Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/eaab9ca9-fbce-3006-ac87-eb65dd8d0b5d.roa
File:                     eaab9ca9-fbce-3006-ac87-eb65dd8d0b5d.roa (raw, json)
Hash identifier:          1NpPWzKFk6KA7e/dwvsSeItZ7FWrH2rnSkN6F8RTs+s=
Subject key identifier:   1C:DA:84:04:69:84:EE:4D:44:EA:E0:DF:A1:05:40:97:F6:EA:48:1D
Certificate issuer:       /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial:       010D0C9F432858470F15B66D185303F5BD9EC800
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/eaab9ca9-fbce-3006-ac87-eb65dd8d0b5d.roa
Signing time:             Sat 31 Aug 2024 13:00:41 +0000
ROA not before:           Sat 31 Aug 2024 13:00:41 +0000
ROA not after:            Fri 29 Nov 2024 14:00:41 +0000
asID:                     44324
IP address blocks:        2602:f9f6:c00::/38 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:0f:15:b6:6d:18:53:03:f5:bd:9e:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
        Validity
            Not Before: Aug 31 13:00:41 2024 GMT
            Not After : Nov 29 14:00:41 2024 GMT
        Subject: CN=cba3d30b-dc5b-4dbd-b052-a944464c2b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:66:b2:5a:e1:50:71:ae:b5:00:1f:c1:6b:81:
                    7e:13:eb:75:bb:55:1f:2b:28:b2:c7:aa:f4:ff:64:
                    ff:60:70:bb:74:b1:5f:6c:e8:3e:b1:02:5a:d6:05:
                    7b:f0:a4:d0:ff:2e:31:7e:f9:8e:5d:28:ed:68:26:
                    7d:79:78:16:eb:58:21:8e:e0:77:b1:d9:a9:b6:70:
                    33:27:12:03:f4:4e:24:fa:5d:57:b0:d5:81:83:3a:
                    5a:a0:d6:d2:c6:b9:fd:9a:cd:9f:31:88:cf:86:6a:
                    df:c9:24:52:a4:d1:15:8a:37:a9:53:3e:2f:61:15:
                    a1:56:77:05:2a:c3:8b:d3:70:97:76:5d:17:2a:75:
                    48:cf:2c:3a:04:9e:5e:e4:61:fa:fc:16:b6:ee:29:
                    65:0d:74:f8:7a:56:62:9d:91:c2:6b:b1:12:a6:34:
                    fb:4f:13:f1:ee:21:7f:a1:76:bb:4a:21:c7:12:ed:
                    ed:0f:a3:43:4b:7d:e3:a9:78:8a:77:09:d1:10:24:
                    c2:ac:96:29:62:7e:aa:0e:7a:3b:1d:63:1c:0d:60:
                    43:cd:04:ca:71:22:7e:d3:6c:2c:25:8f:ed:25:31:
                    cc:ec:03:ad:fd:b5:3e:a0:29:0c:31:51:43:1e:39:
                    ad:56:0b:eb:49:3a:22:2b:14:57:39:1d:ce:42:fa:
                    b3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DA:84:04:69:84:EE:4D:44:EA:E0:DF:A1:05:40:97:F6:EA:48:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/eaab9ca9-fbce-3006-ac87-eb65dd8d0b5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl

            X509v3 Authority Key Identifier:
                keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f6:c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:39:aa:92:be:90:a0:fd:c5:53:56:4d:be:c9:b8:3e:76:91:
         24:a8:35:aa:ab:ab:b6:97:3b:f4:94:39:2c:18:f3:46:68:f6:
         bd:e8:f2:58:33:d5:78:31:19:3d:2b:8c:aa:3e:36:6d:71:26:
         b1:01:b2:8a:6e:59:d5:75:00:9a:0d:44:90:00:45:4c:5b:7f:
         52:f5:2b:f3:19:da:ed:33:97:c8:4f:c0:1b:bf:48:2a:70:cc:
         78:9e:f0:3d:ec:a9:73:53:74:d9:e0:cf:2b:48:c7:78:d5:03:
         44:e2:64:bc:1a:95:38:3a:d6:51:68:ae:0f:62:2c:aa:97:44:
         79:5e:57:8e:a4:f3:2f:d2:c5:d0:94:7a:a9:39:81:5f:8b:43:
         70:36:84:50:71:33:ec:30:58:a3:21:0e:d6:94:6e:6a:d4:0e:
         c6:e4:a7:13:24:e8:ad:bc:64:1e:4b:33:58:83:f3:e4:95:34:
         40:90:d6:52:e8:97:f5:84:89:20:e9:4b:a9:85:60:f8:70:99:
         a8:ee:3d:d4:06:ce:76:79:07:8b:1c:8f:80:88:57:10:0c:f7:
         ab:c4:46:de:70:ef:65:dd:f7:c1:52:37:ef:ab:fe:c3:66:f8:
         9c:7f:00:2c:1c:64:99:ad:6c:95:16:53:04:f8:07:83:7b:02:
         c8:dc:6d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 07:54:05 2024 by rpki-client on console-ams.rpki-client.org