Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce94afc7-3d50-4fb3-9677-616d7c1cc36f/9d7b5ccb-bd10-3754-b9ec-c933c572f7ff.roa
File:                     9d7b5ccb-bd10-3754-b9ec-c933c572f7ff.roa (raw, json)
Hash identifier:          q1ZBu77rFN2dXJpwuqfnnVPWPY5a2KnHYCrNFiiUT3Y=
Subject key identifier:   38:5B:B5:03:BC:65:EB:FB:6F:A2:85:91:C6:4E:B8:39:78:5E:69:ED
Certificate issuer:       /CN=ce94afc7-3d50-4fb3-9677-616d7c1cc36f
Certificate serial:       010D0C9F4328584762D65F2D82C4D0576B09EAC0
Authority key identifier: D0:4B:48:93:A4:83:4F:D8:8C:A7:D9:E6:E5:10:7D:75:2E:26:09:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce94afc7-3d50-4fb3-9677-616d7c1cc36f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce94afc7-3d50-4fb3-9677-616d7c1cc36f/9d7b5ccb-bd10-3754-b9ec-c933c572f7ff.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     399334
IP address blocks:        2602:fc81:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce94afc7-3d50-4fb3-9677-616d7c1cc36f/ce94afc7-3d50-4fb3-9677-616d7c1cc36f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce94afc7-3d50-4fb3-9677-616d7c1cc36f/ce94afc7-3d50-4fb3-9677-616d7c1cc36f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce94afc7-3d50-4fb3-9677-616d7c1cc36f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:5f:2d:82:c4:d0:57:6b:09:ea:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce94afc7-3d50-4fb3-9677-616d7c1cc36f
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=3cf7d505-0dcd-4ade-9892-502c0cc37a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e5:46:21:df:64:10:a4:63:fd:53:54:9b:28:
                    38:cd:68:e7:8a:99:2b:b5:a6:8b:f0:84:a3:4f:86:
                    64:d0:0d:e6:b1:cc:8c:2b:ea:92:b1:98:7f:4f:8c:
                    1f:aa:4a:dc:45:2b:84:6d:f9:8c:5a:cb:64:71:e2:
                    74:f6:8c:9a:f8:c9:e7:e3:a6:05:c4:f6:05:1c:d5:
                    f9:ff:58:ec:5c:79:14:17:6d:43:28:66:15:04:6a:
                    aa:29:66:5d:8c:f1:c5:58:3c:9b:c4:77:0e:40:7e:
                    97:75:44:e1:f6:b6:53:fc:c9:98:9a:f4:25:a6:d0:
                    83:1a:e8:1f:e7:c0:e1:9e:8c:39:45:73:e2:d4:98:
                    d1:2b:a3:5c:d3:7e:f3:57:6b:45:bd:69:09:6a:56:
                    f1:3a:92:47:b6:20:e6:9b:00:d5:6d:9c:a4:a2:1a:
                    a0:77:f9:a8:8f:57:51:57:b3:2f:c5:ac:50:ce:d7:
                    58:21:af:b0:e4:3c:e4:6d:06:3f:e6:01:aa:4e:bb:
                    25:c5:94:d9:db:75:29:16:4c:58:9a:ed:c5:df:c1:
                    da:b6:a0:35:9f:db:d3:cf:2f:b0:6d:cb:04:87:08:
                    11:f6:c3:ac:bf:7c:ff:86:65:b2:db:df:11:52:95:
                    36:60:a4:c7:27:9f:fd:75:5f:bb:0e:08:b6:aa:f4:
                    39:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5B:B5:03:BC:65:EB:FB:6F:A2:85:91:C6:4E:B8:39:78:5E:69:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce94afc7-3d50-4fb3-9677-616d7c1cc36f/9d7b5ccb-bd10-3754-b9ec-c933c572f7ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce94afc7-3d50-4fb3-9677-616d7c1cc36f/ce94afc7-3d50-4fb3-9677-616d7c1cc36f.crl

            X509v3 Authority Key Identifier:
                keyid:D0:4B:48:93:A4:83:4F:D8:8C:A7:D9:E6:E5:10:7D:75:2E:26:09:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce94afc7-3d50-4fb3-9677-616d7c1cc36f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc81:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:e5:ae:e8:41:88:3f:5b:56:19:54:5e:75:15:1a:cb:cf:f2:
         36:d9:56:30:84:f4:1b:e3:86:3e:e7:fd:4a:1c:6d:56:92:3a:
         ba:53:0b:6a:fb:1b:a6:3e:46:2c:f1:ca:1e:f1:ef:ac:6d:95:
         4e:ab:91:e4:a9:d7:42:ef:3b:c7:e7:43:d2:08:98:ad:a5:c4:
         84:bc:b4:f2:e3:e0:84:f1:eb:81:58:21:d7:e3:37:a9:2b:ce:
         be:43:f3:39:65:f7:72:34:11:bf:83:e3:90:d7:b9:d4:8f:dd:
         7b:ef:0a:42:d6:20:49:68:65:2f:90:09:c0:85:c7:79:88:68:
         58:d7:87:29:6f:7a:e0:b6:21:39:1f:19:54:ab:ed:e0:c8:40:
         89:bc:bb:5f:4c:64:d0:a2:0e:8e:2b:d7:ad:a4:2e:71:3e:8b:
         dd:43:0a:42:89:d9:de:0f:cd:5c:2b:df:92:81:f8:9e:6a:e1:
         6f:77:94:3d:c7:c7:87:5a:d6:80:f6:d9:65:9a:76:89:ed:48:
         75:f5:7d:4e:12:d2:be:9a:3c:2d:5f:01:5c:c9:16:22:c5:38:
         9d:b1:8f:e4:2d:60:25:c3:6c:11:d6:c9:03:24:db:49:8c:73:
         a6:eb:9b:47:7c:bc:ff:21:52:7b:4b:d6:2b:78:cc:76:c4:b9:
         53:77:60:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:43 2024 by rpki-client on console-ams.rpki-client.org