Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/ddaf4074-e338-3a14-a27a-2a6fd89aad7d.roa
File:                     ddaf4074-e338-3a14-a27a-2a6fd89aad7d.roa (raw, json)
Hash identifier:          ndQ+wExysL2P4R13CtQdTZPB3vrLRyMviRtP9r1JRwU=
Subject key identifier:   6F:2C:A3:75:32:A6:77:8A:CD:82:95:32:3C:27:CF:C4:4B:4B:70:C9
Certificate issuer:       /CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
Certificate serial:       010D0C9F43285847EFEF7F8C13E27887335CE400
Authority key identifier: 17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/ddaf4074-e338-3a14-a27a-2a6fd89aad7d.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     398351
IP address blocks:        2602:80a:2000::/48 maxlen: 48
                          2602:80a:2004::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:7f:8c:13:e2:78:87:33:5c:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=51cc1689-843e-45fa-9e1b-c9fbe795d2db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5d:2c:fe:a6:c0:14:fe:1c:2e:ca:6c:37:6e:
                    58:b2:0b:14:aa:04:0b:af:6b:64:c3:58:20:a5:36:
                    ee:96:73:c3:70:25:62:a6:12:5a:0e:7d:48:d0:57:
                    7c:87:d7:d0:dd:1a:5a:09:ba:06:3c:fd:ca:b3:b0:
                    df:d6:0a:b6:83:df:b0:5d:38:98:11:e8:f5:46:21:
                    e3:27:ee:e7:46:ab:ea:b8:b4:81:91:04:c0:d7:ae:
                    79:5c:11:f0:83:d9:4c:28:9f:0c:60:fb:c1:e2:8e:
                    a0:c4:9b:d2:f9:af:dc:d3:55:fd:76:aa:42:a8:a9:
                    3a:cd:20:85:5a:0c:8d:2f:72:ac:98:db:68:c5:30:
                    bb:61:21:58:e6:fc:75:2a:9d:74:94:65:a1:38:0a:
                    a7:a6:75:89:da:91:55:58:b1:d8:a5:a0:b8:88:9e:
                    8f:fa:9e:39:a3:6e:72:24:97:d2:f7:fa:d3:c5:c7:
                    2f:d6:2c:ba:6c:31:99:b9:d2:9c:25:4a:d3:11:ba:
                    ef:dd:65:4b:0a:2b:66:e5:22:f8:23:35:89:52:0a:
                    ab:54:8f:ba:85:91:8f:48:35:2a:0a:a9:e4:19:c0:
                    2e:34:a1:35:16:49:fb:11:ed:b1:75:8a:70:83:cb:
                    88:ef:9e:64:1e:28:14:2c:58:13:22:2f:cd:e7:96:
                    8a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2C:A3:75:32:A6:77:8A:CD:82:95:32:3C:27:CF:C4:4B:4B:70:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/ddaf4074-e338-3a14-a27a-2a6fd89aad7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.crl

            X509v3 Authority Key Identifier:
                keyid:17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80a:2000::/48
                  2602:80a:2004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:6a:c4:d9:41:1f:b8:37:a4:77:4d:7e:88:f3:5b:64:e6:75:
         ff:d8:1d:90:c5:32:c2:10:e5:2a:25:8f:5d:ac:df:81:3e:e5:
         d3:37:be:ae:7a:e7:ed:00:39:d9:5b:39:fa:fe:36:47:d6:6f:
         42:9a:9c:f5:bd:42:55:e0:3b:c1:39:bf:8d:ce:46:d6:5b:d2:
         ff:ee:44:64:3c:cb:b4:fe:68:37:42:4a:cd:73:b2:9c:3d:6e:
         d9:b9:af:ac:86:c0:7c:42:5a:a4:b4:66:09:22:c4:e4:85:28:
         b3:5e:fb:a1:87:a1:d3:b8:8c:2b:38:5d:46:5e:17:b0:87:31:
         a9:2e:02:76:ec:66:48:86:58:a3:1d:2d:e5:c6:7c:fe:6c:0d:
         0f:3a:8e:1a:ea:38:59:22:34:1b:e0:dc:7f:c4:e3:d4:c5:3b:
         1b:6a:a2:98:ec:6a:23:7e:89:b6:47:40:1b:da:fe:0b:41:a2:
         40:ad:6b:68:7f:65:ef:c6:50:c7:53:ac:f8:45:f1:a5:b2:b7:
         e0:58:1e:ab:33:79:6e:eb:ba:7a:19:db:b1:f7:1b:21:dc:36:
         2a:46:9a:f0:0f:f4:fa:87:31:e7:b5:c1:95:3c:79:73:25:76:
         ca:f2:86:90:9a:55:2a:07:f0:a9:21:fc:bd:59:47:d5:92:23:
         f9:d8:1d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:50 2024 by rpki-client on console-fra.rpki-client.org