Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/2b7ff483-6330-3dfe-a36c-9b9cc9dc413f.roa
File:                     2b7ff483-6330-3dfe-a36c-9b9cc9dc413f.roa (raw, json)
Hash identifier:          +BNLe5nwyGceDOGN18UxXHwmY5IdX2kc0AbIw2ibbNA=
Subject key identifier:   37:53:54:53:43:65:8E:DA:CA:62:E5:EE:47:F7:90:33:58:1A:91:A7
Certificate issuer:       /CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
Certificate serial:       010D0C9F43285847DC64C560B5BE7E23CFFD9D80
Authority key identifier: 49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/2b7ff483-6330-3dfe-a36c-9b9cc9dc413f.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     199203
IP address blocks:        2602:f9a9:400::/38 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:c5:60:b5:be:7e:23:cf:fd:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=9cd75aef-6750-4871-9733-4eb6ca447fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7d:b8:0c:df:cf:00:84:90:e7:c1:dc:81:37:
                    23:7a:b7:2d:f5:81:18:fd:c5:60:97:52:9f:5f:07:
                    42:aa:9b:8d:20:29:b8:64:0d:d8:81:16:e6:ee:ab:
                    ee:e8:eb:a8:5f:c8:e0:e1:9a:7f:92:52:88:58:3c:
                    90:65:8e:2f:d3:a5:8c:d5:67:2f:5a:2e:af:d4:60:
                    e1:05:d2:0e:24:35:5d:0e:d1:2d:5c:2d:21:41:84:
                    b2:87:23:d0:9d:4e:3f:14:ce:16:24:33:de:72:7b:
                    fc:b9:26:8d:7a:17:51:3f:87:46:a2:0f:72:1a:69:
                    f5:f9:8d:12:d2:d0:50:ba:45:72:75:4f:bd:a3:ba:
                    ab:a3:e1:78:ad:cf:67:69:ec:11:48:d2:e2:ca:dd:
                    03:b4:24:cf:59:41:7f:15:a0:75:47:cb:e3:60:cf:
                    98:78:2e:be:47:b5:a2:44:88:81:3d:38:47:7c:38:
                    c1:eb:e0:13:86:d5:f7:98:48:07:d0:6a:16:31:de:
                    53:0f:eb:98:d9:28:da:1a:c2:54:ba:88:39:a8:25:
                    60:d1:fa:1d:7a:07:8c:2b:01:85:39:05:6f:e3:65:
                    db:06:8c:8f:fa:ad:ae:9e:16:bd:17:79:35:9f:fa:
                    9a:ce:5c:a5:04:b2:58:f5:f2:68:b1:86:7b:37:f1:
                    33:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:53:54:53:43:65:8E:DA:CA:62:E5:EE:47:F7:90:33:58:1A:91:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/2b7ff483-6330-3dfe-a36c-9b9cc9dc413f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl

            X509v3 Authority Key Identifier:
                keyid:49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9a9:400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:19:68:68:86:0c:e1:28:49:b7:1a:60:de:32:48:37:d4:99:
         05:8e:4d:80:9d:e3:57:f6:8b:bd:2b:fe:53:52:b3:4d:33:4c:
         8c:f5:e6:5b:15:3e:00:bb:f1:f2:bd:ff:5d:13:d4:fc:4e:10:
         95:bc:2f:35:23:33:3a:17:00:f7:6c:e6:5f:27:c3:4b:c9:fd:
         cc:a0:b4:cd:bc:64:a5:dd:2b:c7:4e:2a:63:4a:36:d3:5d:73:
         63:dc:43:62:42:36:9e:95:05:e0:c1:a3:e0:16:35:ab:1c:bb:
         53:38:0a:0b:34:b6:7b:ff:7d:bf:2b:fb:6a:1b:17:f8:45:df:
         bb:49:44:fd:39:b0:70:95:6c:91:d9:09:20:3f:d1:f7:8f:fd:
         94:47:05:de:99:1f:b3:cc:e8:3b:e0:8c:0e:e5:51:09:09:27:
         52:cf:13:2b:3d:e3:77:4b:46:7f:3e:1e:a4:26:1e:e0:4f:ec:
         52:00:4e:f8:bb:58:5b:b5:95:4b:82:b7:3c:7c:93:b8:24:21:
         bb:41:da:2b:dc:a6:8f:86:2c:0f:7a:22:4e:cb:7b:dd:ba:55:
         99:6c:a0:ce:9f:01:3b:81:36:4a:4c:f2:8e:62:c6:1f:5c:05:
         ea:c2:35:2a:89:d8:14:2d:9d:91:45:46:ce:32:b7:0f:9d:23:
         1e:03:a5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:27:10 2024 by rpki-client on console-ams.rpki-client.org