Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/238100d5-bfaf-33be-8223-e43b71ffd7be.roa
File:                     238100d5-bfaf-33be-8223-e43b71ffd7be.roa (raw, json)
Hash identifier:          AbrZsU+LcsR/4ivDDKjLigUjkQua8rTp2K83lqsBYmc=
Subject key identifier:   7F:ED:FC:4E:09:55:CB:72:00:B3:28:A2:B3:AE:DD:14:6A:AA:11:E2
Certificate issuer:       /CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
Certificate serial:       010D0C9F43285847818BC3F9A5AE2ED95FBA7B80
Authority key identifier: A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/238100d5-bfaf-33be-8223-e43b71ffd7be.roa
Signing time:             Fri 11 Oct 2024 13:00:41 +0000
ROA not before:           Fri 11 Oct 2024 13:00:41 +0000
ROA not after:            Thu 09 Jan 2025 14:00:41 +0000
asID:                     210630
IP address blocks:        2602:fc24:187::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:81:8b:c3:f9:a5:ae:2e:d9:5f:ba:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
        Validity
            Not Before: Oct 11 13:00:41 2024 GMT
            Not After : Jan  9 14:00:41 2025 GMT
        Subject: CN=7567cdde-d53f-4320-bade-85be39002c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ed:6e:84:5a:72:1b:f3:ac:37:a0:a3:02:6c:
                    c9:c3:98:44:43:6f:87:ae:a5:c1:49:99:2b:3b:2f:
                    3a:38:3d:02:8a:5e:59:d0:2e:cf:c4:98:96:02:5f:
                    d1:e3:4c:55:53:d8:26:0f:6c:f9:1f:4b:3e:8f:fb:
                    e8:50:9b:cd:ec:65:c0:8a:1c:8e:10:d7:34:e1:be:
                    f1:5b:92:2f:50:fc:70:2e:6e:1b:a8:56:94:4c:e9:
                    30:19:6a:b2:9c:8c:30:f3:37:57:9d:9e:8b:c6:84:
                    27:53:1c:88:e8:51:94:96:5f:f3:8d:e7:c3:e4:ba:
                    67:2a:8b:d4:46:ab:56:b1:71:d4:fb:51:42:7a:27:
                    b2:49:ca:b0:ba:4c:25:b7:f7:1e:db:ed:50:47:ca:
                    b3:a5:b3:7c:38:ba:55:ea:df:a6:69:af:b8:45:ff:
                    82:fd:34:13:31:bb:7e:48:40:3a:19:4b:1f:34:4f:
                    dc:e1:f9:0c:cf:32:6a:ce:6d:95:25:e0:5a:c5:6a:
                    28:fe:4b:ee:da:5e:0c:da:bd:55:01:63:01:e6:f3:
                    46:3d:f9:f5:66:6e:23:54:eb:b9:c3:f4:e8:1b:49:
                    69:9d:d9:c7:c6:6e:05:aa:fa:ee:f7:90:5c:ea:c1:
                    81:7d:d6:07:3c:f1:ff:8f:06:05:43:9e:d6:7b:cb:
                    3d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:ED:FC:4E:09:55:CB:72:00:B3:28:A2:B3:AE:DD:14:6A:AA:11:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/238100d5-bfaf-33be-8223-e43b71ffd7be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl

            X509v3 Authority Key Identifier:
                keyid:A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc24:187::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:64:23:27:33:ba:02:13:7d:86:76:e1:85:f6:41:3b:4d:90:
         59:5e:e8:79:ee:75:08:8e:c7:c9:37:d1:d3:7b:13:98:bf:14:
         f9:bc:8b:a8:70:14:c2:13:c1:b2:5e:f6:f3:1f:5e:f0:b6:aa:
         d4:c1:c6:6f:21:62:4d:d6:f7:52:ea:5d:ac:75:e8:94:26:ee:
         c5:6e:09:84:2d:75:99:62:e7:29:f2:65:fd:a2:9b:50:a5:91:
         36:cc:a8:5b:ca:a7:3b:80:be:81:69:26:56:db:d8:6c:5d:73:
         65:d3:9c:ad:67:69:77:2a:67:2a:57:75:34:df:19:39:17:c3:
         e9:d6:59:00:a6:0c:04:ea:88:70:6e:0a:b4:17:2f:dc:fb:9e:
         59:73:ce:84:d2:77:e6:44:c8:f2:80:cb:a5:79:12:ad:43:f4:
         29:25:86:28:c6:0b:0d:a3:2a:96:91:2c:d6:1f:83:8e:7e:05:
         9e:cd:9f:3c:57:f2:c4:14:55:8f:fe:02:78:3a:1c:83:75:64:
         aa:ca:f0:7d:b7:44:d6:5b:fb:13:1d:ae:91:35:45:a7:5c:b9:
         93:8f:11:f6:9c:9a:9a:b4:04:2c:11:f5:b0:8e:04:6b:68:21:
         2a:2a:ea:76:ad:b3:cc:a6:ba:91:63:c0:bc:cf:af:38:7c:aa:
         05:f6:29:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:29 2024 by rpki-client on console-ams.rpki-client.org