Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/cf5f89dc-ceb5-3af6-867b-718ba7631f97.roa
File:                     cf5f89dc-ceb5-3af6-867b-718ba7631f97.roa (raw, json)
Hash identifier:          hJVRIRDtf9TrxL8xRj/SwdyJxeKmMjhGfT3kklnL1AE=
Subject key identifier:   94:A7:E3:26:5F:54:A3:1C:47:8D:02:A7:90:C9:C1:C8:C0:0E:B1:C1
Certificate issuer:       /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial:       010D0C9F43285847BEF6D43889C142594D119C80
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/cf5f89dc-ceb5-3af6-867b-718ba7631f97.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     398722
IP address blocks:        2602:80d:1003::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f6:d4:38:89:c1:42:59:4d:11:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=574730cb-6d20-4241-969b-3746baf04de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1a:c5:2d:0a:66:01:75:fa:5b:a1:94:5c:d8:
                    95:5e:60:d2:4b:eb:c7:5c:24:90:5a:15:a0:2d:9d:
                    fd:15:ef:02:1d:ba:bb:25:41:ae:dd:7e:b0:0c:35:
                    9b:12:f8:6b:a4:95:3d:4a:98:11:47:7c:ec:c2:b3:
                    fe:e6:76:2b:e8:12:08:c5:c0:e3:59:f5:06:2e:7f:
                    7a:9e:1b:6f:b9:0e:54:41:5f:7c:6d:f5:e9:e8:01:
                    ab:3d:e0:7e:e2:b1:57:52:93:38:bf:9a:56:c8:f2:
                    41:1a:82:8d:c0:f4:29:4b:38:54:e7:1b:5a:7e:c1:
                    fc:2e:d9:f5:0a:bf:40:dc:18:67:4c:63:ea:2c:5d:
                    5d:36:5c:2b:31:48:32:d1:00:46:20:87:ee:e4:02:
                    27:59:d3:65:7c:e0:86:db:c3:be:67:69:55:5f:f2:
                    3a:75:d0:64:86:57:20:a6:9b:18:47:11:71:77:71:
                    cc:82:c1:c4:dd:14:7a:4f:52:ae:bc:9d:ac:ea:c1:
                    7d:ae:4b:a3:a5:a6:35:e8:28:63:83:aa:ff:ba:06:
                    77:5d:94:88:3f:4e:e5:d5:d7:5a:dd:55:51:fc:d4:
                    97:d2:44:23:98:6d:d0:56:dd:c8:e8:90:71:53:b3:
                    70:07:ef:6c:c4:43:52:a9:02:15:20:98:16:1c:c6:
                    aa:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A7:E3:26:5F:54:A3:1C:47:8D:02:A7:90:C9:C1:C8:C0:0E:B1:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/cf5f89dc-ceb5-3af6-867b-718ba7631f97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl

            X509v3 Authority Key Identifier:
                keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80d:1003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:25:27:cf:15:54:14:9b:5d:22:d1:19:a3:07:29:52:b2:e1:
         f8:7b:02:62:bd:55:be:0b:a9:aa:a5:8d:82:ef:b1:ec:46:18:
         57:03:05:99:b3:77:0e:27:25:c4:90:a3:50:35:0b:e1:bf:ab:
         48:e3:d7:de:8a:6f:1a:8b:23:c2:dd:6a:d8:b0:da:eb:97:23:
         e9:8f:d7:b4:ec:43:f1:cb:46:34:76:64:04:d4:93:65:b5:ea:
         33:c8:2a:14:f2:f3:f2:f3:bb:e0:47:f1:b3:b5:70:63:11:1f:
         e0:89:80:cd:85:70:d8:77:cd:ea:a7:92:51:67:2e:f0:d7:70:
         6f:fc:64:dd:4c:ee:11:e3:72:59:6a:96:b7:5b:46:83:67:4f:
         05:ef:4e:fe:cf:b8:c5:5d:f9:e9:4f:18:2d:57:5a:af:63:39:
         30:84:ba:00:3d:9a:13:6f:44:81:02:6d:ad:cb:60:b6:11:8e:
         f6:37:d3:d2:a8:e6:fa:ba:20:d0:67:d6:39:44:93:cc:2a:f2:
         44:e7:83:24:57:41:00:46:4b:e5:55:ba:cb:58:e2:e4:8c:cf:
         7d:67:3c:b1:33:d8:82:7d:31:cc:38:3f:72:e2:dd:d5:e0:89:
         55:d0:9b:05:2a:e9:0a:fd:58:78:55:15:79:a6:30:5f:83:0b:
         4b:f5:c0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:08:12 2024 by rpki-client on console-ams.rpki-client.org