Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e915fc0b-b44d-42fb-82c5-34cb016b9f56/1234b749-f39e-390e-8d4d-9ae37b918e11.roa
File:                     1234b749-f39e-390e-8d4d-9ae37b918e11.roa (raw, json)
Hash identifier:          VdKwlvadcjRLB0dv287z+WUe7M1zcoWCr7J5tlO6YS0=
Subject key identifier:   22:D1:A7:3B:E4:56:D0:54:18:E8:03:16:87:16:B9:0C:94:37:6E:10
Certificate issuer:       /CN=e915fc0b-b44d-42fb-82c5-34cb016b9f56
Certificate serial:       010D0C9F432858472835F76CC9EFC14E5799A400
Authority key identifier: D3:8C:1F:6A:7A:A4:A7:2E:66:59:5B:71:90:3D:3C:76:1E:EE:B8:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e915fc0b-b44d-42fb-82c5-34cb016b9f56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e915fc0b-b44d-42fb-82c5-34cb016b9f56/1234b749-f39e-390e-8d4d-9ae37b918e11.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     15167
IP address blocks:        2602:f892::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e915fc0b-b44d-42fb-82c5-34cb016b9f56/e915fc0b-b44d-42fb-82c5-34cb016b9f56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e915fc0b-b44d-42fb-82c5-34cb016b9f56/e915fc0b-b44d-42fb-82c5-34cb016b9f56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e915fc0b-b44d-42fb-82c5-34cb016b9f56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:f7:6c:c9:ef:c1:4e:57:99:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e915fc0b-b44d-42fb-82c5-34cb016b9f56
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=f338803c-bc98-4c0a-8432-e00b2a094186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:87:20:dc:49:0f:7b:bf:18:ce:4d:da:e5:e3:
                    4e:0a:83:19:7e:a2:0d:3a:b8:39:4a:3f:c3:0d:d5:
                    ba:19:46:98:32:94:da:22:35:e9:9d:f1:12:d9:8b:
                    66:2c:71:04:88:34:cc:8b:01:31:e6:ee:b6:d1:af:
                    1d:08:47:a3:1b:4e:6d:eb:d6:c1:12:1d:d6:32:48:
                    c6:b4:83:77:e5:63:1d:f8:e5:b7:b0:6d:48:c6:6e:
                    87:3b:0c:d5:03:20:96:2f:21:db:be:fb:59:d3:23:
                    fd:9a:e8:08:7d:4d:01:d6:45:0b:8f:42:e5:03:a1:
                    93:ac:da:b8:f3:0c:20:16:be:a6:c8:1a:33:d4:23:
                    cc:f2:81:0e:7e:8c:c6:84:27:2a:ab:53:1c:6f:cf:
                    8b:a5:df:ea:89:7c:50:92:77:24:94:17:4a:db:d0:
                    0a:51:b2:26:45:a8:37:09:e9:e0:6a:79:0b:20:5c:
                    ca:a7:d9:c1:d5:fa:7b:19:dc:07:bf:fe:08:e9:de:
                    07:f6:2f:57:65:41:23:de:53:b3:cc:dd:1d:73:ff:
                    93:44:f1:4b:95:db:4b:64:35:9c:b5:a2:c0:8e:7c:
                    83:cb:02:8f:70:cf:86:ab:71:1b:75:a4:81:a1:41:
                    c7:f4:68:8d:4c:03:92:4e:49:32:69:24:11:56:b5:
                    5d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D1:A7:3B:E4:56:D0:54:18:E8:03:16:87:16:B9:0C:94:37:6E:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e915fc0b-b44d-42fb-82c5-34cb016b9f56/1234b749-f39e-390e-8d4d-9ae37b918e11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e915fc0b-b44d-42fb-82c5-34cb016b9f56/e915fc0b-b44d-42fb-82c5-34cb016b9f56.crl

            X509v3 Authority Key Identifier:
                keyid:D3:8C:1F:6A:7A:A4:A7:2E:66:59:5B:71:90:3D:3C:76:1E:EE:B8:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e915fc0b-b44d-42fb-82c5-34cb016b9f56.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f892::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:6c:c1:35:60:37:3c:bf:bd:70:0c:e1:93:86:ff:4b:8c:dd:
         79:c5:7c:4c:d9:9a:21:5a:af:7b:a9:7e:29:49:61:04:f9:18:
         fc:2e:f1:17:c0:db:d9:16:fc:8a:14:4b:5e:f9:05:81:df:74:
         00:48:c4:f9:f4:6f:1b:7d:49:4c:96:00:ba:b6:59:41:2c:7b:
         ae:8d:66:8f:86:e8:bd:2e:22:a8:bb:48:8e:14:e2:4b:c7:72:
         9a:a3:48:63:a0:b2:c3:b7:89:c4:5e:dd:39:b7:df:41:86:ca:
         20:8a:f8:b0:e5:d0:8a:04:be:3c:74:8c:87:24:0d:40:4c:1b:
         1a:3b:c5:0b:c4:d2:14:79:b4:5e:68:d8:63:bb:d6:47:38:64:
         74:de:44:1b:33:4e:3d:88:da:af:57:8c:6c:9e:c4:93:a2:48:
         44:fc:1a:14:b6:b9:49:b8:32:b3:b9:11:04:f7:77:3c:27:ad:
         3a:18:4f:8e:e0:35:93:0c:c3:ae:4c:fe:be:00:bb:75:2b:77:
         f4:02:95:7b:e8:2a:42:ac:eb:2d:be:13:97:45:b4:d6:58:96:
         d9:25:6a:ea:d2:78:96:5b:64:4c:32:a8:b3:98:ec:e8:44:e7:
         96:52:56:d9:ab:a1:86:8e:50:14:3c:94:0c:f4:bb:7f:85:9b:
         8e:7c:a1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:04:46 2024 by rpki-client on console-fra.rpki-client.org