Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/833224cb-bd10-31f7-b89a-5dd938893e65.roa
File:                     833224cb-bd10-31f7-b89a-5dd938893e65.roa (raw, json)
Hash identifier:          BzQMj75wIvBQWdUxx0Q6+h3fah6GUcFS352eEpS8uDU=
Subject key identifier:   4E:97:0D:10:7B:3F:6F:AF:6D:66:56:B0:E2:7A:F4:DA:79:17:18:E2
Certificate issuer:       /CN=d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b
Certificate serial:       010D0C9F43285847ED24E146177836B5BDCDB380
Authority key identifier: D6:50:41:77:70:B6:91:D2:6F:48:C0:44:1E:81:9A:0C:B4:79:69:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/833224cb-bd10-31f7-b89a-5dd938893e65.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     394593
IP address blocks:        2602:f99c:300::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:e1:46:17:78:36:b5:bd:cd:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=e310f196-5881-429f-9993-7a06a7e7f690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e7:46:39:5c:b4:09:9f:0b:ee:84:dd:61:19:
                    ba:90:31:8e:2f:4d:97:1e:29:2c:04:02:dc:cb:36:
                    68:d0:c2:6b:a4:22:fe:3b:c7:7e:cf:6d:e1:1f:93:
                    95:77:63:2a:f5:57:2a:c9:9d:c5:74:31:5d:d8:c4:
                    96:4c:c3:51:7e:93:cd:47:17:76:e3:7b:b9:c5:1a:
                    5c:ca:51:57:e0:b2:49:45:16:a0:fd:75:88:87:0c:
                    78:3e:7e:65:08:85:6d:6f:d8:68:b6:7b:bf:b0:e0:
                    b5:ec:64:78:6d:9e:b8:f3:79:6a:a8:0c:59:a8:3a:
                    9f:4f:2e:8c:90:b9:ab:48:bd:46:a2:66:4f:fe:59:
                    a3:b0:0f:c2:34:86:6f:44:72:07:a0:a8:a0:e5:0d:
                    87:0e:fe:9d:85:54:11:a4:a4:90:1c:cc:97:fd:1b:
                    7f:1b:78:01:b5:1d:64:7e:7e:14:f6:66:c4:53:8a:
                    2c:06:d4:df:2c:b9:04:44:bc:bf:ab:64:dc:bd:1f:
                    33:4c:f3:6b:98:c2:c6:e8:b7:46:ad:de:b2:64:a1:
                    4e:4c:3f:42:10:10:ed:9f:fd:4a:83:83:37:60:56:
                    3a:00:5a:d9:73:33:a2:36:e1:2c:d0:a9:03:10:b0:
                    1b:f3:68:e9:c7:15:0a:ab:ac:70:5b:11:d9:6a:93:
                    2a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:97:0D:10:7B:3F:6F:AF:6D:66:56:B0:E2:7A:F4:DA:79:17:18:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/833224cb-bd10-31f7-b89a-5dd938893e65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.crl

            X509v3 Authority Key Identifier:
                keyid:D6:50:41:77:70:B6:91:D2:6F:48:C0:44:1E:81:9A:0C:B4:79:69:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f99c:300::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:80:f5:0b:d3:6f:48:9d:e4:fa:12:d4:4f:e0:37:b3:7b:3d:
         3c:fb:a2:07:ff:c2:51:f0:d0:44:a7:27:45:c2:6f:16:bc:0e:
         db:4a:32:24:e7:56:2a:d0:8b:56:82:d5:cf:d7:98:a6:40:8b:
         03:5f:8c:b2:d9:05:81:c0:cb:b0:60:66:67:a9:2a:ab:f9:d0:
         ad:98:55:6e:a9:a7:af:ba:1f:d6:59:ef:a7:d9:c6:8f:64:27:
         60:cc:39:0d:4a:0f:09:2b:19:23:a0:d5:cf:8f:66:6a:69:68:
         77:66:ce:1b:86:4e:86:d4:a7:fa:30:73:e9:f9:a0:e5:3f:a3:
         66:c1:e5:b7:5a:fa:ce:77:ec:e8:8e:af:13:d6:4a:b3:7d:fe:
         18:44:4b:c7:b6:6d:94:ed:0d:4b:e3:e8:a6:e2:27:49:fd:c5:
         45:d3:2d:9c:c0:c0:aa:2c:db:0b:24:b0:cf:c9:f1:ce:10:99:
         0d:04:f2:4d:47:0b:87:0a:21:c4:4f:98:e2:bf:2c:5a:46:05:
         79:ed:93:6d:76:72:0a:b5:84:af:23:2e:24:c3:87:85:70:ea:
         39:0c:cb:81:ca:a5:7d:67:84:50:0c:1f:87:23:60:54:ba:20:
         c5:01:3a:fa:ba:d2:a0:68:cf:8f:10:f1:bf:63:a8:3e:05:68:
         e4:a5:89:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:19 2024 by rpki-client on console-ams.rpki-client.org