Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/4f2796ed-daf0-3215-8bc3-e7537ef73ce6.roa
File:                     4f2796ed-daf0-3215-8bc3-e7537ef73ce6.roa (raw, json)
Hash identifier:          34CAoAOw8kPNWl0GpcihC2nLU3qJcIgmDXinroadCm0=
Subject key identifier:   7C:87:B5:23:40:E1:E8:E4:19:9C:38:95:14:6B:BC:AA:17:92:B0:38
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584734C88BD12B3BDB0F6FF92D60
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/4f2796ed-daf0-3215-8bc3-e7537ef73ce6.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     18526
IP address blocks:        2602:fd6f:50::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:8b:d1:2b:3b:db:0f:6f:f9:2d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=4b449cc0-9bc4-480f-abbb-060b36c77cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d7:1f:b8:46:db:6f:49:05:74:b6:39:f7:95:
                    d1:6d:3a:53:03:ae:aa:d5:50:0b:81:da:30:92:5e:
                    4f:35:36:87:8a:98:d8:bf:e6:a1:f9:71:e2:a5:f5:
                    c8:56:86:f5:ec:ba:b1:d9:94:e8:ef:c0:1d:22:d3:
                    1a:a5:86:af:46:e4:3d:09:a3:40:77:9b:1b:83:78:
                    db:b5:00:01:52:ab:4e:69:52:9a:4c:63:e6:16:79:
                    87:30:92:17:53:41:c1:b3:06:17:79:9d:c3:c9:3a:
                    8d:e2:fd:bb:65:92:b6:e3:6d:f7:47:d8:94:6d:86:
                    fe:47:e1:7e:a2:c1:8e:95:b1:20:43:eb:90:c3:3b:
                    a3:22:81:9c:79:47:65:02:7f:11:c3:5f:2d:6e:4c:
                    9a:a3:48:56:d1:fd:ce:cd:63:ff:05:65:dd:62:0c:
                    69:cf:a5:b5:88:1c:b7:36:b8:d7:fb:11:0c:99:19:
                    2c:17:82:43:9b:ba:48:54:84:e0:0c:75:08:f9:d4:
                    87:c8:9b:20:b4:7a:ca:b7:dd:8b:48:de:f4:0b:20:
                    1a:6b:4f:20:ba:ea:04:c3:7b:74:3b:99:67:ac:3a:
                    e1:59:00:1a:7b:69:e9:8d:ee:92:70:13:32:10:3b:
                    bc:f3:e9:bd:6b:fd:fe:34:b5:a5:cc:60:93:0a:28:
                    9a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:87:B5:23:40:E1:E8:E4:19:9C:38:95:14:6B:BC:AA:17:92:B0:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/4f2796ed-daf0-3215-8bc3-e7537ef73ce6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd6f:50::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:d4:5c:c1:fb:95:b6:54:06:46:02:24:36:a3:13:14:1a:25:
         28:49:43:0d:cd:69:fb:18:7c:88:ca:b6:72:26:36:82:47:4f:
         8e:14:f8:1e:22:b6:13:1f:63:90:60:fa:61:a4:51:f1:99:b5:
         d7:2d:1f:da:82:d8:d3:26:7c:df:ab:0b:4f:74:0f:e1:ab:b4:
         bd:e2:ed:fa:8f:40:1a:8b:a5:a9:9b:3f:ec:2b:39:48:f2:03:
         fd:0c:b5:69:51:1f:0a:25:db:a2:e5:a7:17:5c:a9:f6:a9:f1:
         07:2f:17:f4:e8:c5:5f:f9:38:10:d4:56:5f:76:83:09:4e:27:
         82:78:38:b0:68:a7:a6:7f:57:2b:fe:e3:39:61:48:c1:b4:9c:
         89:a3:fb:c9:31:83:6b:4b:cc:5f:3d:f0:d1:5e:69:86:0c:05:
         68:05:c5:40:96:60:9e:1d:b4:b2:62:b8:f0:f1:86:eb:40:54:
         e0:74:ab:9b:84:50:06:81:e5:14:16:8b:3a:da:93:08:13:0b:
         42:c3:4c:70:97:88:14:b6:72:61:de:85:15:f1:95:4f:1d:c4:
         68:c2:f5:ef:f9:d2:1c:dc:3e:61:f4:1f:0d:d0:f6:dd:4b:ef:
         2b:b6:bd:64:c7:dd:15:b3:02:6d:5c:1b:d3:d2:d0:6c:0c:e9:
         57:da:af:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:44 2024 by rpki-client on console-ams.rpki-client.org