Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d4bd2aec-9077-39a8-99fc-99d778cdb8d8.roa
File:                     d4bd2aec-9077-39a8-99fc-99d778cdb8d8.roa (raw, json)
Hash identifier:          a2LaNHxaxCwqfiA/cxf1FHrqd60EQTk+NaeMGcqdzC0=
Subject key identifier:   C1:FC:FD:9A:27:D6:76:00:E4:95:06:2B:85:EE:9F:66:4D:AD:59:BF
Certificate issuer:       /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Certificate serial:       010D0C9F43285847C77499D8DEFC4C3A72219B40
Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d4bd2aec-9077-39a8-99fc-99d778cdb8d8.roa
Signing time:             Tue 05 Nov 2024 14:00:38 +0000
ROA not before:           Tue 05 Nov 2024 14:00:38 +0000
ROA not after:            Mon 03 Feb 2025 14:00:38 +0000
asID:                     36832
IP address blocks:        2602:f9df:200::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c7:74:99:d8:de:fc:4c:3a:72:21:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
        Validity
            Not Before: Nov  5 14:00:38 2024 GMT
            Not After : Feb  3 14:00:38 2025 GMT
        Subject: CN=9aec843e-6748-4f88-9044-0e25e2630ac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4c:08:85:b2:60:ca:8d:87:25:b5:c3:4e:18:
                    86:af:c2:ff:bf:73:af:02:03:21:5d:c2:36:10:a2:
                    f1:88:e1:c8:eb:cf:f1:ca:5d:70:c7:f0:ae:53:d8:
                    b8:2e:09:7e:ed:b9:5a:50:06:6c:24:a4:45:f6:7c:
                    92:31:3b:37:3b:79:47:ac:f4:da:38:83:c5:92:82:
                    79:2c:70:dc:2e:6c:5a:bd:64:d1:f3:50:fe:3a:2d:
                    27:a1:bc:96:ee:91:17:74:ff:28:b0:e7:8d:3b:c0:
                    df:17:32:8d:17:4a:fc:db:d3:fc:c9:be:4d:bb:bd:
                    9d:82:26:a0:6e:59:13:54:ef:7b:0c:79:66:bf:a8:
                    cb:76:9c:42:16:4f:e0:57:10:bd:7d:ae:b4:51:ef:
                    d8:5a:93:c2:28:9d:04:38:3f:d8:95:fc:16:32:bf:
                    48:72:17:10:9f:36:89:13:23:bd:d9:9d:08:e9:42:
                    7f:2b:84:6b:8e:c4:10:c7:86:15:5c:3b:9e:b5:4d:
                    68:bb:15:3d:d3:b5:84:4d:b8:38:da:10:ed:54:3b:
                    42:f7:14:a0:a7:1b:f4:6e:54:f5:54:84:47:5f:72:
                    47:57:d8:71:fc:0b:82:c0:9c:ca:e5:fa:2e:49:bb:
                    22:de:e6:2e:b7:be:9f:23:e7:f8:a9:f9:ab:cd:04:
                    1b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FC:FD:9A:27:D6:76:00:E4:95:06:2B:85:EE:9F:66:4D:AD:59:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d4bd2aec-9077-39a8-99fc-99d778cdb8d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl

            X509v3 Authority Key Identifier:
                keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9df:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:36:0c:5e:22:8a:22:20:4e:86:b3:37:f9:da:da:1e:a0:e4:
         29:a5:4d:fb:cb:55:78:25:31:3b:be:8c:27:a6:d5:04:1b:c0:
         4d:cc:56:65:b3:f6:81:a1:77:d7:2d:b5:15:05:35:ad:52:1c:
         65:c4:13:db:98:84:9f:d4:df:f3:98:82:f0:a1:ac:2e:fa:f9:
         c1:4c:6e:5c:38:71:73:74:56:90:ec:8a:4f:1c:72:94:04:3d:
         67:74:02:21:a1:4f:80:0c:10:70:e9:b2:de:dd:48:07:e5:53:
         33:ad:f9:be:94:f3:77:0a:45:29:27:df:db:a3:f0:4b:d6:71:
         fe:b5:88:d2:a7:20:6d:7c:0b:26:49:20:2f:2d:1f:dc:e6:ee:
         93:59:99:16:02:f4:8c:fb:e3:ac:b4:33:e8:85:05:7e:e4:f9:
         cd:21:94:f6:55:a8:60:ac:a1:07:c1:d0:ee:e9:21:18:de:20:
         61:dc:01:84:d5:eb:9e:1e:89:f6:5a:d4:6e:11:c1:15:56:bf:
         e4:89:23:24:a1:4e:0d:6f:54:33:db:16:75:6d:8e:9c:7e:d5:
         48:64:29:c2:74:3b:4c:48:c2:ac:19:bc:10:2b:03:53:f3:5c:
         0d:54:8f:5b:0f:b3:93:2c:63:02:b9:5d:06:ef:4a:bc:25:da:
         81:ae:0d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:15:47 2024 by rpki-client on console-fra.rpki-client.org