Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/354f8722-5971-39a2-98d9-1365e96b2ead.roa
File:                     354f8722-5971-39a2-98d9-1365e96b2ead.roa (raw, json)
Hash identifier:          7BjkS5yAcozZK2W6/Whqft/Z1SttlMH22VPOv5BIMEY=
Subject key identifier:   9F:3E:54:A0:CA:B1:FE:19:57:D6:06:37:F3:4F:70:7F:78:D9:5C:70
Certificate issuer:       /CN=d9d41cd5-6bda-4d2b-aff4-b89893aa1531
Certificate serial:       010D0C9F43285847A30BF2333B18DAAF96026380
Authority key identifier: 84:75:FD:0B:B1:EC:65:B3:FC:1D:85:04:A8:6C:38:DC:C4:CD:AD:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/354f8722-5971-39a2-98d9-1365e96b2ead.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        2602:fd12::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0b:f2:33:3b:18:da:af:96:02:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d41cd5-6bda-4d2b-aff4-b89893aa1531
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=fded3085-5737-4820-836c-3fca0c394d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:67:74:ae:e2:c1:b3:0e:e0:f5:20:3f:2f:9f:
                    fe:f5:33:43:35:35:35:19:de:7a:26:be:a8:a7:c0:
                    c2:71:60:01:6b:43:04:e6:86:ef:a7:d6:f5:4c:0f:
                    16:85:15:ae:1f:07:68:20:10:8c:5d:bd:fd:a8:ef:
                    2a:45:5c:4b:d0:38:09:b2:1a:c0:f1:9b:30:3d:95:
                    99:aa:46:04:ca:f8:10:5a:21:ca:f7:a4:8b:76:28:
                    ab:fb:cf:a7:ff:36:bb:17:71:7c:9a:4f:a6:2f:27:
                    06:19:7c:17:37:00:11:86:03:86:f8:cf:04:85:68:
                    da:9e:d4:6e:e1:d1:7c:f6:ad:c4:c0:c8:98:39:58:
                    94:29:e3:3f:4b:21:a3:6f:2a:9d:88:20:65:20:82:
                    11:de:66:94:ac:62:82:d9:1d:51:88:4e:ff:0c:58:
                    4d:93:d9:28:14:13:1f:4c:13:51:7d:29:46:92:24:
                    b6:d2:21:ac:44:f5:53:14:54:be:dd:5f:24:ed:69:
                    dd:a2:e7:98:f1:96:6b:a0:34:74:a3:d2:dc:bd:0c:
                    32:8e:e8:54:5e:e9:80:c1:ae:43:5a:f1:75:f6:0b:
                    69:42:41:c7:11:73:87:c7:f8:19:1f:be:0a:d3:cd:
                    c9:20:ad:e1:1f:ed:7b:da:ba:f0:96:d3:01:38:be:
                    91:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:3E:54:A0:CA:B1:FE:19:57:D6:06:37:F3:4F:70:7F:78:D9:5C:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/354f8722-5971-39a2-98d9-1365e96b2ead.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.crl

            X509v3 Authority Key Identifier:
                keyid:84:75:FD:0B:B1:EC:65:B3:FC:1D:85:04:A8:6C:38:DC:C4:CD:AD:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd12::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:14:d9:65:fa:b1:45:bb:06:67:66:6d:4a:8c:d9:b2:c0:f7:
         51:8c:6a:7f:84:72:4b:4d:cb:fe:dd:c7:1c:86:8a:ca:fa:29:
         37:d1:31:1c:3b:d8:db:2e:a7:5e:69:64:63:ac:bf:49:07:72:
         aa:b6:4a:59:00:3f:fa:ec:7a:c2:34:5d:de:a6:af:75:92:23:
         f6:60:3a:f4:0e:4d:e9:f6:87:63:23:4b:b3:58:60:7b:b0:a9:
         91:37:b4:74:dc:35:ce:4a:19:d7:c1:8e:28:2d:9e:d9:b8:75:
         25:1e:18:70:36:95:b7:47:d6:93:0a:56:7d:06:96:48:ef:ec:
         20:5a:52:10:89:55:3c:49:ff:f4:ce:34:60:de:42:5c:02:44:
         b1:39:e9:e6:30:41:4e:b7:40:f5:4d:35:b3:8d:2b:e4:e6:a8:
         bc:ab:cf:bb:10:59:11:f3:35:85:03:01:e6:d9:25:3d:2d:3f:
         a8:76:4f:bd:c1:d1:66:79:dd:61:2d:b2:b1:ce:e8:28:1b:6e:
         26:77:3f:df:e5:c1:96:28:53:bc:ad:14:cf:1e:30:5b:c8:3f:
         30:fa:09:e4:49:11:22:2b:3f:79:60:6a:d3:dd:81:a7:f6:37:
         a2:5a:d9:56:4a:ca:02:6d:79:81:07:d5:bb:fe:aa:21:70:88:
         db:cd:52:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:11 2024 by rpki-client on console-ams.rpki-client.org