Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/87582fa4-4015-397c-8616-39c9295f4e55.roa
File:                     87582fa4-4015-397c-8616-39c9295f4e55.roa (raw, json)
Hash identifier:          4VZR25Y4PFbkYxmTPxL7loNt5CNjbLytlSiGfWUYhoE=
Subject key identifier:   92:B5:4D:90:CF:E2:57:AE:59:56:60:30:EF:74:58:9C:96:43:97:D8
Certificate issuer:       /CN=1dc547da-42a0-43ba-8d2f-21375737b95b
Certificate serial:       010D0C9F43285847CFD4D800C6D53E7D8C552840
Authority key identifier: 3D:D1:56:24:51:80:75:49:07:1A:A3:C1:39:9B:01:4F:04:D1:CF:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/87582fa4-4015-397c-8616-39c9295f4e55.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     150698
IP address blocks:        2602:f9ca:300::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/1dc547da-42a0-43ba-8d2f-21375737b95b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/1dc547da-42a0-43ba-8d2f-21375737b95b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:d8:00:c6:d5:3e:7d:8c:55:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dc547da-42a0-43ba-8d2f-21375737b95b
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=4fa5511b-dd5d-48d3-bfac-0e9c1e3e674b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:da:08:52:40:aa:6f:18:f9:52:41:f3:fa:c4:
                    b0:60:f4:18:04:b3:2c:9b:f9:77:d8:81:e8:ff:1c:
                    8b:52:28:ff:48:a5:d4:ac:5f:70:13:42:8c:16:8b:
                    fe:33:3e:ba:77:23:a1:9c:ca:fe:d7:d5:19:d4:92:
                    f7:de:fa:9f:f7:13:47:7b:66:78:26:11:cf:49:38:
                    2f:12:b2:ae:a3:e0:bd:42:6a:3e:c4:9a:c2:f5:34:
                    1d:35:46:56:5b:ee:f6:1b:e3:51:34:20:26:d8:a1:
                    f6:b1:37:c9:46:e2:94:73:7f:2d:ad:c2:26:4b:b5:
                    1f:a8:f2:c0:80:d0:a2:21:23:18:ea:1a:3d:dd:81:
                    5d:6a:39:4b:d1:c3:04:67:70:75:43:91:57:33:5c:
                    af:e7:b0:c6:bf:ac:0c:ef:c3:e6:b1:28:e5:99:2e:
                    8f:2c:e5:8d:32:f7:89:2a:41:9a:19:0f:e7:8d:99:
                    47:fc:0f:03:f7:10:db:a5:10:3e:05:2c:0c:22:f1:
                    86:76:64:07:3b:4f:43:81:dc:b1:b5:38:4a:be:57:
                    a4:05:b2:ab:b7:27:a6:30:35:f1:ef:78:0f:fb:9b:
                    0b:fb:96:17:06:1f:ef:4e:c4:10:79:d3:c5:11:80:
                    7b:fe:f7:e1:e8:ff:b9:66:28:d4:fa:87:6a:65:1c:
                    ad:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B5:4D:90:CF:E2:57:AE:59:56:60:30:EF:74:58:9C:96:43:97:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/87582fa4-4015-397c-8616-39c9295f4e55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/1dc547da-42a0-43ba-8d2f-21375737b95b.crl

            X509v3 Authority Key Identifier:
                keyid:3D:D1:56:24:51:80:75:49:07:1A:A3:C1:39:9B:01:4F:04:D1:CF:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ca:300::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:ec:bd:ba:4c:03:3e:a6:8c:a0:c2:ea:27:6d:31:76:f5:5f:
         b4:94:43:54:83:75:1d:d3:bf:6d:6a:98:78:78:2b:f8:4c:5c:
         67:85:d3:c6:64:aa:df:c0:f9:ce:98:01:1a:dd:dd:0a:2b:46:
         eb:22:ab:32:35:3a:99:d6:3c:83:6c:08:57:b4:bf:d8:68:8c:
         a0:3e:f8:c7:62:07:c5:b5:22:dd:f9:00:a5:31:09:d4:70:17:
         4e:4c:99:92:38:52:80:9f:a4:bf:1d:42:54:ee:ba:39:60:eb:
         fa:8f:eb:34:93:c1:63:d4:2b:e4:48:47:40:35:4c:03:14:74:
         ae:6e:be:35:fc:ab:e5:35:85:e7:f1:97:8f:e4:b7:17:c1:71:
         0d:6c:ab:8c:56:02:f3:46:4b:69:61:e8:c2:c5:6e:4c:eb:38:
         78:96:30:18:2a:76:27:f6:64:cb:8d:44:6b:b7:ea:98:e5:c8:
         89:e9:13:96:85:b6:c4:c4:1f:1d:07:83:c1:59:1c:0e:c2:9b:
         43:58:de:93:6f:ad:79:75:cd:0d:16:7e:99:b4:b5:f6:fb:da:
         13:eb:f1:c5:19:d4:01:1b:3f:8b:23:40:a2:88:b2:29:ae:b9:
         94:d3:a3:e0:a6:ce:b1:1a:f6:c2:78:b3:61:75:14:d0:35:a6:
         45:04:9e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:20 2024 by rpki-client on console-ams.rpki-client.org