Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/67fdd9bc-f848-365e-a862-3a4a49efad0d.roa
File:                     67fdd9bc-f848-365e-a862-3a4a49efad0d.roa (raw, json)
Hash identifier:          nwu4nxmsasDF/D05ZSYGx1o64lY8hOni74QfLvqVb/U=
Subject key identifier:   8F:37:0E:77:18:BE:FC:81:2D:F1:67:60:B2:74:7A:66:E7:52:F7:BB
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F432858476D785FD9548EB016553D8D00
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/67fdd9bc-f848-365e-a862-3a4a49efad0d.roa
Signing time:             Fri 04 Oct 2024 08:25:36 +0000
ROA not before:           Fri 04 Oct 2024 08:25:36 +0000
ROA not after:            Thu 02 Jan 2025 09:25:36 +0000
asID:                     400655
IP address blocks:        2602:fd6f:e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6d:78:5f:d9:54:8e:b0:16:55:3d:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Oct  4 08:25:36 2024 GMT
            Not After : Jan  2 09:25:36 2025 GMT
        Subject: CN=2a22ab44-c0f2-4605-91d8-ae327b7c5bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3f:2a:93:85:b3:a0:52:ed:c3:62:85:c7:18:
                    1d:69:2b:6a:46:16:ea:3c:96:80:83:d3:6d:bb:8a:
                    7c:0f:a4:3b:00:fd:20:73:85:ba:e7:76:0d:10:06:
                    0d:fb:b3:17:d9:4d:bb:42:26:7d:d4:06:32:5d:f2:
                    1f:6a:03:7e:9f:bd:cf:55:f5:10:6e:b0:08:26:05:
                    9f:b5:69:e3:d8:a0:2d:5e:21:78:d1:37:66:50:77:
                    f8:e0:2a:04:d5:f5:58:78:c8:b1:f1:55:23:f7:45:
                    b0:51:e4:b5:fd:6a:63:aa:53:d7:6a:d7:2c:4f:1d:
                    65:2b:b7:08:6a:d8:c1:76:de:f1:7e:97:fd:ff:69:
                    c1:1e:b0:1f:0e:27:20:13:93:76:b7:9c:af:9d:97:
                    90:ec:45:b7:4b:05:9e:8d:8b:f2:e9:07:4f:37:38:
                    52:a3:b0:26:28:fe:98:84:be:54:64:21:73:98:65:
                    22:0a:cf:25:b3:c5:c6:42:24:52:33:f9:ea:04:17:
                    22:88:53:a5:85:1b:4a:a0:db:ee:0e:16:5d:ec:31:
                    60:05:33:f5:00:c8:10:dd:07:bc:43:24:22:8f:9a:
                    d3:6e:a3:7f:00:24:75:11:62:a7:86:9b:86:a3:3c:
                    6d:37:f9:56:c4:97:5a:c7:89:d5:0d:da:85:5c:e0:
                    8f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:37:0E:77:18:BE:FC:81:2D:F1:67:60:B2:74:7A:66:E7:52:F7:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/67fdd9bc-f848-365e-a862-3a4a49efad0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd6f:e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:d0:72:51:da:38:e8:3c:af:54:6a:da:7f:71:d9:72:67:fb:
         c0:00:1f:a3:af:df:de:69:87:3c:c6:2b:3c:a6:d5:5d:c4:69:
         f5:e0:8f:dc:46:72:19:7a:d3:2c:bd:17:bf:44:e0:6a:28:91:
         14:e4:e9:7d:08:32:9a:c1:b9:bb:bb:ec:72:96:b1:73:20:42:
         e8:f2:8b:e8:c1:83:be:e7:35:be:26:4b:b3:92:b3:86:fa:0e:
         38:d2:27:5d:e3:a8:04:69:86:a6:4b:01:9e:c8:81:09:3b:b4:
         3b:98:dd:8f:c4:3a:e5:1a:6d:e8:62:65:99:a6:1b:70:92:7c:
         be:b8:ea:22:31:57:73:9f:63:8d:c4:d7:d7:07:e9:ee:de:ac:
         d7:71:fe:ad:a5:2e:19:66:5b:5e:aa:8e:62:16:e4:bf:e4:f6:
         17:1f:ec:0e:a3:76:14:27:2f:3d:b2:78:40:f9:65:88:39:4a:
         6c:f5:45:27:8b:16:65:7e:cf:b9:6a:08:94:d3:47:aa:6b:e4:
         28:ac:9f:44:65:5a:2f:31:a6:44:c5:d6:e6:29:42:3c:89:ae:
         8f:96:6a:4f:f6:50:3c:fb:69:c1:43:9f:88:4d:a2:13:22:b6:
         2e:23:0c:75:26:11:d2:4b:bc:bf:46:26:a5:a4:32:24:f4:48:
         c3:5b:ee:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:45 2024 by rpki-client on console-fra.rpki-client.org