Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/bea5c19f-eb34-3b85-9b9e-27292b384c68.roa
File:                     bea5c19f-eb34-3b85-9b9e-27292b384c68.roa (raw, json)
Hash identifier:          N75Ij8W+JZ1z2GKrlSM8Q25UI9WWFZBakwZixp5gYHE=
Subject key identifier:   84:0D:13:D1:D9:88:5C:17:4F:B1:4D:03:C4:5C:81:C7:61:1A:3F:BA
Certificate issuer:       /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Certificate serial:       010D0C9F432858476C9DC054BD36D4CC986BBCE0
Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/bea5c19f-eb34-3b85-9b9e-27292b384c68.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     150184
IP address blocks:        2602:f9df:400::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:c0:54:bd:36:d4:cc:98:6b:bc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=54fecd6d-53ee-4a6a-be74-8623aca2446d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:29:6a:1d:de:cf:f8:02:f9:74:6e:77:b0:1b:
                    c8:69:08:d5:08:af:26:eb:70:0b:1e:d9:da:83:b0:
                    30:bc:68:5b:9e:d2:8d:df:b0:39:cd:a5:3f:81:c3:
                    b0:c1:c6:86:03:76:23:6e:c6:73:ca:e6:5a:58:7d:
                    8d:d1:63:51:d6:c4:e1:01:0e:cc:e1:3d:93:24:df:
                    51:54:13:64:37:0e:2d:ce:dc:2b:bd:be:e3:0d:61:
                    68:be:a3:f9:11:b9:9b:11:03:be:f4:89:91:09:cc:
                    69:94:e4:8e:8e:ba:69:66:ff:f7:2c:34:cb:a9:f9:
                    e0:7f:ce:76:dd:86:49:6f:eb:d6:b3:c5:ee:18:2b:
                    aa:11:22:16:a4:e9:1f:1e:33:0b:bf:ab:44:2f:11:
                    05:21:28:ce:b3:2f:0b:06:2e:89:cf:0b:97:1e:0f:
                    9f:aa:f8:6f:7a:1b:4e:63:50:21:32:e6:bb:65:db:
                    75:92:6b:95:55:4d:e2:c3:90:06:15:3a:93:43:d1:
                    ec:47:db:31:c8:ec:3e:2a:c6:e5:87:b6:23:55:e1:
                    c0:ef:c2:7b:b8:3b:da:5e:18:99:55:8a:ad:5f:a7:
                    f9:6c:09:b3:cb:48:7c:f9:17:71:b4:e5:ba:85:fd:
                    de:3d:5f:9b:be:ea:cc:93:8e:bd:ea:d7:34:a0:b7:
                    a3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:0D:13:D1:D9:88:5C:17:4F:B1:4D:03:C4:5C:81:C7:61:1A:3F:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/bea5c19f-eb34-3b85-9b9e-27292b384c68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl

            X509v3 Authority Key Identifier:
                keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9df:400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:52:b4:56:9b:1e:bd:aa:a3:c9:9a:53:8e:c4:3d:62:54:f5:
         9e:73:d4:60:ee:f8:3f:85:bf:ba:39:da:0b:f9:6b:5f:87:0f:
         bf:fc:32:f6:f0:d6:ab:34:99:cd:8b:1c:c2:ec:f5:c1:81:7c:
         87:ac:97:29:e0:5d:da:b5:88:cc:e0:a1:58:d7:78:74:ea:6d:
         35:1e:1d:8d:58:d2:03:7a:3a:6b:ad:0f:8d:74:5a:72:79:de:
         3d:77:1f:f6:b4:ce:b0:4d:d1:1e:75:c6:ed:ab:7d:de:36:62:
         80:68:23:d1:b8:bb:27:4f:69:7d:a0:df:ac:98:7d:f5:67:e8:
         ef:f2:16:4e:3a:6a:9b:fa:03:15:24:cc:33:8d:b0:a2:df:0f:
         18:bd:33:d7:8f:20:36:48:80:f8:2c:c7:7a:74:92:29:7a:db:
         1f:51:9a:d4:4d:28:8f:8c:c2:77:36:9a:f3:8d:54:70:f9:50:
         6e:69:b1:03:4e:51:49:1b:fc:4d:65:9c:1c:ec:b3:08:b9:be:
         5f:1e:f8:db:4c:68:cc:a9:62:47:e4:b1:e8:84:27:39:a5:cb:
         98:7e:48:e6:19:df:f4:01:4a:39:6b:c5:b3:b7:25:0b:01:19:
         02:21:96:7a:ef:3d:1d:31:50:96:25:01:31:b7:a9:e2:8d:5b:
         ff:31:93:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:15:47 2024 by rpki-client on console-fra.rpki-client.org