Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/4e2c01a0-0141-3419-a05b-416705d7f935.roa
File:                     4e2c01a0-0141-3419-a05b-416705d7f935.roa (raw, json)
Hash identifier:          JPCU9egbrgMyz91CjWQ6aNsyNOh5PVMa2XwwBHNHcEs=
Subject key identifier:   1F:AE:3C:94:D0:E1:1C:89:F8:A8:99:B3:F9:F2:B9:36:0D:21:A0:D2
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F43285847600B88DBC56DB431DB80EE80
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/4e2c01a0-0141-3419-a05b-416705d7f935.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     210934
IP address blocks:        2602:fd92:800::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:88:db:c5:6d:b4:31:db:80:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=2c804412-68bc-4269-ac1b-c7e862a746b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:46:e1:21:af:77:f7:e3:71:e9:84:e9:27:9f:
                    ec:b4:eb:28:a3:5e:41:6a:a0:e1:e4:7a:4c:5b:f6:
                    19:11:b8:00:64:02:2e:26:57:52:59:bf:c3:97:da:
                    02:b6:98:c7:f7:d4:63:ea:ae:c6:55:0b:17:be:b0:
                    fc:ce:25:25:2a:02:fd:ba:f2:cd:d8:4b:36:6d:1e:
                    af:ae:a5:b5:c0:cb:1c:43:c7:63:26:2f:cb:31:bb:
                    de:80:41:de:c3:e1:9c:24:61:80:61:dc:e6:ee:08:
                    ce:2b:0b:67:1a:d0:53:19:61:48:f6:4a:70:6c:4f:
                    a4:6d:ce:c6:d8:67:82:b0:3f:fa:5a:26:2d:85:2c:
                    fc:dd:f5:9a:0a:89:c3:79:bb:07:aa:85:b0:80:81:
                    e0:9a:d7:c1:30:8d:58:aa:3b:9a:1d:ca:76:ed:f1:
                    36:81:7e:c7:c7:a3:57:e1:ab:46:6b:4f:c8:20:61:
                    1f:1e:61:ac:b3:4c:32:41:e7:07:f3:a5:dd:a3:b3:
                    11:fd:8d:03:f6:3f:88:c1:8b:39:1b:0f:ed:a8:cf:
                    34:ff:4b:bd:c4:f4:15:3f:cb:45:99:70:76:0d:53:
                    b6:f7:1b:eb:eb:a4:b6:23:05:cf:33:c6:20:46:2b:
                    e0:4a:73:01:1f:79:fa:13:45:7a:de:60:c0:eb:9e:
                    22:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AE:3C:94:D0:E1:1C:89:F8:A8:99:B3:F9:F2:B9:36:0D:21:A0:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/4e2c01a0-0141-3419-a05b-416705d7f935.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:3f:50:b6:8d:a2:b1:54:47:3f:54:89:3d:4d:5a:ad:de:e8:
         2d:f8:8f:f2:5c:e3:96:64:97:3a:09:73:2f:82:83:1d:cd:8f:
         cc:50:88:95:24:e5:ba:e4:99:0c:8b:e0:b7:c8:fe:01:db:d8:
         c9:17:d6:3c:f8:05:74:10:dd:b8:ba:e9:7b:18:16:62:cd:4a:
         48:2a:35:ca:aa:aa:8b:52:be:d3:a6:ed:2b:8d:06:3a:45:83:
         9a:4e:75:88:58:11:ec:67:04:cf:60:f6:6c:a2:9f:85:cc:66:
         4d:08:10:00:12:e6:92:6c:c3:2c:87:e1:f7:5b:23:3f:7a:64:
         35:61:7e:14:0a:e4:5d:46:90:3d:a3:66:03:c1:57:73:19:86:
         28:ef:64:6d:07:63:1a:55:9c:81:66:a1:bd:db:b0:2e:59:a9:
         bd:58:68:cc:4c:f8:5d:19:e1:78:66:c1:5d:e6:2e:63:08:dc:
         2e:d4:39:c5:7b:e5:13:e8:42:c3:33:de:18:eb:7d:64:cc:2e:
         17:20:a0:5d:94:ef:1b:b5:fd:5e:45:4a:ba:04:45:b5:17:51:
         72:05:76:e0:f7:a1:71:da:1f:1a:06:b7:e8:f6:d1:71:1a:e4:
         ec:30:e2:b2:23:d3:06:97:82:df:25:63:8d:87:08:1e:c9:f8:
         91:9b:4f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:54 2024 by rpki-client on console-fra.rpki-client.org