Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/58fddb6b-b796-3bae-8ee4-8c51280d31a4.roa
File:                     58fddb6b-b796-3bae-8ee4-8c51280d31a4.roa (raw, json)
Hash identifier:          +0YzVvnAJico3e1JA5Z67VAtfpI3T7K/0Mpr4VQD9LM=
Subject key identifier:   E0:18:12:03:5E:07:EB:FA:3F:A9:74:76:C4:82:4D:9E:D8:17:09:30
Certificate issuer:       /CN=be69e7ae-469d-400e-8f2e-4ebfc1be0098
Certificate serial:       010D0C9F432858473E8B4719CDB92AA92E5AC438
Authority key identifier: 10:44:A2:7F:5D:CB:7B:01:1A:9B:6D:EB:6D:47:3E:9F:B6:51:A5:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/58fddb6b-b796-3bae-8ee4-8c51280d31a4.roa
Signing time:             Tue 17 Sep 2024 13:00:41 +0000
ROA not before:           Tue 17 Sep 2024 13:00:41 +0000
ROA not after:            Mon 16 Dec 2024 14:00:41 +0000
asID:                     399935
IP address blocks:        2602:f99d::/40 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/be69e7ae-469d-400e-8f2e-4ebfc1be0098.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/be69e7ae-469d-400e-8f2e-4ebfc1be0098.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3e:8b:47:19:cd:b9:2a:a9:2e:5a:c4:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be69e7ae-469d-400e-8f2e-4ebfc1be0098
        Validity
            Not Before: Sep 17 13:00:41 2024 GMT
            Not After : Dec 16 14:00:41 2024 GMT
        Subject: CN=9553ddd1-c112-48c6-9e67-19d0be1f4395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:34:cf:41:c2:4d:a7:16:87:0d:4e:b3:ab:5c:
                    aa:e6:35:30:24:04:1b:e9:0d:99:e9:a8:fd:0b:f1:
                    07:d4:ae:e7:e9:98:f5:44:16:a7:db:09:b5:eb:78:
                    c1:1d:01:5b:24:f0:5c:75:18:18:6c:0d:69:fa:1b:
                    dc:56:c6:eb:27:be:5c:9b:1c:e1:a6:3d:84:1b:48:
                    6f:53:d4:da:d2:bd:15:37:cc:ed:0a:aa:8e:3e:b1:
                    20:64:18:21:66:8c:18:de:54:85:db:c2:e8:fd:2a:
                    28:2d:f5:31:cd:7d:13:e8:ff:7b:88:00:44:19:61:
                    33:79:a3:92:64:01:12:10:e1:81:94:da:13:32:2d:
                    03:cc:b2:3d:8d:b0:97:5e:79:d3:d4:48:26:92:74:
                    2f:4d:26:d2:90:0d:1d:99:b2:ad:f3:15:20:77:11:
                    0b:37:68:86:68:86:3d:d9:c8:ac:72:ae:25:c7:4b:
                    df:3f:f6:d4:d6:a6:07:0d:c2:68:88:b7:f2:e6:49:
                    52:78:12:9e:40:27:7e:53:ce:08:08:23:d2:69:66:
                    ab:8d:fc:09:21:0c:c9:c1:46:f9:10:93:0d:94:9f:
                    87:57:b3:aa:22:99:a3:be:34:19:d3:71:dc:14:33:
                    a7:42:a2:75:09:a7:82:80:26:1b:b0:34:51:bf:b6:
                    94:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:18:12:03:5E:07:EB:FA:3F:A9:74:76:C4:82:4D:9E:D8:17:09:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/58fddb6b-b796-3bae-8ee4-8c51280d31a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/be69e7ae-469d-400e-8f2e-4ebfc1be0098.crl

            X509v3 Authority Key Identifier:
                keyid:10:44:A2:7F:5D:CB:7B:01:1A:9B:6D:EB:6D:47:3E:9F:B6:51:A5:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f99d::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:8c:40:52:56:c0:5f:1b:92:c9:e4:76:49:f7:25:81:9d:2f:
         c5:3e:71:d8:29:97:72:29:4a:24:ab:3a:3e:25:0c:cd:f6:16:
         2d:1d:ed:98:13:b6:7b:e2:80:0b:00:d1:38:f8:33:97:83:d0:
         11:21:16:7a:90:b8:34:72:1c:83:bd:02:7b:13:62:8f:d7:65:
         2e:ff:f5:35:56:f9:db:41:4c:d1:52:a3:56:a4:39:3c:a3:9e:
         c2:b9:be:a0:ab:d6:f5:54:1f:f2:6e:eb:b6:cb:21:20:00:3d:
         ee:8f:74:36:3c:c3:b8:a1:b2:78:8d:ad:d2:22:fb:e6:dc:86:
         ea:6d:fe:b6:46:22:97:aa:b3:94:2e:67:1a:90:c5:27:ff:81:
         9f:db:c4:ed:29:f9:a7:cd:58:d4:b7:3a:24:eb:a9:f4:c4:df:
         e9:1b:d2:d9:bb:fa:b8:91:47:12:4c:8e:70:80:a4:da:c1:d8:
         50:83:26:c1:e6:35:3d:ed:75:16:3b:0a:79:50:61:00:bc:ba:
         b3:c5:df:14:12:7f:ee:0d:88:08:ae:1e:bf:a4:cb:a2:3a:f9:
         45:d3:41:c1:53:8e:c2:f6:e9:c9:ca:14:a9:31:f7:7e:87:7c:
         bf:6d:b4:66:79:b3:4c:bb:c0:56:0f:2b:b8:01:f7:2c:3a:4c:
         ba:16:72:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:43 2024 by rpki-client on console-fra.rpki-client.org