Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/51799e2a-7b71-32d1-a8cf-d07b8155b8c0.roa
File:                     51799e2a-7b71-32d1-a8cf-d07b8155b8c0.roa (raw, json)
Hash identifier:          ogKdvzYV+LqfqWrOdMD6KhOSxDUJImjp/YQM41LT8mY=
Subject key identifier:   88:98:EB:47:6C:3B:0B:3E:D8:65:DB:36:71:93:17:CA:3F:50:1E:4B
Certificate issuer:       /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
Certificate serial:       010D0C9F4328584761718CC18C13B8BB0B0A76A8
Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/51799e2a-7b71-32d1-a8cf-d07b8155b8c0.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     400238
IP address blocks:        2602:fc02::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:71:8c:c1:8c:13:b8:bb:0b:0a:76:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=8e335100-9833-4c5d-b74c-f6c33f0429fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2f:7a:ea:18:96:a5:41:e9:fb:ec:4c:93:50:
                    ea:1d:09:fe:b8:44:21:77:b4:c4:30:57:41:6e:fe:
                    59:d7:38:27:45:91:0a:17:72:01:5c:95:02:6d:7d:
                    11:c1:71:19:d4:5e:e7:14:2b:0d:22:b5:7a:38:31:
                    b5:f0:08:bd:bf:a3:ae:de:66:87:1e:32:27:48:f6:
                    df:03:a1:50:c6:73:9a:9a:ab:5d:9f:50:dc:a3:2f:
                    29:d5:aa:44:be:25:55:87:a5:b2:d5:b6:6e:b7:6f:
                    61:1d:68:67:dc:36:82:e9:84:7e:50:d4:2a:2e:87:
                    d5:f1:bb:f1:08:87:49:f7:a4:49:08:8f:ad:9d:76:
                    fd:35:ad:86:cc:58:90:dc:bf:f6:67:eb:ba:ca:54:
                    b5:df:8d:b7:64:08:ea:b3:02:5f:de:a0:61:87:fc:
                    61:93:68:21:32:ad:83:d5:fc:20:0a:8c:1b:68:03:
                    c9:3a:cd:b2:a2:56:3e:df:8d:54:21:51:86:5f:a9:
                    d0:73:05:a7:18:9b:02:de:36:90:1d:fa:69:a7:0e:
                    e1:28:9e:10:63:c7:47:48:32:c6:ea:74:ea:1d:ab:
                    eb:09:97:f9:e3:2f:e9:bc:c2:29:9e:70:c9:ca:af:
                    a0:d6:c2:f2:68:7b:7d:60:41:56:fb:f5:8b:e1:5a:
                    9b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:98:EB:47:6C:3B:0B:3E:D8:65:DB:36:71:93:17:CA:3F:50:1E:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/51799e2a-7b71-32d1-a8cf-d07b8155b8c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc02::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:2f:c3:40:f4:29:1d:ac:02:1e:02:de:c7:c1:69:f1:ec:c0:
         7a:06:94:fb:6d:d7:f3:8f:f8:05:91:44:d2:1d:98:d4:b3:74:
         e5:d0:a3:24:89:98:40:81:f9:5e:55:1c:cd:e7:b4:3f:54:e1:
         0a:f2:35:72:a6:48:b1:aa:19:99:0c:ac:ec:96:43:25:c6:d8:
         10:79:72:22:ca:9e:a4:21:31:0d:16:ad:4a:40:9e:39:48:cb:
         7e:52:79:1f:fa:7c:40:ec:5a:98:ef:15:41:b3:f0:84:59:19:
         67:fe:07:dd:57:44:86:96:ce:13:c0:87:db:28:05:31:96:32:
         92:17:e4:91:49:24:65:25:3d:e4:1b:ad:8f:ad:2b:6d:01:0b:
         59:68:f4:55:68:b9:47:b0:02:0f:5a:77:83:43:12:0b:11:07:
         37:25:5e:04:f0:7a:64:c8:6f:5b:cd:e3:8b:cb:07:c3:12:34:
         45:97:49:84:1d:68:71:2b:ff:dc:4d:21:30:d2:86:43:69:bb:
         50:84:35:e1:a0:73:e2:1a:39:61:40:c0:8a:97:e4:38:d2:b0:
         ec:48:6b:29:68:b9:f1:48:39:72:4c:09:6d:f8:cd:44:36:79:
         4a:0b:03:d7:c3:8a:4d:61:e4:04:26:fa:64:bb:15:07:3a:ab:
         df:fb:4a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:57 2024 by rpki-client on console-fra.rpki-client.org