Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/795e0c3f-f507-3caa-b791-f5977b2fb632.roa
File:                     795e0c3f-f507-3caa-b791-f5977b2fb632.roa (raw, json)
Hash identifier:          G6PMzAPu1yIoegkILBztwqvyqSJHiDBEKiJdh6+0Wu0=
Subject key identifier:   E5:FC:E8:4D:D4:A4:B8:0C:65:8C:CD:69:81:4D:CA:09:1B:41:E9:74
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F432858475910C71899E15704C6784A60
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/795e0c3f-f507-3caa-b791-f5977b2fb632.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     31898
IP address blocks:        2602:fdaa:a0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:c7:18:99:e1:57:04:c6:78:4a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=a4362547-5aca-450e-ae00-ae80be393699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ea:59:02:fc:aa:79:40:cb:25:d9:dd:43:93:
                    50:2e:7b:b5:70:72:2c:eb:76:df:78:9c:04:e1:07:
                    b8:b1:ec:55:9a:f3:81:8f:79:ae:78:7e:f2:b6:66:
                    de:61:de:e0:5f:3f:f5:90:f7:f7:d1:4a:3d:c3:ad:
                    83:98:d3:e5:21:2d:6c:a8:57:72:a0:18:65:39:e6:
                    ae:15:11:46:3d:20:ba:e1:53:58:21:3e:18:71:90:
                    50:7e:26:b2:9f:56:37:dd:ee:73:b3:ab:1e:9e:5b:
                    6e:5a:db:4e:7d:28:db:ad:2e:23:c5:0d:54:88:bf:
                    ce:d9:51:6c:db:3e:7c:e9:25:d6:7e:78:67:18:cb:
                    35:60:08:25:35:9e:a4:f8:2f:76:33:93:37:6b:5f:
                    c4:19:74:a6:91:65:10:75:d8:94:69:53:70:52:8b:
                    6e:b3:71:bf:60:56:f7:bf:1b:94:5c:94:91:5e:f7:
                    5b:ff:10:03:0c:61:e6:52:da:1e:71:30:a9:57:98:
                    e0:ac:f3:ca:3a:0f:cb:e1:4f:5d:09:5a:4d:d9:18:
                    1f:3f:d5:84:e3:0d:24:9b:e7:37:8c:d3:1f:2f:e2:
                    a2:53:b1:25:9b:f6:87:2b:34:61:5c:f1:81:4a:9e:
                    e8:21:81:d6:fb:19:33:9d:3e:45:9d:e0:59:67:17:
                    a0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FC:E8:4D:D4:A4:B8:0C:65:8C:CD:69:81:4D:CA:09:1B:41:E9:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/795e0c3f-f507-3caa-b791-f5977b2fb632.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdaa:a0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:1d:0f:9d:c3:a3:fa:3b:1c:71:4c:31:56:32:59:fc:01:9d:
         19:b4:93:d5:3b:75:ea:eb:c9:60:3c:3f:e4:51:19:0c:f6:d5:
         f6:7b:64:89:40:f8:9e:88:89:e0:94:38:2e:88:47:e6:b5:a9:
         72:56:0d:9b:f5:67:ca:2d:44:7c:94:c8:ae:bd:c7:3d:71:b8:
         59:0e:c0:a4:1a:3d:8b:2e:85:cb:40:9d:87:0d:65:74:16:f3:
         91:1b:a0:c1:10:3a:f0:6d:f0:00:aa:5f:1e:fa:9d:1e:7e:ae:
         ea:b4:5f:c1:5d:7d:a2:85:8f:c9:8f:2e:16:98:62:e0:ff:8a:
         5c:14:4d:28:90:4a:41:a3:2d:01:da:99:ff:21:1f:a0:8d:cc:
         ae:e1:71:d4:48:e4:56:99:a8:58:4b:d2:3a:f3:5b:36:70:4e:
         82:ab:53:02:63:a8:ac:c9:7f:e5:23:93:af:13:e5:c4:b1:42:
         85:7b:8f:1e:19:58:6e:fe:51:7e:46:4f:df:57:aa:7e:82:b5:
         2a:49:b5:54:47:7f:4f:1c:e5:e2:9d:c4:d5:a8:43:7c:ed:20:
         c8:70:07:58:d2:ef:9b:92:0b:9d:d9:71:cc:9d:42:41:74:6a:
         78:53:62:97:68:6d:07:61:f5:2f:0c:d4:3c:08:c7:d2:74:27:
         2f:11:a9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:49 2024 by rpki-client on console-fra.rpki-client.org