Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/a15992b0-f880-33ef-a1e6-d084a76175c4.roa
File:                     a15992b0-f880-33ef-a1e6-d084a76175c4.roa (raw, json)
Hash identifier:          BRDvALYJ4XLY/2AJPqUOleeFCyivFrYuyfrx3wmBM7I=
Subject key identifier:   92:EC:8F:CD:E3:83:B3:4B:C4:32:83:33:F7:44:69:3B:59:82:F5:39
Certificate issuer:       /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Certificate serial:       010D0C9F43285847E64439295C3CDF23514A0880
Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/a15992b0-f880-33ef-a1e6-d084a76175c4.roa
Signing time:             Sat 16 Nov 2024 14:53:20 +0000
ROA not before:           Sat 16 Nov 2024 14:53:20 +0000
ROA not after:            Fri 14 Feb 2025 14:53:20 +0000
asID:                     203888
IP address blocks:        2602:f9df:20::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:44:39:29:5c:3c:df:23:51:4a:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
        Validity
            Not Before: Nov 16 14:53:20 2024 GMT
            Not After : Feb 14 14:53:20 2025 GMT
        Subject: CN=5af8653a-a115-415b-bf10-371c00b70472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:48:fb:78:0c:91:53:ac:0d:1b:f7:89:c4:13:
                    54:cc:69:24:02:b8:78:a3:08:84:68:2e:f3:d5:43:
                    f2:9b:12:d5:c8:5f:e2:d2:b0:ce:21:b5:dc:38:12:
                    c1:d3:73:cf:6d:1c:ac:86:63:b3:d1:58:40:0e:80:
                    b9:e0:a7:88:95:a2:03:0e:dc:54:4d:7e:af:83:61:
                    ab:f7:d3:44:83:af:00:47:ce:48:2b:ec:c4:1b:df:
                    e9:62:c3:7f:47:b1:3b:e4:1c:0a:1f:b0:19:52:0e:
                    9b:e4:09:92:8a:3f:39:53:b3:58:74:49:9e:31:27:
                    ca:c7:c9:69:7b:76:a7:10:80:36:dc:8f:12:e7:f8:
                    89:d2:db:6b:d6:72:77:ab:f8:ce:22:81:55:b3:1c:
                    1f:cb:f7:c5:fa:e9:30:08:39:4e:18:e4:34:cc:02:
                    a9:a3:f4:06:33:67:45:7c:2b:87:75:04:1c:f2:68:
                    ac:17:0e:5e:d6:04:3f:61:82:04:ad:3c:c6:42:89:
                    15:b7:3d:21:43:f2:f4:55:86:d5:b2:3c:d3:b7:bf:
                    a3:a1:a6:f2:4c:c1:97:0e:02:e6:9b:7f:bc:4d:54:
                    f5:c3:b5:bc:27:e7:54:c4:7a:38:90:3b:bd:ce:95:
                    c5:a4:af:b0:c4:53:03:58:69:0f:af:1d:76:fc:dd:
                    e2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:EC:8F:CD:E3:83:B3:4B:C4:32:83:33:F7:44:69:3B:59:82:F5:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/a15992b0-f880-33ef-a1e6-d084a76175c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl

            X509v3 Authority Key Identifier:
                keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9df:20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:fe:0a:fa:a6:65:bd:d8:a5:f3:b4:a5:91:16:d9:95:8b:6b:
         9f:b9:90:f7:1a:27:59:2d:49:53:d8:94:06:28:cf:06:76:00:
         20:d7:c2:72:9b:0e:c9:67:ac:e2:a7:69:6c:08:f5:12:cf:5b:
         3a:18:38:8b:d8:fa:19:85:ab:2a:e8:72:84:32:23:32:30:54:
         3b:7f:dd:f3:3e:f9:0d:c4:70:b0:fd:e9:e2:d8:3c:88:4b:e7:
         28:25:bf:a5:8f:75:f1:de:ea:c0:0b:8b:b9:fb:0f:dd:56:12:
         4e:e7:b5:6f:f5:6e:7c:fb:a1:19:79:26:f7:96:bc:91:04:6d:
         03:b0:71:75:91:e4:af:9e:a1:ad:e5:33:14:ef:19:d3:08:44:
         4f:16:80:37:f1:e7:e7:5f:2d:70:18:09:07:c0:13:62:a9:3d:
         39:15:ba:38:a3:2e:e9:d7:fd:f8:dc:b8:02:0f:c3:47:e2:64:
         ae:39:73:8a:8f:d6:11:7a:19:99:6d:a5:94:19:c6:be:f1:d4:
         c6:45:3f:6f:10:ca:0e:7b:31:ca:27:ad:f9:20:ae:31:3d:4f:
         bd:d9:05:6f:9c:08:f7:66:0a:eb:6f:0d:19:62:ab:bb:1a:f8:
         6c:51:9c:90:01:c1:ed:86:5c:b1:1e:cd:ae:a3:c9:14:89:52:
         ad:ab:9e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:17 2024 by rpki-client on console-ams.rpki-client.org