Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/c61f1716-f306-3b92-b864-da2e99326e06.roa
File:                     c61f1716-f306-3b92-b864-da2e99326e06.roa (raw, json)
Hash identifier:          s9eq2kzOd5O6W7gyUdjc9NuZ4yKBBdtJ7GWikshM4UE=
Subject key identifier:   B0:5D:F3:6F:84:8B:60:18:9E:C1:C2:27:EF:1C:94:66:76:CB:9C:CF
Certificate issuer:       /CN=5541e022-414f-45f5-9426-a7643db1ec8d
Certificate serial:       010D0C9F43285847C3448D0D6B14C3628227FC00
Authority key identifier: F5:72:66:9B:FA:2B:D5:E4:58:2E:1F:EA:1A:CA:67:24:96:6B:3F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/c61f1716-f306-3b92-b864-da2e99326e06.roa
Signing time:             Mon 04 Nov 2024 02:00:36 +0000
ROA not before:           Mon 04 Nov 2024 02:00:36 +0000
ROA not after:            Sun 02 Feb 2025 02:00:36 +0000
asID:                     149020
IP address blocks:        2602:fa08:3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c3:44:8d:0d:6b:14:c3:62:82:27:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5541e022-414f-45f5-9426-a7643db1ec8d
        Validity
            Not Before: Nov  4 02:00:36 2024 GMT
            Not After : Feb  2 02:00:36 2025 GMT
        Subject: CN=989e15ba-829a-4d53-9b57-aac3a979f20b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f7:48:2e:42:25:bd:7a:dc:78:38:88:28:a7:
                    d3:5c:6b:a4:07:71:54:6f:be:8f:3a:a2:f9:2b:2e:
                    3d:7c:1e:2b:45:44:7c:de:15:c7:47:10:ec:85:4a:
                    f5:d2:10:7b:52:9d:ef:14:2b:db:34:d7:92:e5:4f:
                    8b:12:f8:77:a4:fd:40:69:5b:84:9e:d0:1a:76:27:
                    96:68:2b:32:85:5d:5c:5c:fd:f7:cf:22:ac:3a:9c:
                    bc:ef:bb:1e:06:2a:6f:0b:7f:54:fc:0f:7c:f6:9c:
                    39:2b:29:d7:98:5e:a2:39:92:dd:1f:e3:e2:69:b6:
                    b6:96:32:fc:ea:b6:17:5d:8b:6b:ef:20:83:fb:a6:
                    7f:f8:51:ce:62:20:33:1e:86:b4:18:01:55:25:03:
                    82:f7:59:9d:d9:a2:b6:d8:42:c8:97:e8:72:df:b8:
                    ee:f0:cd:19:3b:3e:35:98:d6:ef:d5:36:e3:ba:fe:
                    d8:d0:83:30:55:c5:58:fb:cc:96:39:49:d6:1c:67:
                    f1:0a:58:93:09:35:fc:e0:d0:04:a6:35:3c:d6:15:
                    6d:e6:42:d6:38:36:79:29:ef:15:0c:39:45:b4:7e:
                    f9:5c:91:62:9e:f5:83:fe:96:50:e4:c6:1c:10:15:
                    f6:9a:34:3d:ae:e0:0f:b4:07:da:74:56:cc:6f:76:
                    52:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:5D:F3:6F:84:8B:60:18:9E:C1:C2:27:EF:1C:94:66:76:CB:9C:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/c61f1716-f306-3b92-b864-da2e99326e06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.crl

            X509v3 Authority Key Identifier:
                keyid:F5:72:66:9B:FA:2B:D5:E4:58:2E:1F:EA:1A:CA:67:24:96:6B:3F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa08:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:3d:cd:ba:3e:4f:e3:28:29:5b:b3:eb:86:00:4e:fb:5f:27:
         ca:71:3d:e4:dc:2e:dc:84:42:b2:c8:e5:3c:9f:a6:fb:fc:3b:
         8e:0a:a6:72:b1:c3:40:8b:07:e1:3f:bf:52:5f:d1:7b:12:3e:
         87:3b:39:d1:30:ca:d2:f9:db:a8:eb:c6:9e:16:8e:d9:b9:6e:
         a9:da:95:ce:f5:fb:ad:8b:ce:a9:68:e5:44:70:0b:ef:cb:ad:
         ac:1a:12:36:8a:44:56:8f:1f:64:05:61:a8:c5:f3:ca:51:b3:
         8c:b1:6c:fa:8c:d7:08:27:37:81:5b:1f:17:a5:66:5e:e9:5a:
         f4:16:d9:7d:2d:74:76:42:d6:6e:73:9f:58:10:d5:71:46:f4:
         3d:a9:24:b4:11:48:78:f7:6d:40:8e:d2:5f:6c:51:b4:4e:be:
         c9:f8:7c:4e:d1:bd:1b:71:5f:c4:79:08:e8:95:46:53:69:f3:
         ad:9b:42:39:76:b8:f7:53:ac:e9:e4:c5:ed:5e:9e:4f:85:9f:
         77:26:56:d2:1a:ce:56:65:32:bc:ba:b5:5d:a1:3a:5f:bb:a0:
         48:7c:21:33:61:5e:36:9d:0d:ea:0e:57:42:3a:e0:7a:87:b9:
         7c:d7:de:90:73:66:fa:f0:df:0b:48:65:53:2b:2f:15:bf:8c:
         44:7b:31:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:27:11 2024 by rpki-client on console-ams.rpki-client.org