Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/df166a29-bbe2-313b-80c5-dfb2fdd39687.roa
File:                     df166a29-bbe2-313b-80c5-dfb2fdd39687.roa (raw, json)
Hash identifier:          mizqjfRoMtWuuD9dG8Q9NGoALD5fuUUJPe4y5oMySoo=
Subject key identifier:   60:85:CA:9E:82:F3:C6:46:C1:4D:F7:17:0F:DF:71:06:5E:2F:38:7F
Certificate issuer:       /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial:       010D0C9F43285847E78F65542DD88F793262B780
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/df166a29-bbe2-313b-80c5-dfb2fdd39687.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     44324
IP address blocks:        2602:f9f6:430::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:65:54:2d:d8:8f:79:32:62:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=8d2e30a6-625c-4fa1-a0e7-cd2851861f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:2c:50:26:25:9b:5d:2c:bc:7d:e3:9c:29:06:
                    cd:e5:f6:39:54:81:93:9a:c2:2b:80:03:0d:fd:18:
                    48:3b:cc:1b:aa:4a:0c:ec:d7:b2:91:04:39:92:95:
                    29:a3:fd:06:1c:53:6d:54:8b:31:d8:8c:52:dc:43:
                    db:01:e3:3c:ed:82:ee:4b:d6:e0:2f:3a:9c:cf:0d:
                    74:a3:b1:b8:d5:e2:06:67:dc:0b:cb:8c:d9:9b:9c:
                    a9:89:7c:54:f5:63:5f:a5:8d:2b:1c:65:1d:e7:22:
                    97:71:24:25:9b:fb:1e:3c:57:c5:85:a2:8f:66:cd:
                    b6:08:90:52:67:48:3a:16:3e:05:f0:1b:48:f1:bd:
                    08:1e:24:e0:03:89:47:e8:61:12:eb:ad:cc:61:a8:
                    bb:86:5a:a7:42:33:df:68:94:40:63:d3:dc:27:fd:
                    b9:ab:8d:cc:03:aa:9d:02:9d:02:c9:af:b5:07:b3:
                    2c:f3:bc:1a:12:33:19:d6:4f:4c:ad:5e:85:59:13:
                    e1:55:87:d5:af:f1:36:f0:65:49:ed:d6:3d:fc:70:
                    1e:de:30:c2:8b:ed:0d:1c:ab:23:a5:16:34:b5:09:
                    87:27:a9:79:80:c9:ea:4a:9e:28:d8:e7:e8:c8:5f:
                    0c:f0:d9:a0:62:aa:34:b3:af:de:0d:6b:00:40:a9:
                    82:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:85:CA:9E:82:F3:C6:46:C1:4D:F7:17:0F:DF:71:06:5E:2F:38:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/df166a29-bbe2-313b-80c5-dfb2fdd39687.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl

            X509v3 Authority Key Identifier:
                keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f6:430::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:8b:02:ac:58:93:b8:4f:69:0d:82:88:02:95:14:f5:bb:76:
         5e:48:b8:aa:b4:d0:1b:df:f4:fd:54:45:a5:63:d3:cb:84:f1:
         d6:26:71:94:fb:28:44:30:29:fd:bf:4e:d8:ca:1a:b9:f3:d6:
         68:82:ba:3c:46:21:1f:30:e4:50:63:e5:7c:28:35:c7:74:84:
         3a:9b:e0:6a:f1:c8:04:9e:15:8a:91:96:62:67:03:61:98:8b:
         a1:5d:2f:41:c0:19:3d:3f:5f:fa:68:5f:ce:02:60:9d:3f:9a:
         20:5b:fa:e0:e7:e1:24:51:ec:3c:e7:6d:fa:db:1a:4a:67:38:
         18:5b:e9:33:0b:4d:5f:e8:55:a2:a5:1d:64:c2:fa:c2:25:2e:
         7b:86:46:a1:66:90:0c:b0:5b:48:c1:5a:bb:57:a6:51:13:cd:
         d4:30:33:7c:69:14:ed:45:6f:fb:5e:2d:7d:33:94:09:6f:03:
         b4:9d:5e:0e:1a:85:52:b3:7d:04:d4:44:8a:8f:7c:f0:d0:7f:
         c5:44:7a:78:fd:f0:a0:84:2c:1f:70:7b:1d:27:ab:ae:f8:cc:
         0d:6a:09:c5:c9:bc:bf:01:53:81:2c:20:93:0f:71:90:64:c0:
         51:57:81:ea:86:ba:a3:3b:e1:64:dd:41:21:7d:e7:af:de:2c:
         67:95:e9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:01:17 2024 by rpki-client on console-fra.rpki-client.org