Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/4f34dd04-d670-3561-a676-307c84fe0312.roa
File:                     4f34dd04-d670-3561-a676-307c84fe0312.roa (raw, json)
Hash identifier:          IsXuff4rzG4Cfj9R7ghoC0NXk3NQBmQjNhws6uIdwrA=
Subject key identifier:   83:B9:B9:C3:EF:5D:5F:68:C6:CB:24:0D:89:28:7D:CB:E3:29:AF:91
Certificate issuer:       /CN=9e5b13b0-a994-485f-adca-a2ea27fc9de8
Certificate serial:       010D0C9F43285847F0FDB25A9F070B1CB5CE8380
Authority key identifier: 84:34:A9:F2:5D:45:CF:84:C1:EA:21:6E:17:E3:20:D8:4A:FB:00:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/4f34dd04-d670-3561-a676-307c84fe0312.roa
Signing time:             Wed 20 Nov 2024 11:05:07 +0000
ROA not before:           Wed 20 Nov 2024 11:05:07 +0000
ROA not after:            Tue 18 Feb 2025 11:05:07 +0000
asID:                     64457
IP address blocks:        2602:fa0a::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/9e5b13b0-a994-485f-adca-a2ea27fc9de8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/9e5b13b0-a994-485f-adca-a2ea27fc9de8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f0:fd:b2:5a:9f:07:0b:1c:b5:ce:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e5b13b0-a994-485f-adca-a2ea27fc9de8
        Validity
            Not Before: Nov 20 11:05:07 2024 GMT
            Not After : Feb 18 11:05:07 2025 GMT
        Subject: CN=9cb8d8c0-eea0-4b17-9367-744d65e27e8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1f:9d:0c:19:6c:e7:cf:90:6c:0d:e4:01:dc:
                    54:61:69:cb:80:e0:4c:0a:e4:26:3c:66:fc:62:43:
                    ac:a8:64:e9:74:01:33:fa:4b:13:ff:76:28:fe:d7:
                    33:37:ce:7b:a1:14:df:e3:ad:16:e2:5e:89:a6:00:
                    db:0f:40:36:b7:08:11:f8:11:2f:59:ff:17:c7:f0:
                    b2:0f:88:63:9e:01:a5:16:25:b9:b3:dc:6f:5c:a4:
                    ec:07:68:0a:06:85:3d:88:70:34:50:fc:87:eb:b1:
                    96:05:29:48:03:89:28:03:96:e8:0f:f9:0e:ea:13:
                    ce:3e:a9:a3:25:5a:49:16:9a:6e:55:23:fc:31:d2:
                    c8:e4:be:5e:63:67:bf:c3:44:35:a4:8f:b7:1a:d4:
                    8a:ac:6b:3c:72:8b:6d:31:2e:df:44:3a:71:3e:1b:
                    9b:54:db:f4:09:e0:29:49:43:e8:2e:ff:e9:b5:49:
                    af:ae:c8:76:6a:86:88:48:e0:c7:8b:01:1d:ea:71:
                    bc:ce:e4:87:0a:97:8b:13:7b:5a:33:21:40:0c:48:
                    d7:71:91:49:58:5a:51:de:c4:e2:9e:45:b0:22:30:
                    21:42:5d:1d:50:ae:77:d9:48:62:4e:da:11:ec:fc:
                    77:64:90:07:e8:dd:a8:b3:ab:52:fc:45:d7:74:ed:
                    12:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B9:B9:C3:EF:5D:5F:68:C6:CB:24:0D:89:28:7D:CB:E3:29:AF:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/4f34dd04-d670-3561-a676-307c84fe0312.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/9e5b13b0-a994-485f-adca-a2ea27fc9de8.crl

            X509v3 Authority Key Identifier:
                keyid:84:34:A9:F2:5D:45:CF:84:C1:EA:21:6E:17:E3:20:D8:4A:FB:00:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa0a::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:d1:dc:dc:4d:e3:05:85:0f:55:82:e7:43:87:11:62:fd:97:
         62:8c:fd:2f:2e:98:b6:20:07:2a:35:d3:2e:47:bb:e0:eb:a6:
         18:78:cf:24:43:d9:91:ff:78:7f:99:a7:d3:fe:65:47:05:6a:
         d6:ef:fc:3e:df:a7:01:e3:35:07:53:d7:53:39:2a:47:64:56:
         3c:4a:56:f5:51:fd:49:18:0f:1e:c1:7b:b4:9e:98:64:56:ce:
         14:5d:bd:49:8f:a3:e2:2e:99:dc:3f:ca:f7:ce:3b:90:38:4a:
         75:84:4a:77:3c:1a:fa:11:cc:74:33:94:ae:8c:d0:14:c7:f7:
         8d:76:aa:23:12:20:bc:6b:34:45:18:15:e0:9e:5f:bd:54:9e:
         cd:c7:3e:f6:9c:99:25:01:8b:88:1d:b1:3b:d6:b7:fb:87:52:
         13:f0:9e:92:0a:99:23:1c:f6:7b:9a:76:28:bd:cc:f0:cb:4a:
         c6:90:cc:7a:ed:f7:7c:e6:74:d0:63:58:4d:0a:43:36:c8:2a:
         94:c6:61:45:66:8d:34:57:5b:3a:8b:85:05:ba:f8:30:f8:41:
         ff:24:fd:71:71:f2:5e:e2:da:79:ff:22:2c:b2:91:77:05:00:
         a6:39:10:57:4b:55:6d:06:4d:ae:dc:a2:52:f5:78:d8:37:e7:
         96:52:27:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:38:05 2024 by rpki-client on console-ams.rpki-client.org