5:ca:f3:de:b4:06:49:c7:a6:9c:16:d6:ac:
         35:d8:02:26:34:5b:15:bf:c4:76:a4:9b:cb:b7:b1:13:90:79:
         9d:65:d4:23:81:c0:99:8d:81:cb:8b:f2:9c:10:bf:1e:83:2d:
         8f:47:c4:d7:38:a4:4a:a8:6d:3d:cf:c3:c2:62:ef:42:93:6a:
         25:0f:b7:94:63:28:17:19:ac:02:89:11:e3:f8:9c:79:ee:24:
         98:45:42:f6:42:2a:85:1f:0a:a4:de:a2:6a:ee:d1:c4:59:22:
         eb:2d:07:6f:dc:43:4d:a4:9a:81:c2:d5:54:0e:ac:87:4a:fb:
         d0:ea:a4:ec:bc:5f:f3:7f:a6:5b:c0:cb:f6:9f:22:32:7d:41:
         ff:7f:60:4d:a5:06:34:ad:2f:69:2b:98:8c:cb:2b:7e:9a:f5:
         00:d5:3a:98:64:ad:d3:fa:db:3b:b4:d1:11:11:2c:f0:22:f7:
         75:54:95:f8:c7:33:2c:3a:b6:8d:49:44:95:6a:c0:50:ba:ad:
         c1:4c:21:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:37 2024 by rpki-client on console-fra.rpki-client.org