Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/0f760c1b-2287-3417-81e0-e555031d9abd.roa
File:                     0f760c1b-2287-3417-81e0-e555031d9abd.roa (raw, json)
Hash identifier:          Z2WQNQSgJkGV4Fd98pEc5/xnWsjg3lvl5mhvYc0u2fM=
Subject key identifier:   3F:1D:C3:B9:A4:B1:48:3C:6F:ED:CA:09:C6:C5:66:8F:F3:92:7E:6D
Certificate issuer:       /CN=6ac516fb-e4df-49c1-82bc-fed2399d21c2
Certificate serial:       010D0C9F432858473FF09CF8B5D81E0E76A83E00
Authority key identifier: 17:89:41:4A:81:2C:AF:72:C7:E2:27:3F:C0:5C:CC:33:C2:91:67:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/0f760c1b-2287-3417-81e0-e555031d9abd.roa
Signing time:             Wed 18 Sep 2024 01:00:30 +0000
ROA not before:           Wed 18 Sep 2024 01:00:30 +0000
ROA not after:            Tue 17 Dec 2024 02:00:30 +0000
asID:                     399209
IP address blocks:        2602:807:6003::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/6ac516fb-e4df-49c1-82bc-fed2399d21c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/6ac516fb-e4df-49c1-82bc-fed2399d21c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:f0:9c:f8:b5:d8:1e:0e:76:a8:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ac516fb-e4df-49c1-82bc-fed2399d21c2
        Validity
            Not Before: Sep 18 01:00:30 2024 GMT
            Not After : Dec 17 02:00:30 2024 GMT
        Subject: CN=9b27d19f-4936-4de1-897e-2d2278d52aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7f:bb:57:09:a2:68:f3:2e:9f:d3:72:e3:55:
                    56:bd:c0:a7:75:dd:a3:7f:b4:97:74:60:a7:c2:d2:
                    e3:d1:10:b4:26:09:d7:0a:ba:66:d5:fd:32:e3:3b:
                    20:f9:f9:a8:6e:ac:53:1d:7e:58:4a:54:8a:5a:be:
                    66:21:f4:27:c6:e2:3c:1d:9b:b1:6e:19:be:c9:1f:
                    28:f6:36:b6:6e:df:6a:00:29:ae:7e:68:74:61:60:
                    a7:09:59:93:e1:28:fc:13:33:cc:51:a0:23:fd:25:
                    dc:f7:cc:66:b5:f6:c8:0b:9f:5b:93:cd:d7:00:b7:
                    36:4e:99:82:8f:1b:72:95:2f:0f:21:3b:98:9f:12:
                    89:31:ef:23:3e:52:16:49:05:7b:06:7c:cc:c1:0c:
                    9f:b5:43:a9:ec:46:b5:46:ba:90:db:37:46:ee:01:
                    16:97:09:85:0b:6d:ca:8b:93:f3:39:03:00:b5:18:
                    d2:ae:e0:d4:c3:69:5a:b5:40:96:ad:cf:a7:28:8e:
                    ed:45:60:b3:63:87:04:f2:9e:39:f6:82:75:55:de:
                    28:3a:74:f3:cb:bb:f1:9e:68:f6:8b:55:ee:c3:f0:
                    cf:db:8e:bb:d7:cf:f6:97:04:2a:4f:f8:e7:22:e8:
                    38:a7:18:95:bc:cb:74:94:8a:27:1e:b2:c4:a9:24:
                    de:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:1D:C3:B9:A4:B1:48:3C:6F:ED:CA:09:C6:C5:66:8F:F3:92:7E:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/0f760c1b-2287-3417-81e0-e555031d9abd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/6ac516fb-e4df-49c1-82bc-fed2399d21c2.crl

            X509v3 Authority Key Identifier:
                keyid:17:89:41:4A:81:2C:AF:72:C7:E2:27:3F:C0:5C:CC:33:C2:91:67:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:807:6003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:b0:cb:4a:c6:19:2d:3c:df:c7:18:17:02:26:de:23:80:3f:
         03:93:81:51:f5:d8:33:ba:4e:0d:90:ff:02:3e:6d:c8:56:ae:
         90:12:7f:9a:f4:d8:43:2f:4c:02:78:96:6b:d3:20:65:c7:33:
         a8:18:90:b5:09:ab:98:36:1f:aa:fb:cd:7c:b4:44:7a:72:31:
         da:9e:28:7b:65:5c:04:1a:cd:f2:97:27:a6:03:3c:86:f4:6d:
         72:29:d2:0f:c1:a5:3b:53:93:4a:a8:3a:ca:0b:72:87:3a:d4:
         59:b7:4a:3f:af:b1:4f:f6:eb:73:ba:d4:bd:0c:10:c1:40:dd:
         3b:72:05:50:ca:0d:1e:c8:d4:67:8f:25:f8:7d:10:5a:95:23:
         50:ac:37:3c:0a:ab:d3:28:9d:12:5e:e9:62:3d:43:1a:39:ff:
         7c:5b:39:bb:ba:50:b0:2b:26:a0:b1:2c:fb:2c:05:d6:ce:a7:
         c1:8c:55:04:f1:83:94:83:36:28:dd:75:40:c6:a6:39:97:15:
         1b:46:a2:f1:20:8a:9c:0e:c5:89:ef:57:f1:3d:7a:79:57:1b:
         99:a6:37:83:0c:81:06:90:fc:73:09:46:dd:4a:9a:4a:7a:d9:
         22:1d:db:96:82:19:f3:39:dc:c1:12:ae:d2:53:0d:97:7e:46:
         dc:1a:af:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:39 2024 by rpki-client on console-fra.rpki-client.org