Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/eaab9ca9-fbce-3006-ac87-eb65dd8d0b5d.roa
File:                     eaab9ca9-fbce-3006-ac87-eb65dd8d0b5d.roa (raw, json)
Hash identifier:          yXgtSNScMogTl263xm5iw6w48M6FNCU9/h3/+LP7cQc=
Subject key identifier:   8B:83:B2:0E:30:E4:60:42:00:02:37:99:DB:5F:D0:18:7D:97:7D:DE
Certificate issuer:       /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial:       010D0C9F43285847EFEF83D7F799B1CAB52669E0
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/eaab9ca9-fbce-3006-ac87-eb65dd8d0b5d.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     44324
IP address blocks:        2602:f9f6:c00::/38 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:83:d7:f7:99:b1:ca:b5:26:69:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=a780abab-9c20-47d6-9d4d-0563a74ee352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:af:5a:e2:a3:6a:5a:8c:f8:65:fb:99:04:48:
                    42:05:45:1f:c5:f0:98:52:64:cf:48:ea:c6:34:63:
                    52:3f:28:1e:54:63:96:cd:53:ae:4d:55:5e:0a:9d:
                    0a:2e:e7:03:56:7d:fd:e5:d9:2b:2c:42:b8:32:e1:
                    77:36:b8:35:1b:db:62:f3:f2:37:5f:33:bc:c6:22:
                    80:1c:32:28:cc:ca:0c:66:04:00:15:1f:c1:03:58:
                    60:47:0d:82:e5:51:f6:bd:44:72:26:61:55:28:d5:
                    d1:cf:4e:89:d9:19:73:39:4a:25:0b:69:ef:ee:69:
                    86:85:38:ec:f9:c3:f4:54:60:51:06:1f:81:c7:55:
                    74:a5:a4:80:2c:22:37:07:76:a3:fc:3b:74:14:96:
                    ef:ba:cc:64:ce:11:94:5c:c8:0c:64:32:3b:9a:16:
                    a2:f5:3b:8c:61:62:f7:fa:c3:b3:f3:d8:54:08:22:
                    52:e4:21:24:49:d7:6f:56:d3:59:a6:91:64:92:46:
                    52:f6:2e:6c:d5:43:65:82:35:f7:21:aa:7b:ee:b5:
                    e0:48:f5:60:6b:c7:1f:a1:dc:29:e1:c0:69:56:f2:
                    d0:85:a3:8a:8b:bd:40:e5:f7:cb:d1:89:5a:40:7b:
                    b9:1b:4c:bb:0b:9b:9b:6a:a9:ef:29:a6:07:c6:78:
                    9d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:83:B2:0E:30:E4:60:42:00:02:37:99:DB:5F:D0:18:7D:97:7D:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/eaab9ca9-fbce-3006-ac87-eb65dd8d0b5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl

            X509v3 Authority Key Identifier:
                keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f6:c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:23:84:6b:c2:97:da:25:e9:23:df:e7:91:63:c6:16:de:40:
         f7:9a:23:8d:38:cf:a0:63:e4:3d:a8:05:08:13:da:58:ec:c1:
         fd:f4:bb:0a:80:bf:38:ff:54:e1:a3:23:6c:c8:81:19:a4:fe:
         26:bc:74:40:a2:7b:bd:fa:e9:bd:70:ab:25:2f:af:2a:7f:7c:
         b9:40:e7:8f:2d:32:85:ba:83:3b:ca:43:6c:4d:ec:cd:6c:74:
         7b:40:83:60:b0:76:4d:66:dc:51:1d:32:9c:75:55:f8:2e:e2:
         ae:4d:35:aa:1d:75:28:a8:4f:66:b1:b3:54:f4:69:9c:01:49:
         db:be:66:85:5d:67:ab:20:e4:21:62:1f:5e:5a:23:8e:15:5d:
         8d:dc:a3:77:03:63:f7:ba:6f:02:41:0f:52:fe:e5:37:59:a9:
         fa:20:9f:8e:fd:f8:fa:e5:25:75:e4:62:50:00:f2:5e:1e:ff:
         4e:58:bf:f7:45:e5:dc:7e:9b:1d:1e:cd:b9:41:45:fc:dd:d6:
         c1:67:4b:9c:12:39:af:6a:0c:96:64:b7:e4:4b:65:f6:dd:e2:
         d1:08:48:57:b8:91:ac:74:76:4c:2c:8d:98:48:3b:d1:2a:a7:
         13:a4:da:e9:86:26:cd:f7:74:d1:1f:8f:fb:b7:ab:9c:52:1d:
         2b:ac:12:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:12:49 2024 by rpki-client on console-ams.rpki-client.org