Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/f57ff3b7-ed91-3c21-a948-06eea118c8d3.roa
File:                     f57ff3b7-ed91-3c21-a948-06eea118c8d3.roa (raw, json)
Hash identifier:          xfjVGwauCJyII0OluAwPIno0ab4bnlwd+fF0NzNp4i4=
Subject key identifier:   6E:1F:F0:99:1A:BF:A6:88:96:BA:E7:4E:E7:32:2E:F1:FB:81:75:4D
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F432858471FD5DD0CBBF680CB7BC51B00
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/f57ff3b7-ed91-3c21-a948-06eea118c8d3.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     39618
IP address blocks:        2602:fd92:120::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:dd:0c:bb:f6:80:cb:7b:c5:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=8e856e61-8bbb-4282-b70a-073c773781e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ba:cf:02:e6:64:dc:04:f6:aa:31:e3:96:78:
                    34:80:ef:1f:d9:4f:90:a3:15:dd:18:9c:1b:8f:2e:
                    43:aa:82:9f:78:b9:be:5f:63:29:dd:20:b4:59:b8:
                    16:d0:c9:c1:71:36:e9:e9:bb:49:19:b9:94:66:f2:
                    3a:92:ab:67:b7:a9:93:49:1e:dd:3a:4e:55:da:96:
                    57:95:3c:b1:07:e0:ef:a5:8d:fc:f3:af:a2:26:1a:
                    2d:1e:44:57:09:81:78:90:b3:84:f6:f6:3e:e4:67:
                    8c:0b:dc:36:17:5c:f9:8a:af:82:d5:d3:24:c4:1a:
                    8a:38:1c:57:44:b3:b9:74:af:e8:b9:a5:5f:b9:28:
                    b9:8f:2c:fc:07:4d:5a:38:9a:47:d8:9c:6a:45:1e:
                    f5:47:07:2a:0e:44:5d:a3:7a:c6:30:6f:a0:33:28:
                    c3:b8:90:51:00:6d:03:66:54:eb:0f:ca:d9:8e:cb:
                    2d:89:56:91:79:b1:a3:18:f2:48:14:bf:8e:ec:2e:
                    8a:35:03:e3:44:a6:5c:c9:c2:db:b1:cd:74:f0:7b:
                    d1:62:c3:b6:03:5a:4d:39:68:f0:f7:f6:30:9a:84:
                    71:97:7d:0e:31:d2:c6:ab:63:14:7a:e9:03:82:69:
                    83:97:44:1c:78:2e:e0:49:36:25:00:17:a1:81:e8:
                    a9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:1F:F0:99:1A:BF:A6:88:96:BA:E7:4E:E7:32:2E:F1:FB:81:75:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/f57ff3b7-ed91-3c21-a948-06eea118c8d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:120::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:84:e7:5e:00:38:af:60:a6:16:3b:12:ed:51:36:78:81:ae:
         f6:62:d3:b2:d4:59:97:67:bf:f9:c2:cd:5f:b2:db:43:12:0e:
         7c:28:1f:6d:26:d7:98:e6:5c:58:d6:a3:7c:4b:72:b1:e3:0a:
         a8:9d:79:7e:52:e7:47:06:7e:cf:23:87:34:bf:9a:e7:9d:a9:
         e9:53:5e:29:d0:36:e2:81:1a:b9:ef:13:8c:ef:ed:24:1b:71:
         12:55:66:64:28:b1:27:e6:e7:a3:78:0c:b8:59:b8:e1:55:76:
         aa:e5:17:3c:8d:68:b5:4c:a5:f6:20:c9:08:20:f5:ad:3e:e6:
         1e:bc:a9:a2:3e:0f:5d:a9:5b:c1:89:3a:b6:be:59:6e:ae:9f:
         58:02:5c:dd:94:0c:f9:47:c6:4e:c1:de:d8:94:35:e3:3f:76:
         05:76:2b:8d:87:2f:87:7b:9e:7d:4e:ea:06:f8:1b:23:e1:e6:
         be:76:93:6c:e9:0c:98:96:38:ec:2c:1e:e5:d1:7b:81:2a:a5:
         dd:33:b2:1e:d7:85:ef:05:96:89:0d:a0:c2:df:76:7d:71:0d:
         45:45:3a:a0:0c:04:91:e0:76:2e:2c:6e:04:c0:6e:01:c9:1e:
         ca:ca:fc:17:3d:a5:c2:83:84:7c:ff:a4:89:4f:08:d7:76:69:
         63:8d:2b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:07 2024 by rpki-client on console-ams.rpki-client.org