Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/acba50cd-8bc0-35bf-ba59-6e771498d3a6.roa
File:                     acba50cd-8bc0-35bf-ba59-6e771498d3a6.roa (raw, json)
Hash identifier:          SahylW5WDE4vKa+SvZcCe4GMHsKn64wezQx4gk4xb1g=
Subject key identifier:   D4:15:33:C5:11:44:20:31:76:3C:F4:CD:2B:79:3C:BA:D6:D8:92:44
Certificate issuer:       /CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
Certificate serial:       010D0C9F43285847CFD4A1CC1A132447995FB080
Authority key identifier: EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/acba50cd-8bc0-35bf-ba59-6e771498d3a6.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     399883
IP address blocks:        2602:fc06:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:a1:cc:1a:13:24:47:99:5f:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=7f720391-2a18-4de2-9bdf-3e35cb38308b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:63:a0:01:a8:87:e4:e6:54:49:65:e3:fc:0e:
                    72:c2:a8:3d:31:68:ee:fe:7e:de:af:79:9d:86:a1:
                    30:d5:e7:3b:e5:09:c6:6f:7c:6f:29:b9:be:20:8d:
                    db:3b:c8:14:70:fe:d8:00:b9:e0:80:51:ec:7e:56:
                    11:ba:08:7b:c2:d0:8c:2e:6e:a1:29:dc:aa:83:94:
                    7e:02:ba:a9:23:8e:f5:68:01:4e:38:f8:75:a2:21:
                    fa:df:37:fa:53:70:15:aa:e5:e3:fc:e7:35:59:3e:
                    83:77:5e:00:9d:56:1c:87:b6:53:03:d3:a9:6c:29:
                    bf:48:8b:c8:61:c8:6b:95:a5:ce:18:c0:16:4d:c6:
                    a1:e8:0b:d1:78:74:45:60:cb:19:77:38:c4:f3:5f:
                    d4:9f:d3:37:94:7e:b0:59:bb:20:b4:d1:c7:7c:bf:
                    8b:7d:12:6a:d8:26:74:04:52:82:83:a0:80:85:ba:
                    e8:77:23:32:c5:a4:00:ec:b0:35:4f:b1:a2:f9:b1:
                    1b:82:67:e1:d2:a7:fb:9c:59:5e:ca:ea:56:96:7a:
                    6f:01:ca:e0:b5:65:fd:56:19:44:a5:7c:c0:f8:44:
                    76:a7:f7:c2:e4:0f:61:2f:86:19:a1:7f:8c:a4:15:
                    da:0c:8c:cc:56:15:08:11:6f:ce:6d:40:c9:09:a4:
                    b6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:15:33:C5:11:44:20:31:76:3C:F4:CD:2B:79:3C:BA:D6:D8:92:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/acba50cd-8bc0-35bf-ba59-6e771498d3a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl

            X509v3 Authority Key Identifier:
                keyid:EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc06:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:0f:4f:6b:de:9c:d9:ec:28:7e:be:27:20:9b:0f:c2:3b:0e:
         0a:8c:c1:38:e4:dc:82:9f:13:c1:2a:51:a6:3f:0b:89:1f:25:
         de:fc:6f:ee:d9:a7:cf:b9:c2:81:48:d9:7a:7a:f6:52:33:42:
         e5:9b:73:61:f5:b6:ed:9a:aa:9b:6f:e0:14:07:69:c7:60:e2:
         ad:8d:d9:d5:c8:7e:0f:ae:e7:ce:7d:16:38:ca:4f:90:d2:6e:
         06:0c:66:53:b3:df:82:d8:4e:0d:ec:d6:69:87:05:ef:56:18:
         a0:3b:f0:2f:ad:1e:35:01:a2:58:e5:96:b9:a3:d8:00:fb:da:
         6d:4e:e6:ab:9f:ab:20:da:ba:3c:d3:e8:5e:3a:12:e1:be:82:
         74:cb:e2:2c:14:e1:3c:97:45:ee:5d:96:93:e6:64:52:e6:8e:
         6a:9a:74:65:6b:ff:c1:9d:ed:02:dd:06:44:cf:dc:25:5e:b4:
         c7:0c:b9:40:73:30:a0:b3:54:92:89:78:54:88:3f:d5:11:c7:
         7b:33:e3:83:f1:64:ac:bb:ea:b9:b0:af:80:49:e4:92:12:ba:
         e4:70:8a:70:f7:8f:d1:b5:d2:e9:35:d9:7a:d0:8b:05:69:b9:
         38:3f:0e:b0:d6:8a:62:34:0c:7b:c1:af:14:b9:76:fc:b6:45:
         35:2e:2d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:34:06 2024 by rpki-client on console-fra.rpki-client.org