Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/1d0ec1b5-ab7d-3cdd-b16c-fbaf52c6c834.roa
File:                     1d0ec1b5-ab7d-3cdd-b16c-fbaf52c6c834.roa (raw, json)
Hash identifier:          KA010Om6rODmYP4SfrgyoXOqev29PUQGOG2WFGqRsxE=
Subject key identifier:   64:BF:DC:38:7E:79:19:84:77:5F:BF:EC:59:2C:2B:13:71:DA:30:3D
Certificate issuer:       /CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd
Certificate serial:       010D0C9F4328584787212C1160ED739A7FD5BE80
Authority key identifier: F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/1d0ec1b5-ab7d-3cdd-b16c-fbaf52c6c834.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     968
IP address blocks:        2602:809:3004::/48 maxlen: 48
                          2602:809:3005::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:2c:11:60:ed:73:9a:7f:d5:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=a9d445a5-5234-4e13-bf41-f3a7660daca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a5:1e:3d:db:1a:67:de:9d:5d:64:b7:f7:50:
                    85:87:4f:a1:4e:e7:41:99:3a:bf:6a:0d:40:44:e3:
                    1e:4c:dd:77:19:20:50:96:6d:b8:3a:02:e8:11:0c:
                    70:fd:e2:65:cd:bb:ec:e5:4d:bf:4a:4f:bc:b5:8d:
                    49:60:30:b1:71:d7:87:76:0b:1c:e5:05:2c:fa:13:
                    0d:d8:f1:19:5c:60:83:0f:24:47:d0:90:67:95:c1:
                    a5:3a:dd:af:a4:03:8b:67:bb:8b:9c:e9:87:0e:8d:
                    e0:3b:a1:af:8b:89:12:5b:90:b4:92:54:70:cb:af:
                    1e:d3:82:02:96:a8:8b:c9:4c:e1:1c:d8:ec:04:2f:
                    7a:0e:8b:cc:af:10:39:6e:34:e1:2d:c2:25:88:c7:
                    15:78:85:64:0a:b6:f6:03:92:e9:26:f1:2a:8f:97:
                    55:1d:83:43:22:db:52:bd:4b:07:a1:10:92:4a:62:
                    90:25:7e:c0:15:9a:6e:62:62:de:e8:83:ca:36:59:
                    68:02:9e:6b:10:42:5e:4d:a3:54:e2:17:98:69:68:
                    9e:87:43:cc:82:9e:2a:4d:1d:03:3f:3d:e9:26:40:
                    9a:3c:85:ad:04:ff:98:c1:09:b0:e3:4c:f8:ea:0b:
                    5b:72:ea:a9:40:e6:f9:78:4c:fb:17:da:95:39:de:
                    85:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BF:DC:38:7E:79:19:84:77:5F:BF:EC:59:2C:2B:13:71:DA:30:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/1d0ec1b5-ab7d-3cdd-b16c-fbaf52c6c834.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.crl

            X509v3 Authority Key Identifier:
                keyid:F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:809:3004::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:4d:0e:c8:b6:ae:01:4d:60:9a:f0:23:13:a9:ac:da:84:b3:
         79:bc:f1:a4:41:9e:15:06:7b:55:86:34:22:cd:ca:e9:9d:44:
         1f:49:ec:53:16:06:0f:86:1a:99:5c:aa:d6:24:58:84:c6:93:
         d7:86:48:71:40:af:3f:5c:58:e0:f8:90:7f:c1:25:02:ff:24:
         82:db:27:82:c9:11:d6:83:37:fe:fc:c4:14:7e:1a:fa:e0:f9:
         3f:90:8f:6a:bb:e2:7a:f8:0c:c3:b4:20:fe:7c:0c:27:6a:79:
         df:08:9a:86:c2:e3:b1:25:57:db:02:26:b7:fd:eb:17:9a:27:
         6f:97:52:8e:e4:9f:1c:ee:e3:de:71:44:54:13:17:a3:3b:a6:
         6f:99:bb:59:6c:60:51:f3:57:87:c0:e1:63:d4:92:80:14:a1:
         28:11:15:8c:ee:c3:ad:b5:76:5a:a5:90:2f:ca:43:1b:5c:59:
         bd:1a:d5:99:77:9c:0c:c2:e6:15:e5:a7:59:e0:16:4c:70:8d:
         01:00:49:f4:23:eb:5b:76:2f:e0:42:49:0d:ed:c0:47:74:a6:
         bc:35:b0:36:a1:29:a4:d1:40:b1:a5:c6:76:a6:39:e3:e1:d7:
         e7:76:3e:57:24:c5:f6:c2:78:f2:0b:60:c1:d2:cb:6c:01:c6:
         06:a8:a3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:26 2024 by rpki-client on console-ams.rpki-client.org