Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/ea8ae3ee-7a13-379c-a42e-7118ec41768e.roa
File:                     ea8ae3ee-7a13-379c-a42e-7118ec41768e.roa (raw, json)
Hash identifier:          R8tKD+8ZrdalYkzE1JW6PQauQwwCrVy8zak7oM/vtbQ=
Subject key identifier:   79:CE:E1:5D:9C:28:FB:E6:37:94:97:0C:F8:F1:47:47:EB:0D:8A:98
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F43285847C8D9E3A1FF0FB6D8FFCD2880
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/ea8ae3ee-7a13-379c-a42e-7118ec41768e.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     39618
IP address blocks:        2602:fd92:b00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:e3:a1:ff:0f:b6:d8:ff:cd:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=ac613781-0aae-43e2-b0c5-32629075e64b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:cb:11:9c:f6:7c:38:20:28:0a:6d:d5:29:ee:
                    ce:f3:93:4d:8d:4c:2e:08:30:82:53:8e:b5:f8:ca:
                    bf:7b:ea:1c:6d:fe:a4:70:6e:fb:29:bb:54:c5:e2:
                    42:9b:34:6a:8b:1d:4b:47:2e:4c:7e:90:f5:1e:47:
                    ce:65:ce:8c:bf:2c:47:88:2f:50:63:0c:26:b1:a4:
                    af:3b:5c:b9:4f:ea:9b:19:be:73:6e:36:bd:78:94:
                    7c:07:23:96:61:7e:41:e1:ad:f2:2b:ba:f8:41:6b:
                    88:69:0a:13:28:6f:5e:8f:a2:52:af:71:aa:66:f8:
                    51:47:70:7c:82:0d:aa:34:78:df:f9:58:23:b8:37:
                    8b:d5:3d:ec:ef:99:0c:bf:03:ff:67:26:e8:24:22:
                    b0:f7:5e:85:87:06:c6:e9:3b:75:4f:93:7f:96:08:
                    5d:6f:e8:0e:f3:fd:b2:3e:1f:37:a8:0b:44:b4:84:
                    42:e6:74:95:60:4a:f3:ae:92:99:cc:4c:fd:e6:8d:
                    f2:23:10:0b:a9:fe:5d:6c:b8:51:9b:33:ff:7d:47:
                    7b:82:9b:ae:35:d1:13:ce:e1:d0:fc:b6:5b:30:78:
                    17:61:07:11:1b:64:00:22:99:50:14:f2:1d:ca:5c:
                    d2:cd:49:39:cb:9c:b7:f2:0d:53:83:9b:ae:89:c1:
                    d0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CE:E1:5D:9C:28:FB:E6:37:94:97:0C:F8:F1:47:47:EB:0D:8A:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/ea8ae3ee-7a13-379c-a42e-7118ec41768e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:b0:78:c1:bf:9e:48:af:2d:fe:d8:89:a0:2b:f6:28:19:24:
         c6:95:19:d2:06:be:db:0a:87:47:50:a1:53:a3:a5:ec:38:cb:
         c2:a9:d7:cc:8d:92:b0:73:c8:09:3e:b5:b8:ba:2b:c6:76:f5:
         38:16:80:1a:7c:d0:e4:17:80:03:df:ed:c8:26:99:96:ca:47:
         8e:a1:02:de:2c:bc:38:c2:a0:af:a1:54:76:15:98:dd:fc:4f:
         38:da:84:3b:56:50:61:b8:17:96:84:28:39:9d:50:dc:89:89:
         30:f1:ac:e0:8b:35:73:2e:fe:22:2a:28:50:40:bf:db:82:e3:
         4c:c4:29:9c:c3:45:0d:04:44:f9:8e:20:ee:92:f6:57:66:87:
         8c:a7:e6:ff:51:68:14:ed:b0:f7:0b:dd:31:88:30:85:df:7e:
         04:e7:c2:a5:a3:3c:a7:7d:36:94:0e:e7:0d:21:07:a2:21:72:
         cf:0c:47:7e:8a:75:a6:95:40:7d:11:52:ab:fa:6b:60:30:fd:
         7e:6b:ca:4e:e1:cf:56:58:ae:ea:1e:5e:4e:83:8f:75:ea:91:
         b3:3d:93:bd:1b:db:c9:3c:97:73:cb:6f:09:1a:e4:e5:39:f4:
         6c:bb:66:d7:5d:3b:29:ac:c5:22:bd:57:50:1c:ae:5f:18:28:
         e8:0b:23:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:07 2024 by rpki-client on console-ams.rpki-client.org