Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/efa9cbc1-8733-321d-a16e-ac2e93ca5e28.roa
File:                     efa9cbc1-8733-321d-a16e-ac2e93ca5e28.roa (raw, json)
Hash identifier:          7vXVJ/pWzsjUhA5uTv0MjjbM8YqwwGn5fzkZ/2KmzW4=
Subject key identifier:   3E:11:56:A1:31:35:68:59:7C:43:9B:5A:63:B0:43:E8:CD:63:A8:8F
Certificate issuer:       /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial:       010D0C9F4328584706B5AE0DFA31CE92BD86F0B8
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/efa9cbc1-8733-321d-a16e-ac2e93ca5e28.roa
Signing time:             Wed 28 Aug 2024 13:00:42 +0000
ROA not before:           Wed 28 Aug 2024 13:00:42 +0000
ROA not after:            Tue 26 Nov 2024 14:00:42 +0000
asID:                     44324
IP address blocks:        2602:f9f6::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:06:b5:ae:0d:fa:31:ce:92:bd:86:f0:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
        Validity
            Not Before: Aug 28 13:00:42 2024 GMT
            Not After : Nov 26 14:00:42 2024 GMT
        Subject: CN=da2f623c-3854-414c-b56f-a5e13477941d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e7:7c:f8:d0:2c:d4:ba:15:96:fa:f9:86:b4:
                    4a:82:28:a6:65:7e:73:f0:c8:f8:3d:68:8e:f8:d2:
                    06:95:ba:4d:7e:39:87:e7:9e:da:77:cf:0f:67:da:
                    9c:e0:de:3a:0b:3c:76:7e:ba:11:35:1f:92:ef:0c:
                    59:5f:51:2b:4b:15:47:b6:7c:f4:f5:d4:43:bd:eb:
                    51:cb:87:66:59:f5:24:7f:fb:c9:c4:30:b4:93:61:
                    89:be:14:45:55:c8:cc:e2:82:6c:7f:6e:21:01:55:
                    cb:cf:3c:28:0d:8d:68:00:92:39:c3:c7:e8:de:7e:
                    62:2c:30:c0:90:cf:ed:58:32:2d:39:18:3e:f3:d7:
                    73:6c:d5:1a:16:69:83:e7:82:c0:49:6b:75:54:b0:
                    1d:07:1f:d7:b6:eb:e1:8f:02:ba:da:78:ea:99:63:
                    c1:aa:89:ef:67:de:e2:6a:69:63:ce:78:c0:1d:98:
                    e4:34:22:b9:df:6e:b5:fb:92:cc:fa:ed:79:80:0a:
                    a1:72:24:48:15:39:85:25:b2:53:a0:33:f7:8e:45:
                    e2:58:81:7a:27:98:4e:ae:78:42:1d:1f:f7:6f:e4:
                    93:f9:55:29:0b:fa:a8:88:7a:e5:f4:74:37:ab:ed:
                    c5:3a:6c:e0:a7:62:78:41:72:0e:0f:55:5f:69:27:
                    c2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:11:56:A1:31:35:68:59:7C:43:9B:5A:63:B0:43:E8:CD:63:A8:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/efa9cbc1-8733-321d-a16e-ac2e93ca5e28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl

            X509v3 Authority Key Identifier:
                keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f6::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:64:3a:fa:42:74:e5:ea:fc:b8:38:73:ad:37:50:71:33:23:
         0b:8e:01:20:98:dc:a9:5a:05:e2:e7:41:a3:3d:22:7a:81:60:
         81:45:a3:bb:6b:8b:4d:af:fa:df:c9:5c:77:44:5a:0b:de:28:
         6f:09:b4:3a:79:e4:8f:2b:f1:dc:13:01:bf:2a:f7:64:7b:5e:
         44:8e:3a:81:3e:a4:3b:08:e4:50:9f:ff:2b:a9:1f:c5:ff:73:
         1d:47:77:b4:53:85:74:01:16:9d:29:98:eb:7d:95:f6:60:03:
         f9:42:c8:c7:f1:7d:a0:2f:07:e6:e6:ff:46:a0:77:a2:9c:08:
         35:64:88:2f:c3:f3:5e:6a:f8:01:66:db:c9:91:c8:c9:14:9c:
         86:28:50:13:0b:88:61:48:5e:c7:1e:79:78:9a:af:23:3c:68:
         c7:d2:0d:90:0f:5c:3a:bc:8e:5e:cb:33:47:39:c7:75:52:10:
         da:90:8d:ba:d9:79:e6:99:05:5f:86:99:64:68:a4:48:8f:56:
         47:e7:79:c6:a6:b8:6c:7f:48:36:98:ad:19:76:05:4d:43:3f:
         97:8b:1b:8a:62:4e:8e:08:c9:45:20:00:66:e8:1c:2a:10:c8:
         ea:e4:eb:3e:d6:16:3d:22:45:a4:98:c2:ec:a0:05:76:aa:54:
         11:b7:5d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 08:28:51 2024 by rpki-client on console-fra.rpki-client.org