Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/22b6363d-3f5d-3d91-9652-31215bc9d783.roa
File:                     22b6363d-3f5d-3d91-9652-31215bc9d783.roa (raw, json)
Hash identifier:          +JE7ahW0AoHlie/XnGN6qkCE0g5hv4vqTfHeIjmkjgc=
Subject key identifier:   5D:87:BB:F8:9B:FC:4E:77:D0:1B:CD:8B:26:22:C4:0E:52:AF:8E:51
Certificate issuer:       /CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
Certificate serial:       010D0C9F4328584765A0ED3621DBDA6D632CF080
Authority key identifier: 1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/22b6363d-3f5d-3d91-9652-31215bc9d783.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     397270
IP address blocks:        2602:fea7:100::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:ed:36:21:db:da:6d:63:2c:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=25b21691-1365-4b06-8e70-dbe6978f04af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:43:81:9d:ff:b6:4a:c9:53:2b:7f:75:2e:80:
                    8b:23:20:af:a6:46:93:bd:1b:e5:53:d8:0a:71:40:
                    b4:87:84:dc:54:93:9b:40:9f:5c:0c:c8:3b:ec:f1:
                    16:90:e8:38:12:c4:02:0a:5f:31:eb:54:9b:51:54:
                    08:8d:2e:e2:af:7d:e0:f1:a1:2d:28:44:a0:fe:a4:
                    b4:84:ab:c3:fb:14:24:f1:5c:9f:2b:cb:3d:34:82:
                    f9:f9:3c:cb:57:ff:a5:4f:9c:f9:26:ec:af:58:dd:
                    f8:d0:d3:36:c6:69:6e:4b:b9:10:a2:d9:37:64:5c:
                    37:8e:f2:84:52:43:13:1d:25:5d:55:ea:5d:fc:dc:
                    7b:83:ae:a8:4f:db:57:79:c3:b8:f7:31:9e:0d:6c:
                    b4:c6:8f:db:12:57:c0:85:86:f1:10:16:63:6c:7c:
                    d8:4a:f3:76:57:21:4f:4d:8c:df:ea:ef:67:8b:8a:
                    f7:c2:9c:ea:84:0a:ac:4e:ef:65:a4:fe:60:be:67:
                    7f:e1:de:87:0d:84:6e:68:a6:d0:43:2a:f7:eb:c4:
                    59:cc:54:41:6a:22:fe:c0:91:bc:98:25:e7:9d:ca:
                    08:6c:a9:fe:f3:83:76:51:d4:fe:63:16:5c:7a:bf:
                    98:c8:f3:4c:29:b9:06:96:a7:bc:ef:8a:f1:fd:8d:
                    25:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:87:BB:F8:9B:FC:4E:77:D0:1B:CD:8B:26:22:C4:0E:52:AF:8E:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/22b6363d-3f5d-3d91-9652-31215bc9d783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl

            X509v3 Authority Key Identifier:
                keyid:1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fea7:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:34:1b:fe:28:bb:a9:3b:a8:fc:5c:90:06:9d:df:90:ce:8e:
         74:d7:c5:6f:b1:02:01:cf:50:64:51:ea:85:23:c6:40:28:a7:
         1c:a8:9d:40:ac:be:71:c5:7f:56:1e:70:4a:3c:96:ed:ad:ba:
         27:d0:39:a6:c7:5b:99:e2:9a:f8:35:0e:90:81:20:78:c2:68:
         e9:c7:86:82:f5:3e:44:0a:37:87:96:16:e3:71:12:85:14:d4:
         7c:35:2e:4a:95:77:70:98:96:e1:dd:73:40:41:3a:28:ad:ff:
         f8:2a:e0:98:df:af:96:69:a4:66:ec:50:b8:15:07:88:9f:3e:
         0a:8b:3f:ce:24:eb:88:84:cb:85:5c:48:ba:c3:0b:a6:a0:98:
         27:3c:4e:95:fe:ca:bd:17:b3:df:67:1a:d9:e0:ea:5e:7e:9a:
         60:b0:38:4f:bc:8f:e3:7d:df:68:d8:5b:86:a8:43:a5:48:08:
         a2:7e:22:d7:58:e8:f3:a1:99:6e:f4:99:47:17:ec:02:d3:4e:
         f4:99:d5:56:d9:b9:0a:f2:92:ec:da:1a:a7:b9:48:26:2b:22:
         14:27:92:4c:57:5c:9b:73:e6:24:06:ff:50:9c:6e:80:b2:91:
         bc:fb:88:4a:6c:aa:89:3c:1b:74:57:f3:ca:5b:88:4c:e4:65:
         c1:25:01:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:44:41 2024 by rpki-client on console-ams.rpki-client.org