Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/3d3b872a-6456-3cf2-9c9f-b5b3162691e5.roa
File:                     3d3b872a-6456-3cf2-9c9f-b5b3162691e5.roa (raw, json)
Hash identifier:          LEXFvfyJ9aw29yyxnEXAN3BMpHnWGn/PWSpNMPm3TIg=
Subject key identifier:   4E:45:92:8A:CD:1D:94:01:23:61:B1:02:AE:C0:61:73:77:46:F7:44
Certificate issuer:       /CN=dcf7f6fb-0bae-4c21-bcf2-2f998541db3f
Certificate serial:       010D0C9F432858477A90E95B5030CB3C36DEF160
Authority key identifier: CC:2F:9D:6D:CC:B6:1C:CE:1E:E3:50:39:63:91:EA:63:D1:8F:B8:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/3d3b872a-6456-3cf2-9c9f-b5b3162691e5.roa
Signing time:             Wed 09 Oct 2024 01:00:31 +0000
ROA not before:           Wed 09 Oct 2024 01:00:31 +0000
ROA not after:            Tue 07 Jan 2025 02:00:31 +0000
asID:                     400701
IP address blocks:        2602:fb74::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7a:90:e9:5b:50:30:cb:3c:36:de:f1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf7f6fb-0bae-4c21-bcf2-2f998541db3f
        Validity
            Not Before: Oct  9 01:00:31 2024 GMT
            Not After : Jan  7 02:00:31 2025 GMT
        Subject: CN=9ed28152-9d67-4a32-9644-8272db2e2fa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:44:38:e3:05:5c:46:3e:68:cd:67:07:a6:65:
                    6e:51:dd:e3:0d:42:ca:e3:df:cf:5c:ec:c9:9c:2d:
                    a5:46:da:8c:e7:a3:cf:aa:ae:20:db:07:cb:60:95:
                    2b:ef:f2:90:3a:5b:18:50:6d:87:8c:95:f9:4a:36:
                    5c:39:22:7a:9a:5c:ae:63:20:38:e3:ad:80:73:48:
                    ea:4c:b6:02:dc:40:87:87:b1:89:44:25:62:70:bc:
                    52:f7:ef:9f:75:56:c6:9f:73:53:04:76:77:95:ce:
                    09:61:76:d7:e6:b6:49:a7:57:20:d4:73:c8:e9:9f:
                    05:19:ab:b5:20:4c:8f:d7:a4:97:e2:c5:1f:70:a5:
                    1c:b9:8d:25:3b:7b:60:3f:7f:70:d4:87:62:32:7e:
                    f8:8f:5e:59:5f:8d:0e:cf:0d:5a:33:b2:01:5a:af:
                    73:4b:5c:2e:65:4a:2d:91:0c:a1:b7:d6:de:6c:9a:
                    30:0e:ed:08:2b:c9:d2:d5:59:3f:21:95:f7:af:ff:
                    b3:5f:e4:26:e5:84:a0:ac:fd:7e:e1:1a:5c:b7:53:
                    17:46:4a:9e:f9:98:c7:3b:b5:8d:67:73:3d:52:e7:
                    b6:96:da:5d:49:4c:9c:33:ba:27:ce:77:e3:76:d0:
                    95:2c:29:d7:f2:de:22:2f:96:df:47:05:3d:eb:c4:
                    2d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:45:92:8A:CD:1D:94:01:23:61:B1:02:AE:C0:61:73:77:46:F7:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/3d3b872a-6456-3cf2-9c9f-b5b3162691e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.crl

            X509v3 Authority Key Identifier:
                keyid:CC:2F:9D:6D:CC:B6:1C:CE:1E:E3:50:39:63:91:EA:63:D1:8F:B8:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb74::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:0e:e9:64:d2:58:2e:a5:8b:45:84:09:42:bd:7f:85:d5:61:
         0b:88:c1:c9:a0:19:7d:42:28:f5:cd:e1:c1:d4:e7:c2:f1:fe:
         12:62:ff:b4:ca:eb:0a:fa:d0:22:a9:30:a5:02:a2:fb:94:05:
         32:de:9f:ce:6a:a0:0b:b8:12:07:d2:34:a5:a9:cf:b6:03:bc:
         c4:52:6c:f5:8f:5b:70:10:0c:16:8b:4e:a7:f5:ce:46:39:8d:
         c9:ec:ff:c0:39:ef:b3:f6:0a:cd:d0:89:2d:d4:df:db:3f:38:
         0d:f4:eb:23:c5:af:b6:01:ee:77:89:01:68:c3:be:f9:88:dd:
         6e:b2:28:d0:73:96:b8:74:84:b6:cc:2e:ea:fc:e1:60:81:03:
         da:e3:8f:af:bf:01:95:a0:b9:0c:f5:ff:70:44:ba:d6:b3:43:
         fb:df:31:43:a8:8e:88:24:c1:cd:85:80:d7:10:5f:07:10:be:
         e4:5c:aa:75:0a:71:0f:08:61:ca:29:ce:ea:8c:f7:cd:f0:81:
         bc:81:3c:56:8e:fb:5c:3a:1b:b3:cd:44:3d:80:9a:d3:8c:72:
         d2:b5:4c:e3:ef:9b:bd:65:6a:21:3b:df:f1:cb:46:02:58:d7:
         c6:cc:8b:e1:cc:63:fa:d1:86:36:93:26:2f:f1:44:12:98:1e:
         27:d7:f7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:26:30 2024 by rpki-client on console-ams.rpki-client.org