Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/8772ccd6-b189-3648-86b4-02b297d28b4d.roa
File:                     8772ccd6-b189-3648-86b4-02b297d28b4d.roa (raw, json)
Hash identifier:          7iu/uhe72dKuvqxTf5mNJ0CJPNbNoROWYdSBiFcCo5I=
Subject key identifier:   43:34:FC:A3:EF:3D:D0:DA:E1:43:70:37:79:C6:CC:40:AC:FE:3D:10
Certificate issuer:       /CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
Certificate serial:       010D0C9F432858473D25E1EC17E020D9E00B41C0
Authority key identifier: BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/8772ccd6-b189-3648-86b4-02b297d28b4d.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     19168
IP address blocks:        2602:fd23:9::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:e1:ec:17:e0:20:d9:e0:0b:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=1ec6023a-bc0c-489c-b8e2-bee16bd64c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:14:10:7e:1c:88:6b:a3:8c:fe:8d:3b:de:43:
                    24:7a:71:1d:59:84:dc:f8:38:e6:9f:ff:7a:4e:be:
                    67:3c:95:61:91:05:3a:4f:47:71:cd:3e:3b:17:06:
                    28:5b:53:45:65:8b:24:7f:f2:2d:26:16:c8:70:37:
                    e7:e7:73:20:d6:9b:ce:1e:1e:eb:b0:5c:a5:0b:b6:
                    3a:48:ff:ec:29:be:5a:e6:a2:16:bb:f5:84:c8:b1:
                    93:d2:97:d8:f6:48:72:38:d7:92:75:ec:20:12:ac:
                    a1:be:c4:de:16:a0:5e:d7:da:42:c5:0d:84:93:a8:
                    a0:dd:9a:96:46:3c:da:a2:44:96:0d:60:ae:9b:81:
                    24:4e:d8:47:33:5d:bb:d4:59:60:b5:e6:ee:24:e6:
                    6f:e2:4a:b1:f8:3d:7c:54:16:39:10:ef:3a:ad:3a:
                    1c:c9:33:8e:0c:c6:80:fc:f9:da:65:7b:d0:3d:f4:
                    b7:5b:18:30:59:36:f3:c2:c4:dd:25:2d:2a:68:fd:
                    ce:b0:9f:d3:7d:d3:dc:4c:62:09:a3:be:ec:90:7a:
                    d2:e4:6f:80:30:50:7a:04:cc:44:59:c0:96:b6:b5:
                    fd:d7:26:fd:59:b1:4a:4c:09:67:58:fc:b4:ac:a9:
                    a5:80:8a:9e:ec:f4:15:94:71:f6:5d:5e:47:95:d7:
                    70:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:34:FC:A3:EF:3D:D0:DA:E1:43:70:37:79:C6:CC:40:AC:FE:3D:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/8772ccd6-b189-3648-86b4-02b297d28b4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl

            X509v3 Authority Key Identifier:
                keyid:BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd23:9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:4b:db:b7:29:fa:b1:e6:f9:e8:62:04:5a:7f:f8:b3:7b:07:
         b5:66:cc:da:12:00:d1:18:1b:d2:41:81:0a:1f:42:76:01:59:
         e7:69:22:30:9a:a7:34:e2:bb:ca:0e:ac:22:9e:6d:ba:71:2b:
         33:ee:5a:02:47:5e:3e:29:a3:29:14:15:4c:51:e5:94:22:1d:
         ce:cc:1d:4a:ad:98:19:5d:e7:2e:39:9a:f4:1c:b8:77:b4:34:
         38:4a:47:36:b3:af:19:a3:4b:e2:b0:61:a5:d5:5d:fb:c6:2b:
         72:5c:36:a0:db:d7:12:47:94:a5:d8:92:2b:90:2d:93:7e:ed:
         8a:eb:6c:a6:5b:84:31:66:a1:99:ea:cb:9e:53:28:46:6a:7b:
         ad:e8:12:21:6a:e0:68:54:2e:cc:d2:d4:eb:9f:a6:bc:39:20:
         aa:53:98:bb:00:8d:b8:d8:c0:6c:b9:ab:af:28:61:1d:68:29:
         bf:81:b1:2c:ea:ec:4a:90:31:7e:05:de:3d:fc:89:fc:6a:86:
         9f:72:18:9a:a0:6b:ee:92:1d:90:6f:93:22:98:52:a8:79:d3:
         b0:58:14:74:49:84:a0:c7:9b:c0:ee:63:b9:11:ab:f6:39:cf:
         b2:62:33:85:b8:b5:38:da:a6:81:36:aa:94:4e:6e:ce:87:be:
         d3:bc:8b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:04 2024 by rpki-client on console-ams.rpki-client.org