Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/c762d138-d90a-32b4-93cf-cb9fa7c1e42e.roa
File:                     c762d138-d90a-32b4-93cf-cb9fa7c1e42e.roa (raw, json)
Hash identifier:          xau8ZciKYZQehHEd9A+gQC7ThcCwXUk7/bmfPjBeIN4=
Subject key identifier:   D8:AD:5C:1E:99:D9:48:3B:87:BA:69:49:E4:A5:3D:BA:69:DA:C6:E8
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F432858477396613CB825955B1CB38340
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/c762d138-d90a-32b4-93cf-cb9fa7c1e42e.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     3320
IP address blocks:        2602:fd92:c60::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:61:3c:b8:25:95:5b:1c:b3:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=b84ceef4-da51-4d9a-817e-08215f84d40a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:88:c0:94:8d:27:ee:42:5f:8b:78:01:7e:82:
                    b8:be:4f:60:72:c4:84:ec:ed:34:e8:b0:df:da:1b:
                    64:71:65:d7:81:0c:ea:53:55:c0:42:60:1b:99:ac:
                    60:f0:43:8a:90:b9:b8:af:6e:d4:ef:d7:a4:0b:16:
                    9b:27:88:bc:35:d4:6f:d9:00:6e:60:06:a5:a5:d5:
                    2e:c1:ac:61:d3:a0:24:25:41:31:bc:86:b1:0c:3e:
                    ef:71:ac:af:74:08:44:7d:96:29:b6:c5:39:62:d9:
                    bc:95:3d:53:fc:36:32:24:52:d0:2b:4d:b1:d6:61:
                    82:43:85:c5:50:4d:78:2d:19:25:e2:a9:cf:fd:a3:
                    10:87:46:66:b6:00:58:7a:96:58:4c:76:e4:0c:c4:
                    91:5c:71:ca:2b:c5:3d:9d:3c:f8:e8:30:f8:3b:c2:
                    19:80:7e:ba:b2:c8:d8:5a:cc:8a:b9:59:ae:3c:66:
                    b1:cf:0e:2d:10:51:04:72:22:8b:49:37:43:17:88:
                    27:39:cf:c0:09:fc:41:54:f6:ea:ff:af:be:93:37:
                    d7:3b:05:7e:29:b8:d8:cc:fd:e2:6c:e5:76:f0:af:
                    5b:58:ba:b1:c0:2f:01:82:a5:99:6d:88:af:09:2f:
                    2e:c0:65:62:ba:38:01:8f:c9:6b:ef:59:13:d2:49:
                    9c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AD:5C:1E:99:D9:48:3B:87:BA:69:49:E4:A5:3D:BA:69:DA:C6:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/c762d138-d90a-32b4-93cf-cb9fa7c1e42e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:c60::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:4b:84:54:09:1c:8b:f4:7e:97:6a:1c:9a:51:b3:6d:16:f9:
         b1:b5:2a:bb:fd:44:aa:a2:c5:a4:d2:63:1f:ca:48:eb:21:78:
         6a:10:ca:ba:d5:5a:d8:b3:45:02:f8:50:e5:83:d6:94:f1:cb:
         20:4c:23:1c:f0:b5:dd:03:da:c7:44:e8:c8:72:91:0c:b7:b4:
         32:06:25:4e:2f:1e:30:ee:20:da:72:0b:85:c2:f4:86:d4:c6:
         5d:ad:78:ad:46:42:f2:e1:3b:b1:3f:90:50:48:ab:c8:76:49:
         cc:0d:f4:68:7b:97:88:58:16:a1:3e:59:fc:66:12:aa:3f:dc:
         a3:47:7a:46:ba:52:b6:de:9c:c1:8e:c9:b7:ec:5c:f8:f5:f3:
         0f:f0:2e:1d:43:7f:ae:b0:9f:a1:a2:1f:72:02:89:21:d9:dd:
         f2:f9:89:7c:19:92:66:45:4b:88:f3:c0:42:06:49:f4:73:bd:
         0d:45:95:fb:ad:8a:6a:a0:d1:57:b6:1a:87:6b:35:ce:20:35:
         27:a4:a8:84:f2:65:d0:fd:15:69:d2:c0:98:28:b4:61:c9:04:
         05:ae:dd:b9:de:6e:2e:14:46:56:c5:21:36:30:f7:55:58:25:
         a9:24:ab:d9:b2:60:52:0d:4f:23:79:9d:fc:ed:2d:ae:62:8f:
         54:bc:1d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:07 2024 by rpki-client on console-ams.rpki-client.org