Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/6a761f86-d2f6-375e-8b37-52b4d7d0a670.roa
File:                     6a761f86-d2f6-375e-8b37-52b4d7d0a670.roa (raw, json)
Hash identifier:          cY9WA0IQrminVGjhyipT1x48TghP+GBWEfk3uydAesc=
Subject key identifier:   23:5F:6F:29:1F:21:74:9E:58:3A:32:AC:84:58:BE:EF:06:75:08:16
Certificate issuer:       /CN=78f2a37d-9624-4031-908c-08f70f9830f9
Certificate serial:       010D0C9F4328584765A0F7063C2F60B287E22880
Authority key identifier: 77:56:2C:D7:F3:9A:CB:1C:96:F0:48:AF:50:F2:E3:FF:CD:0C:E0:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/6a761f86-d2f6-375e-8b37-52b4d7d0a670.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     399794
IP address blocks:        2602:f9f2::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/78f2a37d-9624-4031-908c-08f70f9830f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/78f2a37d-9624-4031-908c-08f70f9830f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:f7:06:3c:2f:60:b2:87:e2:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78f2a37d-9624-4031-908c-08f70f9830f9
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=1d871391-c9fa-48ba-bc6c-8ff62fe01884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:99:15:75:56:13:5c:93:ba:ec:ff:b0:81:c4:
                    ca:85:f8:9c:3f:9d:1a:ee:55:34:b6:fa:c8:83:e3:
                    84:4a:6b:8f:8a:b5:40:e0:65:42:ba:b5:65:88:7d:
                    f7:f5:69:23:7f:23:7c:4e:e3:28:44:13:2b:29:bf:
                    51:77:fb:ca:fc:44:61:44:9b:ef:ca:d7:1b:e4:55:
                    52:c4:02:17:d2:86:87:c8:b9:6d:5b:09:50:73:25:
                    21:0f:ae:bd:06:3a:1a:61:7b:01:4a:ee:26:34:56:
                    a4:61:12:9d:65:39:25:35:b8:3b:6a:a2:ef:02:28:
                    28:e7:ac:f2:6c:b4:f6:ad:44:1c:72:d1:97:b0:38:
                    91:11:70:38:c5:64:45:f3:d6:aa:1c:eb:ea:82:a7:
                    ab:48:22:14:05:db:5d:bc:6a:da:67:71:2e:c3:4e:
                    f4:3e:f9:65:d5:9e:36:e2:23:9c:40:e6:57:78:93:
                    78:5f:4a:4c:ab:3a:ce:24:79:c3:82:2b:0a:b3:76:
                    55:c4:4e:23:2b:32:b7:cf:cc:4d:5d:19:40:4f:86:
                    16:7d:7d:03:df:87:1a:2d:08:31:69:b6:7c:06:05:
                    5c:ba:8c:f7:fc:d6:c2:a1:6d:bd:64:77:41:48:01:
                    46:46:c2:48:e6:b7:cd:aa:5f:62:67:3c:b6:75:3f:
                    39:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5F:6F:29:1F:21:74:9E:58:3A:32:AC:84:58:BE:EF:06:75:08:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/6a761f86-d2f6-375e-8b37-52b4d7d0a670.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/78f2a37d-9624-4031-908c-08f70f9830f9.crl

            X509v3 Authority Key Identifier:
                keyid:77:56:2C:D7:F3:9A:CB:1C:96:F0:48:AF:50:F2:E3:FF:CD:0C:E0:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f2::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:7f:66:0c:1f:c1:13:f2:11:2b:d4:e7:2f:f3:ab:aa:78:ef:
         03:76:af:72:a2:81:c2:59:fd:16:3b:85:98:33:1a:f2:22:71:
         e8:5f:cd:05:01:6a:6d:26:46:26:c3:c2:78:65:d8:e7:20:6c:
         fc:e8:5c:de:f4:be:22:87:48:d7:09:5f:cb:cc:5f:f2:47:c8:
         1e:b1:6e:42:a5:07:c7:77:58:30:00:ef:be:10:12:f4:a6:66:
         b5:46:58:d4:8d:9c:40:61:be:ab:1e:85:4b:a4:bf:15:61:19:
         ca:3f:41:22:bc:46:40:ab:b5:c6:c3:47:5f:83:c3:14:a7:85:
         8a:96:f8:97:05:61:9d:1c:30:c7:93:3e:f9:57:78:5a:8f:d8:
         37:5a:49:65:2b:60:38:31:86:80:78:b7:e5:1e:f0:c8:f0:1c:
         9d:e5:f5:b0:e0:88:d6:b6:10:97:34:0e:ef:51:d8:76:0f:45:
         c6:77:b9:e5:31:00:45:86:93:d2:59:71:81:2c:62:36:53:89:
         0f:27:a6:74:e5:b6:b5:a0:17:ef:0d:23:ea:07:83:e7:92:38:
         e8:a8:8d:a0:a9:1c:34:c2:30:38:c2:02:8d:13:b3:5a:7f:e0:
         d5:90:15:92:37:dd:27:d4:32:54:7a:be:ba:f2:9e:4b:44:3a:
         03:56:14:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:57 2024 by rpki-client on console-fra.rpki-client.org