Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/8447c4a2-c4ab-3b5e-9bc5-2908a1e396e8.roa
File:                     8447c4a2-c4ab-3b5e-9bc5-2908a1e396e8.roa (raw, json)
Hash identifier:          x6NxZDbdy/wHg6kVSfoV+H76fYWmm8mUP/sD0IraPSo=
Subject key identifier:   EE:84:98:F3:9E:8C:3A:A7:1B:4F:C4:65:4E:8F:4D:FD:56:00:C7:D5
Certificate issuer:       /CN=75d2cba5-acec-4ba8-ade7-0f83a6aefd59
Certificate serial:       010D0C9F432858471FD5DD9BE3A8E84DA9507180
Authority key identifier: 0B:42:83:AD:39:29:A6:89:DF:8C:7F:D7:13:47:46:6F:8F:CB:EF:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/8447c4a2-c4ab-3b5e-9bc5-2908a1e396e8.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     23077
IP address blocks:        2602:f9aa::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:dd:9b:e3:a8:e8:4d:a9:50:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75d2cba5-acec-4ba8-ade7-0f83a6aefd59
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=960468c4-cbd0-4c34-a383-5f53f2331c5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:da:87:65:0f:59:61:e5:72:68:c6:f0:62:cf:
                    a9:ee:03:83:a6:4e:a8:50:94:3d:28:91:6e:61:99:
                    0b:3f:4d:7e:48:1e:7d:45:10:48:65:87:02:1a:a3:
                    ca:12:59:cd:7d:df:5f:6b:aa:28:4d:a9:6e:5d:e6:
                    0a:bd:c5:a2:a4:6b:51:04:7a:cb:33:a9:8f:b0:1f:
                    f4:ea:c3:2f:85:16:7a:c7:86:f5:77:b8:e6:16:e8:
                    fb:29:e9:69:35:bb:3a:07:4c:45:15:36:d8:4a:7f:
                    41:0f:a8:de:f9:1a:a5:e2:12:1d:6a:66:28:11:1f:
                    3d:1e:d1:c9:09:d7:75:03:9f:0f:fd:83:9f:e4:87:
                    7f:2a:5b:bc:08:87:d1:d5:e4:86:80:81:ea:21:bd:
                    cd:c1:a5:06:e2:06:74:ba:d3:47:ad:8f:dd:f7:01:
                    67:42:3e:37:0e:6b:05:f2:de:d7:bd:e3:3d:4c:0b:
                    c6:3d:a8:fe:9f:86:95:fd:d8:be:75:13:ad:da:57:
                    1e:bf:63:50:d1:9d:62:25:42:90:8e:91:53:1a:01:
                    ef:83:7c:3e:c7:64:66:02:f7:5b:e1:af:bc:cd:59:
                    40:ff:db:49:b3:4e:88:43:ab:0d:7a:22:9c:ee:ea:
                    13:32:03:b5:72:9e:c3:54:fb:0f:50:4a:da:a1:cf:
                    67:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:84:98:F3:9E:8C:3A:A7:1B:4F:C4:65:4E:8F:4D:FD:56:00:C7:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/8447c4a2-c4ab-3b5e-9bc5-2908a1e396e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.crl

            X509v3 Authority Key Identifier:
                keyid:0B:42:83:AD:39:29:A6:89:DF:8C:7F:D7:13:47:46:6F:8F:CB:EF:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9aa::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:9c:46:5f:d4:db:ab:58:b6:87:a2:74:83:4c:93:17:99:85:
         81:1d:1d:42:d6:45:d8:49:63:02:05:a5:62:f3:b8:ef:b6:6c:
         a2:fe:9c:83:70:2e:42:26:13:f9:0f:f3:fd:4d:0d:b5:1b:ee:
         c5:6b:02:e4:20:77:0a:42:bb:b0:3c:98:5a:c2:27:f7:8b:5e:
         d3:48:52:70:f6:bc:bf:74:d5:69:24:9f:9a:6e:71:a0:1b:e0:
         67:a5:51:71:a1:5e:4f:22:ac:c5:b8:2b:b1:c1:23:7c:b9:1b:
         2b:61:32:5b:d3:a3:cf:cc:59:0c:77:e2:d2:7f:6e:b6:ab:b1:
         9e:e4:b1:b4:18:48:d1:d3:a3:d7:76:7d:ab:c0:8a:60:6b:0b:
         c2:1d:3e:97:18:6c:11:34:d1:7f:ce:99:58:5d:9e:1f:19:30:
         d5:5d:28:b9:0e:a6:f8:de:ef:1f:93:dc:6d:8a:33:e6:94:c3:
         c0:1c:ea:47:c6:3a:b1:33:b2:14:86:4b:ab:de:0d:3e:13:d9:
         6f:36:40:4a:06:66:ba:bf:81:f6:c3:35:03:5d:fa:0f:e1:30:
         c0:0c:bc:6c:db:c3:27:12:cd:4d:41:8a:34:11:ae:1d:2c:df:
         4c:ad:78:47:ba:1c:28:12:c3:fb:d6:af:37:50:26:f0:93:75:
         63:4b:c0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:10 2024 by rpki-client on console-ams.rpki-client.org