Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/34ffd1f7-f78d-3b78-ab5d-48fa4fd36589.roa
File:                     34ffd1f7-f78d-3b78-ab5d-48fa4fd36589.roa (raw, json)
Hash identifier:          QnQlWnovE1aQMDU51MZ4vpm8MCRh0HX3Br6jJOsx3e4=
Subject key identifier:   2E:D4:F5:8C:CC:76:12:B0:59:01:DF:2D:3C:11:33:81:96:6B:ED:B8
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F432858475910CF85AA6D7DCF89B23580
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/34ffd1f7-f78d-3b78-ab5d-48fa4fd36589.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     31898
IP address blocks:        2602:fdaa:21::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:cf:85:aa:6d:7d:cf:89:b2:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=286315b6-dd7f-4a9b-98e8-680df93a8c28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:18:ab:67:0b:6d:d4:eb:87:16:5c:fb:35:53:
                    1d:49:c0:66:37:52:4c:9e:fa:65:7c:96:a1:b6:de:
                    d0:80:51:d2:b7:00:6b:d7:0e:88:66:fb:88:6d:ce:
                    50:ec:b6:dd:08:d1:c4:2e:3e:84:4d:ea:e9:37:76:
                    f5:a5:26:ef:88:02:6d:de:3d:12:cd:44:dd:bf:b4:
                    31:a2:96:f3:42:ce:e5:79:da:f6:f8:ad:fb:0d:e8:
                    db:7a:1d:93:15:e5:67:d0:92:e8:c0:77:eb:d6:6b:
                    56:65:1d:95:8b:f5:2f:f1:1f:76:46:b1:8e:97:6c:
                    45:9e:64:55:a0:3a:fc:8e:b4:67:70:17:2a:38:ca:
                    1b:7f:fd:21:f7:ef:52:e5:3c:85:63:16:be:74:c6:
                    b7:cf:cd:81:78:c0:b5:c1:e4:de:7b:65:11:e3:ff:
                    b1:1b:4d:08:6b:d7:57:02:76:82:69:7b:5e:10:c3:
                    38:96:28:5f:03:41:5d:b6:a0:2c:c9:ed:c3:03:c6:
                    36:a6:ac:5b:df:c9:2d:72:ab:ba:ee:fe:8e:34:ee:
                    bd:33:66:45:63:8c:3d:f7:64:c7:52:83:13:20:45:
                    0d:35:ab:d0:0a:ac:17:a3:6e:e3:37:70:2e:fd:5b:
                    8c:cf:fc:d0:28:71:fb:48:64:b9:e5:11:a9:2f:e8:
                    2d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D4:F5:8C:CC:76:12:B0:59:01:DF:2D:3C:11:33:81:96:6B:ED:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/34ffd1f7-f78d-3b78-ab5d-48fa4fd36589.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdaa:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:55:08:1f:f7:b3:4b:8a:97:57:05:6f:e5:09:7a:b7:fe:d2:
         bd:1b:26:18:ba:7f:72:1c:ac:a7:99:11:11:61:40:1a:79:3e:
         52:b5:b3:11:89:1b:86:5a:c4:e8:4f:cf:ea:d2:f6:58:98:c7:
         a3:90:94:97:c5:5e:df:b3:a9:48:ec:2c:16:a9:16:b0:a6:58:
         0e:ae:89:ef:4b:ac:19:e6:bb:c1:af:46:e4:fa:7a:f8:88:8d:
         3c:94:c4:c3:15:9c:69:59:bf:c8:bb:71:45:a8:93:67:0b:19:
         37:8e:8d:55:fe:bd:05:54:8b:92:f9:67:e8:58:2b:98:f9:23:
         1c:51:67:56:94:15:fe:fd:1f:1d:26:36:7c:71:67:23:31:4d:
         bb:06:f0:71:fb:67:55:64:ca:4f:c2:02:25:f4:ea:3b:33:93:
         4b:74:04:45:d8:76:af:43:64:24:9d:94:08:8f:e9:16:2d:b9:
         ac:bb:56:de:ae:75:aa:39:71:cd:1c:bf:06:a5:3b:9b:36:3c:
         7e:ee:7f:5a:c7:f4:da:05:f0:3e:a1:14:d3:b7:81:0e:99:b1:
         29:fa:c3:0d:33:a3:b7:65:b1:76:13:99:99:ba:b9:83:da:4e:
         09:c0:53:e6:5f:08:54:58:c1:1e:4b:21:5e:1c:21:8e:9d:35:
         48:7d:ff:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:51 2024 by rpki-client on console-ams.rpki-client.org