Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/929be35f-0efb-321f-af4a-6c741b1411cc.roa
File:                     929be35f-0efb-321f-af4a-6c741b1411cc.roa (raw, json)
Hash identifier:          wY71Q9FSf+YgqP7DNcE1iyhiqohzhG/o4VTQ6/EjyAs=
Subject key identifier:   1A:C7:38:3B:BB:53:91:B5:0C:74:82:A2:C0:45:8F:18:B4:A9:41:90
Certificate issuer:       /CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
Certificate serial:       010D0C9F432858471BA5AA6A823D6544C200CA00
Authority key identifier: BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/929be35f-0efb-321f-af4a-6c741b1411cc.roa
Signing time:             Thu 05 Sep 2024 01:00:30 +0000
ROA not before:           Thu 05 Sep 2024 01:00:30 +0000
ROA not after:            Wed 04 Dec 2024 02:00:30 +0000
asID:                     62788
IP address blocks:        2602:fd23:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1b:a5:aa:6a:82:3d:65:44:c2:00:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
        Validity
            Not Before: Sep  5 01:00:30 2024 GMT
            Not After : Dec  4 02:00:30 2024 GMT
        Subject: CN=c8ade810-c112-4060-a7ab-c47fe015e3c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1d:7b:3a:16:1c:38:4a:57:e9:c4:42:e8:8a:
                    7c:09:f7:bb:e4:e1:39:9f:df:9f:05:c7:03:d2:29:
                    31:85:8c:4f:64:c1:25:a8:79:65:58:67:1e:d2:94:
                    8d:c0:11:f6:30:75:87:a1:a4:8f:bb:5c:66:fd:9a:
                    3c:4e:c0:da:54:45:3b:a9:72:d5:1f:f1:64:14:b9:
                    4b:88:22:77:65:72:d0:84:0a:14:ad:b0:12:b6:a2:
                    f2:df:f3:0d:3a:77:89:dd:35:43:43:08:3c:b3:18:
                    b3:6e:df:da:a9:49:d3:3d:54:18:4a:b7:c8:47:46:
                    0d:e9:fa:ce:46:e8:ab:e7:72:e0:97:af:5b:4f:aa:
                    ec:7c:35:4f:94:68:1d:ff:a4:6e:16:21:0b:73:49:
                    0b:db:ae:d9:76:59:f5:71:54:9a:57:bf:1c:73:4a:
                    64:66:50:d9:a1:0d:06:ae:1d:13:c4:78:1b:98:d4:
                    2e:e1:a0:24:9a:26:8f:d8:24:7a:84:e1:c6:59:4f:
                    5e:0c:64:3f:c6:4f:25:9d:a8:86:f4:aa:97:1c:05:
                    af:d5:a4:64:d2:db:96:bf:95:61:63:33:8e:5e:a5:
                    7a:e0:b4:d8:39:d0:b7:80:9d:02:68:7d:8f:45:89:
                    86:10:b4:f2:87:96:db:fa:d5:54:50:48:01:1b:ca:
                    31:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C7:38:3B:BB:53:91:B5:0C:74:82:A2:C0:45:8F:18:B4:A9:41:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/929be35f-0efb-321f-af4a-6c741b1411cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl

            X509v3 Authority Key Identifier:
                keyid:BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd23:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:35:89:72:5b:3e:97:6e:48:75:e5:c5:6b:3e:b8:11:be:a3:
         38:22:f3:ec:08:9b:6c:40:a2:0c:25:09:ff:53:c8:15:0b:34:
         7d:2a:4b:73:53:90:24:d7:4d:9a:2d:d6:88:de:79:b2:4f:5a:
         b3:6e:8d:fa:c4:ee:78:73:c6:d6:67:16:f8:43:c4:96:fb:d3:
         17:02:11:63:c4:8a:93:74:a6:d3:bf:49:92:e7:76:9d:7d:d0:
         49:b4:2d:16:ef:84:21:a5:ef:ee:c9:9f:f2:70:2d:af:44:87:
         b9:ad:ca:a3:87:66:5b:82:8d:c1:54:c1:23:22:59:b3:d4:e0:
         ea:d8:ec:53:b4:25:c8:fa:c0:b6:69:c3:e7:b5:eb:73:25:76:
         6c:38:53:1e:b2:82:a2:96:6a:e4:af:3a:9f:19:40:05:8a:a9:
         d7:53:92:89:ac:98:43:ac:de:17:17:9e:3c:6c:df:4d:e0:d6:
         9f:71:f7:2d:3e:ad:29:8e:24:7e:78:32:c9:cf:20:a2:0b:81:
         bf:42:b5:e4:19:b7:14:2e:d2:bb:22:e9:17:f0:c6:77:30:f5:
         06:18:97:06:a7:d1:ff:b9:a4:68:c6:e1:df:f9:7b:91:f0:72:
         37:a2:2c:8e:4e:f5:3f:f2:61:27:95:34:33:c0:16:97:97:ce:
         18:84:42:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:21 2024 by rpki-client on console-fra.rpki-client.org