Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/88d218ab-9c22-353d-a21d-a0cf2af8daff.roa
File:                     88d218ab-9c22-353d-a21d-a0cf2af8daff.roa (raw, json)
Hash identifier:          BTTN/PFN1zFs5KuUieHvwRnocgGtELyyYA8Ef6RbIb0=
Subject key identifier:   7A:D2:E9:1B:E6:43:97:AE:FC:94:6A:9C:CF:8C:85:FB:19:E8:BC:BC
Certificate issuer:       /CN=d5bd3578-3c08-44d1-99e2-8087fc48ffb3
Certificate serial:       010D0C9F43285847213B244899A4146B31443718
Authority key identifier: 93:46:0B:B5:74:F6:A0:9C:71:F0:B1:7D:9C:ED:7E:CD:05:DA:07:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/88d218ab-9c22-353d-a21d-a0cf2af8daff.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     1030
IP address blocks:        2602:f9cd::/40 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:24:48:99:a4:14:6b:31:44:37:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5bd3578-3c08-44d1-99e2-8087fc48ffb3
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=494aa802-7c19-4e03-b5b3-707258f7f9fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2b:59:be:b0:53:7d:17:4f:a6:cc:4e:e2:d3:
                    2d:d5:28:38:af:c9:6e:bf:9a:86:52:b8:88:b9:8a:
                    5c:0b:8a:4d:02:65:cd:7d:09:60:0e:43:f1:c0:c9:
                    3c:53:0d:54:58:8e:c3:cd:d8:83:17:d3:d3:4f:84:
                    05:23:72:2c:d9:af:e7:06:49:de:bc:3d:f4:fe:47:
                    f3:c0:49:62:ec:89:28:8f:da:36:eb:dd:4a:52:c5:
                    e8:44:c7:d6:af:74:0f:02:6a:38:49:84:41:7d:d3:
                    d6:be:5a:95:9b:86:22:c1:f8:a0:88:80:b8:07:f5:
                    8a:d2:25:7d:63:23:df:c7:f8:1e:e5:b1:f0:41:b9:
                    07:a2:dc:3b:f8:d2:c9:24:52:a7:f9:46:09:19:05:
                    5a:91:43:38:4c:93:94:7f:1e:d5:fc:98:b5:89:0e:
                    0e:c3:59:a2:f5:e9:4e:29:f4:65:72:28:43:29:02:
                    65:a2:91:ee:9d:5b:01:49:c5:15:7b:34:63:a1:f1:
                    71:f2:66:cc:30:08:f7:4b:38:0b:0e:0b:02:e7:f5:
                    aa:db:b8:b2:b2:a1:1d:ac:a6:a9:50:c8:c8:fb:aa:
                    f5:87:4a:5e:f3:2a:01:9f:dc:bf:97:f8:ee:be:f5:
                    12:39:25:35:1d:98:5c:ea:62:2b:27:52:1d:4c:73:
                    72:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D2:E9:1B:E6:43:97:AE:FC:94:6A:9C:CF:8C:85:FB:19:E8:BC:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/88d218ab-9c22-353d-a21d-a0cf2af8daff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.crl

            X509v3 Authority Key Identifier:
                keyid:93:46:0B:B5:74:F6:A0:9C:71:F0:B1:7D:9C:ED:7E:CD:05:DA:07:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9cd::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:82:59:c1:59:79:b4:c3:91:39:4b:42:4f:49:2b:f2:81:ae:
         3f:a6:58:33:70:11:20:57:e0:a0:07:d9:35:b4:d6:e0:21:e9:
         d4:07:8f:fa:da:aa:1c:09:f2:d9:d9:fe:e3:6c:3a:9a:79:86:
         36:f5:d0:c3:ee:b0:ff:42:79:f8:f2:36:38:9b:c1:8a:8e:ea:
         f0:45:fd:1e:fd:bd:f3:ca:4e:d8:2f:d5:cc:b7:1f:36:3b:77:
         0c:21:d4:56:b0:89:bc:a4:ad:42:39:3e:3c:db:a7:69:36:66:
         ee:2e:76:ef:b5:16:a1:5d:77:90:d0:17:d6:1c:29:5a:43:63:
         c1:c7:26:3c:67:2c:c9:54:68:89:22:07:93:26:4e:7e:79:f1:
         c0:65:c4:be:54:fb:a5:2b:fc:4a:11:72:53:2c:b8:3a:07:77:
         b8:2c:7d:13:65:27:16:3e:57:bb:69:e9:88:dc:44:5f:01:55:
         77:19:92:45:a4:63:d3:a1:86:6f:e7:fb:2c:ae:7e:06:ce:46:
         10:79:be:ac:b5:2b:fc:7c:71:7c:c9:09:f1:6b:f9:fe:de:f9:
         72:7f:a3:9a:a4:ac:6d:02:eb:c1:fb:94:e2:9e:1d:e8:1b:6c:
         35:18:5b:1f:8f:13:d0:23:7e:3e:69:f8:79:84:30:2f:63:59:
         42:12:b7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:28:16 2024 by rpki-client on console-fra.rpki-client.org