Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/639c829e-62a0-3bf9-8fcc-afc0a56075c8.roa
File:                     639c829e-62a0-3bf9-8fcc-afc0a56075c8.roa (raw, json)
Hash identifier:          k2ERGW7h+MwlEveiFtJMfKQCDLU5ka3+W+Z7a8KVmYM=
Subject key identifier:   A1:1E:B5:1F:27:B1:61:05:75:D6:A3:8D:AD:29:F2:AD:80:FD:AE:FC
Certificate issuer:       /CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
Certificate serial:       010D0C9F43285846CC0D3936548392F653B5CBC0
Authority key identifier: 49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/639c829e-62a0-3bf9-8fcc-afc0a56075c8.roa
Signing time:             Wed 07 Aug 2024 12:44:34 +0000
ROA not before:           Wed 07 Aug 2024 12:44:34 +0000
ROA not after:            Tue 05 Nov 2024 13:44:34 +0000
asID:                     199203
IP address blocks:        2602:f9a9:1ff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:cc:0d:39:36:54:83:92:f6:53:b5:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
        Validity
            Not Before: Aug  7 12:44:34 2024 GMT
            Not After : Nov  5 13:44:34 2024 GMT
        Subject: CN=65aab422-abab-41e3-abee-aee29a1687f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:15:5f:8b:ed:e8:2a:de:78:ed:0c:b8:60:e0:
                    71:34:c1:d6:66:ef:23:43:ce:ea:13:f6:40:ab:0c:
                    da:09:c2:72:d6:6c:85:d0:61:31:85:73:a3:7c:f4:
                    d1:32:8c:aa:ce:67:3c:63:a2:7f:c5:5f:1c:7c:59:
                    17:c2:4b:80:69:d2:cd:24:92:fe:01:81:cd:35:78:
                    38:92:cd:2f:cc:18:16:a4:c3:80:8f:1f:91:ac:d4:
                    17:17:7c:71:1a:db:b6:d5:63:52:a2:be:73:fa:f2:
                    3b:b3:ae:04:62:3c:7b:75:dc:1c:42:98:9f:e9:a7:
                    8d:40:77:e3:a2:29:b4:45:1a:c7:b4:e2:2e:ca:d5:
                    47:7f:b2:24:6f:20:5b:85:6c:32:fc:de:ea:d9:e2:
                    9b:90:30:a0:f7:47:24:fa:9f:ae:93:12:84:20:37:
                    8f:65:60:90:96:be:a5:f8:fc:37:56:f6:69:ae:61:
                    39:49:02:98:2a:de:2a:5c:ec:50:5d:f4:41:58:e6:
                    c3:77:8e:88:c4:45:fd:49:4d:cd:dd:7a:eb:9c:ed:
                    5d:99:ae:94:61:69:85:d8:21:66:0d:f7:68:89:76:
                    cf:75:15:78:52:c0:f2:ef:78:28:76:e7:c1:71:cd:
                    ac:29:01:0a:c0:eb:c8:4d:df:ac:7c:2d:80:be:ba:
                    53:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1E:B5:1F:27:B1:61:05:75:D6:A3:8D:AD:29:F2:AD:80:FD:AE:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/639c829e-62a0-3bf9-8fcc-afc0a56075c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl

            X509v3 Authority Key Identifier:
                keyid:49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9a9:1ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:21:8d:0b:6b:6b:d6:49:a3:31:43:3f:df:db:bf:30:ad:81:
         bf:77:49:5d:46:f0:3d:e3:11:cf:14:cc:26:e9:5f:8c:e1:70:
         57:c8:e9:29:9d:20:01:04:cc:b9:b5:4b:b5:48:d2:11:c9:ab:
         0a:0e:33:93:9f:62:9f:dc:d5:23:42:be:95:cb:ed:f2:7e:d7:
         6e:04:4e:17:1d:0b:22:72:ba:89:0c:35:4c:7d:37:31:cf:c3:
         d6:e2:98:49:54:9e:8b:4a:b1:1e:74:8b:35:8c:e8:68:99:d4:
         18:33:7f:5c:28:27:6d:c1:7b:b3:fa:11:b7:bc:a9:29:89:76:
         37:fd:4b:0b:bd:01:e5:ed:35:c7:d0:4c:86:71:34:bd:96:eb:
         5f:54:14:4e:1a:73:49:51:28:3d:7f:32:c3:83:94:e6:e2:ff:
         dc:ab:53:a6:ff:f9:fa:3f:18:1a:5e:ed:2d:23:a1:2a:35:a7:
         eb:1c:94:5c:a3:f7:5f:8c:b0:11:77:04:30:12:28:4b:18:8f:
         c2:d2:86:f9:3b:c9:1a:fc:94:11:56:23:36:25:63:41:8b:18:
         42:21:23:62:6f:56:03:3d:a7:2b:bd:e8:48:ea:90:5e:3e:3c:
         4a:43:b4:e9:e5:57:d3:0e:a4:44:23:c7:4e:2f:d2:57:54:53:
         1a:4c:82:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 19:58:28 2024 by rpki-client on console-ams.rpki-client.org