Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/870d9d01-6df9-35c1-a41b-28d60f6cb35a.roa
File:                     870d9d01-6df9-35c1-a41b-28d60f6cb35a.roa (raw, json)
Hash identifier:          OPXsXrpxUyz5f3Uv6yhyMx8ncEz4ZaW7jNxBsUGEOjY=
Subject key identifier:   37:13:57:69:C4:05:EF:5A:EB:22:3E:36:F1:61:E7:5C:47:2C:76:1F
Certificate issuer:       /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
Certificate serial:       010D0C9F43285847CFD4A8AC4323A3034FBD72A0
Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/870d9d01-6df9-35c1-a41b-28d60f6cb35a.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     5744
IP address blocks:        2602:810:d000::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:a8:ac:43:23:a3:03:4f:bd:72:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=159b4425-17fd-4c6e-bd3e-f4db30474994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:41:ed:e7:f6:f4:94:e3:7e:7c:df:a6:8d:87:
                    f6:2c:1d:5b:c7:cb:f3:1c:e5:54:cc:f1:9a:7d:01:
                    c6:cd:3d:54:79:ae:4a:c0:af:a1:e9:3b:64:d0:f6:
                    25:1f:d6:2a:54:df:0f:04:43:44:69:9c:b3:e7:8b:
                    3b:d5:b6:13:7e:ba:ed:80:70:3d:94:59:05:0b:78:
                    9e:a0:53:4a:2d:22:ae:4e:02:e6:cd:8b:d4:33:dd:
                    df:a6:47:03:76:bc:82:c8:d5:15:0f:dc:37:ba:e5:
                    a2:9b:0a:82:78:af:3f:21:ca:82:86:7c:ec:d1:25:
                    c2:79:1a:15:17:4e:83:7c:cb:f7:46:fa:1a:aa:41:
                    46:f6:1c:53:e9:03:bc:71:31:71:5f:cd:ac:68:c4:
                    3e:4c:0b:95:db:b0:4e:69:50:ab:d3:e2:05:7c:f4:
                    80:46:8d:e4:3b:88:de:dc:59:ba:b1:4a:03:6d:29:
                    aa:c2:4f:11:9f:a5:56:c6:2e:ab:fb:81:bd:a8:ad:
                    19:83:02:5f:a8:eb:87:a3:c3:21:97:53:f7:ec:0e:
                    aa:c1:ff:59:90:3f:bd:8b:99:4f:1d:90:5e:fe:bb:
                    87:16:be:59:e1:87:72:81:fd:31:a8:52:a0:77:6d:
                    9e:90:fd:e9:b9:97:62:1b:f7:24:45:b6:e9:bf:da:
                    d9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:13:57:69:C4:05:EF:5A:EB:22:3E:36:F1:61:E7:5C:47:2C:76:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/870d9d01-6df9-35c1-a41b-28d60f6cb35a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl

            X509v3 Authority Key Identifier:
                keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:810:d000::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:51:f8:79:ea:ca:0f:8d:7a:22:4c:b1:7f:dd:d9:5e:44:3d:
         48:94:a9:a5:c2:86:65:5d:e0:a0:ce:ef:df:bb:db:11:7c:fd:
         38:79:ed:98:96:12:c1:b1:ac:40:ac:bc:de:d1:3e:92:e9:02:
         74:4b:8c:ae:c1:4e:2c:ef:b4:5d:c8:ad:a9:41:92:56:ed:8b:
         f6:83:00:0a:04:5f:0a:55:f4:65:43:55:a0:7a:6a:77:6e:76:
         f4:17:67:72:6d:0c:ba:34:99:26:c4:90:e6:d8:a8:f4:49:73:
         34:6b:86:93:d6:af:63:de:38:bc:71:43:3d:1e:ff:b7:eb:0f:
         d2:26:70:b7:4c:24:c7:4c:a2:95:80:c6:c3:b6:61:80:bf:39:
         1c:11:43:e6:33:c1:7b:8e:be:9b:43:a9:5a:d3:dc:73:9e:06:
         fa:8b:52:c0:fa:b2:a8:bc:94:81:4f:ac:a4:e4:7d:6c:e2:2d:
         4f:a2:b0:21:8f:1f:93:20:22:15:4f:7f:5f:fd:65:5a:b0:45:
         05:b0:6a:9f:fb:c9:ba:7a:de:ca:ef:a9:f2:fd:10:3e:2b:07:
         16:7c:7c:cb:8c:62:f9:c2:cd:c8:bc:d7:74:9f:1c:ef:26:f4:
         03:95:92:96:36:08:6a:75:b0:2c:30:f0:bd:37:58:05:3d:34:
         a8:14:87:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:42:14 2024 by rpki-client on console-ams.rpki-client.org