Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/d0cdc3f4-b977-304a-8a58-6dbb0f0c5d28.roa
File:                     d0cdc3f4-b977-304a-8a58-6dbb0f0c5d28.roa (raw, json)
Hash identifier:          ORMjMbOnqRNB2XiSuqsHqSxzOKWLWDLvt1fDWeJ22ss=
Subject key identifier:   93:57:CB:31:21:0F:92:AF:28:78:09:72:1E:57:67:A1:09:C9:E4:11
Certificate issuer:       /CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
Certificate serial:       010D0C9F43285847818BC1CE80E7A12CF8E5FB50
Authority key identifier: A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/d0cdc3f4-b977-304a-8a58-6dbb0f0c5d28.roa
Signing time:             Fri 11 Oct 2024 13:00:41 +0000
ROA not before:           Fri 11 Oct 2024 13:00:41 +0000
ROA not after:            Thu 09 Jan 2025 14:00:41 +0000
asID:                     210630
IP address blocks:        2602:fc24:17::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:81:8b:c1:ce:80:e7:a1:2c:f8:e5:fb:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
        Validity
            Not Before: Oct 11 13:00:41 2024 GMT
            Not After : Jan  9 14:00:41 2025 GMT
        Subject: CN=8f14f914-f4be-4e42-aa09-2755df9dd4bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:47:25:c5:b9:72:86:85:10:d1:78:a0:6d:a6:
                    a4:b5:78:e6:1c:39:12:12:5e:92:8e:47:0e:22:59:
                    69:02:16:ce:86:7a:c9:b8:0a:cf:8f:cd:0a:33:3c:
                    de:94:5a:69:64:32:da:15:43:4b:5f:c6:4e:11:0e:
                    a3:b7:fd:95:e0:cb:52:fd:ba:f5:d1:ae:3a:70:1b:
                    e6:56:f7:28:95:9f:07:6b:d2:8c:77:47:ef:84:85:
                    9d:3e:a6:f1:85:4c:94:71:b1:59:17:b1:8e:42:56:
                    64:b4:77:2b:00:3b:09:41:c8:ec:8e:8d:7f:da:fb:
                    79:5d:d6:1b:aa:b1:4f:4e:8f:12:df:22:b5:75:f7:
                    1b:1d:4d:ca:34:32:d2:c7:19:28:db:e0:94:d3:63:
                    95:ac:bb:0e:a2:9f:05:81:1e:3e:0a:2a:c0:08:1f:
                    bd:32:d0:51:66:54:a0:ed:7d:05:82:ad:bd:11:37:
                    9d:75:3a:79:d3:e5:28:27:b6:f2:1d:f2:b3:22:c0:
                    66:94:7f:1d:12:47:c9:dd:3e:ab:6c:ad:92:6d:c7:
                    7c:70:19:6d:e5:ca:95:a0:de:b0:72:29:d4:09:d1:
                    8f:5e:5c:0a:f4:ee:fe:df:2e:30:09:c0:09:9f:e0:
                    b7:77:4e:2b:c5:86:9d:a2:a2:18:2a:8d:d6:cb:a0:
                    cf:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:57:CB:31:21:0F:92:AF:28:78:09:72:1E:57:67:A1:09:C9:E4:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/d0cdc3f4-b977-304a-8a58-6dbb0f0c5d28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl

            X509v3 Authority Key Identifier:
                keyid:A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc24:17::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:83:4f:31:7c:d9:f1:81:51:ed:ce:3e:ac:99:0b:0f:49:a5:
         7a:6b:d3:86:0a:97:8d:e4:96:79:89:f9:04:b3:31:8d:b3:88:
         f7:a7:18:2e:7f:23:01:ed:a9:84:85:11:6d:4a:08:b3:65:e2:
         81:3c:bd:f6:b6:4d:04:f2:0a:51:c5:c3:cb:49:d3:4d:ee:98:
         0d:05:98:b7:07:23:8e:fc:55:1a:2c:ce:dd:59:04:26:57:28:
         b4:29:72:e4:d1:a6:a2:fc:22:3a:b5:58:af:a5:91:bd:17:99:
         20:09:f6:5c:07:33:08:af:6f:3e:9c:c5:18:73:4a:bd:8d:ec:
         0b:c1:5c:82:83:e9:e3:62:ac:f5:45:5e:84:bf:7c:91:80:2d:
         88:dc:9a:4b:72:62:68:ab:bb:fd:23:f1:6e:1e:11:f4:92:14:
         35:24:88:9a:e6:d3:b1:cb:d6:2c:a1:9c:00:45:33:c7:c6:39:
         b9:8e:84:96:4e:14:a0:31:47:f2:75:30:7a:5b:70:ea:e8:fb:
         a0:bb:95:05:39:57:3a:66:37:46:54:61:27:c5:67:04:7d:e8:
         e2:02:c2:98:4f:97:96:b4:9a:83:33:b5:d2:53:62:5b:c4:55:
         7a:64:db:af:c2:49:a3:db:24:a4:5c:eb:3d:ab:21:a4:7b:b0:
         72:00:77:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:38 2024 by rpki-client on console-fra.rpki-client.org