Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/4ebf427c-55b4-3ea1-9ed5-96d72acc9c4a.roa
File:                     4ebf427c-55b4-3ea1-9ed5-96d72acc9c4a.roa (raw, json)
Hash identifier:          LkbVzETXA8haI80nb0rqUOGzHUh5IqOO/Yx/VoxQDk4=
Subject key identifier:   2D:11:86:FB:AE:60:4E:96:1C:9E:D5:E5:4E:E7:67:EF:1D:10:DC:C0
Certificate issuer:       /CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
Certificate serial:       010D0C9F4328584770CB9CDE6213E467961E9580
Authority key identifier: 49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/4ebf427c-55b4-3ea1-9ed5-96d72acc9c4a.roa
Signing time:             Sat 05 Oct 2024 13:00:42 +0000
ROA not before:           Sat 05 Oct 2024 13:00:42 +0000
ROA not after:            Fri 03 Jan 2025 14:00:42 +0000
asID:                     142046
IP address blocks:        2602:f9a9:b00::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:70:cb:9c:de:62:13:e4:67:96:1e:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
        Validity
            Not Before: Oct  5 13:00:42 2024 GMT
            Not After : Jan  3 14:00:42 2025 GMT
        Subject: CN=dcf30ac6-4693-4de6-82cf-1591df69f582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bc:20:e2:36:e5:75:b3:92:5d:ca:ba:c8:72:
                    36:b2:7c:bc:a5:48:c6:a4:98:c8:76:b2:65:0c:7e:
                    d3:35:b0:d9:4c:76:e1:3c:77:fe:07:38:30:3c:8b:
                    b9:41:18:3f:20:0f:bd:5d:71:44:0a:dc:dc:ad:94:
                    39:87:13:41:50:be:32:3f:77:16:39:f4:9a:8f:4c:
                    c7:c9:7e:ef:2b:0b:f3:2b:88:b7:42:73:21:3e:9d:
                    b0:af:36:97:8c:ac:91:90:04:b4:c9:33:e4:17:51:
                    28:cb:43:20:b2:b5:e4:c3:c1:43:5c:7c:47:e1:f8:
                    5b:9e:f3:60:6c:9d:e7:2d:bd:36:94:b9:13:92:8a:
                    5a:36:c7:7d:3c:11:07:27:1e:94:1f:64:97:84:7f:
                    af:3f:da:3c:49:aa:64:e3:0c:55:f5:4d:db:50:af:
                    d0:18:e7:e6:98:cc:dc:d7:af:03:58:f2:f8:f2:fe:
                    a3:ca:39:b6:2d:52:50:0b:ee:36:c4:8e:6d:9a:c7:
                    14:ab:1d:a7:14:75:b8:8c:62:a6:2e:3c:a2:30:40:
                    09:be:9a:09:79:9e:95:64:ed:03:a9:e5:db:8d:40:
                    7c:11:81:af:62:83:d1:68:55:e2:02:63:6e:b5:a2:
                    1e:fb:fe:dc:3b:55:c9:f6:de:75:74:b0:1a:7e:a6:
                    5c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:11:86:FB:AE:60:4E:96:1C:9E:D5:E5:4E:E7:67:EF:1D:10:DC:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/4ebf427c-55b4-3ea1-9ed5-96d72acc9c4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl

            X509v3 Authority Key Identifier:
                keyid:49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9a9:b00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:75:d5:2d:e1:7f:8e:b9:e2:ef:f5:88:5c:c5:ae:fd:fa:dc:
         14:ed:60:9d:6c:89:de:59:14:5c:d1:e4:84:fc:d4:24:c6:67:
         d6:5a:53:2c:22:a0:cc:39:88:87:b6:4b:ca:53:c3:3a:af:ae:
         df:1d:c8:e0:88:b9:bd:37:7f:24:4e:2d:7a:99:22:ee:4b:8f:
         72:dc:b8:7d:f4:ca:4d:37:b8:f3:9a:13:5f:5c:eb:bc:3b:22:
         be:be:bd:12:45:47:33:6f:e0:80:fe:04:ae:dd:ac:a3:ef:1f:
         b4:38:01:42:91:60:ad:16:35:e2:a6:cb:fc:85:eb:70:ed:1f:
         6a:28:25:b2:e2:2f:1c:a5:68:c3:41:21:d3:fe:42:1a:a0:76:
         24:51:35:c0:65:4f:1b:02:1c:81:e0:78:2e:83:d1:b8:6a:1a:
         3e:d4:90:40:b4:28:6e:ed:d7:b4:50:33:dc:e6:98:4e:b1:8b:
         9b:dc:d4:29:85:66:f6:c6:74:28:7d:82:78:67:bd:a6:6a:73:
         13:c4:a0:02:fe:16:24:a4:5a:72:f0:15:c2:e7:c9:a6:7c:f1:
         f2:0a:62:3d:8d:a6:85:e6:01:c4:68:61:ca:d3:51:76:b0:41:
         f1:dc:3f:94:c7:72:e4:29:ec:5b:1a:6f:af:b9:84:52:43:80:
         7c:f5:6e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:27:10 2024 by rpki-client on console-ams.rpki-client.org