Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/ab70b155-c31f-3dfa-b48d-947689c8f9df.roa
File:                     ab70b155-c31f-3dfa-b48d-947689c8f9df.roa (raw, json)
Hash identifier:          JGIXxfGjJGmD0VTTHr+a3L1DjoHBGsMIwmKPaR5qrgg=
Subject key identifier:   10:45:62:42:52:71:26:A2:5A:E4:24:3F:45:A8:92:85:E0:7C:C5:4B
Certificate issuer:       /CN=e48dc9aa-413f-45f8-9a4e-20346bdcca64
Certificate serial:       010D0C9F43285847B3CC15AF86CA6F12C6C9C800
Authority key identifier: 73:F2:EF:9F:7B:AB:1D:FA:60:EB:45:BD:F6:94:39:DA:68:7C:31:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/ab70b155-c31f-3dfa-b48d-947689c8f9df.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     29770
IP address blocks:        2602:faae::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/e48dc9aa-413f-45f8-9a4e-20346bdcca64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/e48dc9aa-413f-45f8-9a4e-20346bdcca64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:15:af:86:ca:6f:12:c6:c9:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e48dc9aa-413f-45f8-9a4e-20346bdcca64
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=1028a292-33d2-4973-9497-98294b465cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:53:07:81:87:14:87:ef:8f:aa:f6:b6:33:0e:
                    4f:07:d3:37:21:d4:a9:10:3d:95:50:7c:9e:7a:1c:
                    02:98:be:86:7b:b9:93:c9:38:92:c2:67:63:c7:c3:
                    04:38:2e:92:43:4c:54:46:70:ca:19:4f:6d:67:79:
                    17:88:46:83:27:a0:ec:e7:87:e0:2e:15:2c:14:7f:
                    38:f8:da:6c:5a:30:b6:89:10:25:54:26:59:5a:df:
                    f4:5a:a4:23:eb:06:da:dd:ce:f3:90:ef:27:b1:7c:
                    c8:42:c4:9b:33:c3:1c:df:4d:0c:89:91:79:b0:63:
                    40:66:af:7a:e7:8b:03:21:c4:73:3b:01:f4:5e:ab:
                    32:a7:b4:a4:86:91:aa:06:3b:7e:b6:80:bb:67:a0:
                    fa:21:3d:dc:c2:a5:32:e3:50:5a:b9:e9:c5:1c:ea:
                    d3:8a:40:eb:43:29:7d:e3:5d:90:15:29:91:7c:42:
                    d9:a6:e0:db:ac:6c:c8:16:e9:1b:ba:3c:8c:2f:10:
                    12:c6:de:d1:f0:2a:55:77:86:96:ea:90:da:d0:fc:
                    cb:b7:d7:ae:59:af:d1:06:32:70:bf:74:64:8b:25:
                    23:21:1c:a5:2b:f3:fb:da:e4:55:11:3e:81:7f:e2:
                    5e:3c:41:7a:6b:49:d1:6e:28:5d:38:66:21:7a:26:
                    88:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:45:62:42:52:71:26:A2:5A:E4:24:3F:45:A8:92:85:E0:7C:C5:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/ab70b155-c31f-3dfa-b48d-947689c8f9df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/e48dc9aa-413f-45f8-9a4e-20346bdcca64.crl

            X509v3 Authority Key Identifier:
                keyid:73:F2:EF:9F:7B:AB:1D:FA:60:EB:45:BD:F6:94:39:DA:68:7C:31:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faae::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:16:6d:ae:32:5d:69:ec:87:5a:a0:0d:60:25:95:37:e8:aa:
         73:d0:af:67:21:53:a4:08:52:ec:4f:73:2a:ff:07:98:76:7a:
         d4:31:69:62:38:cb:53:c3:4b:ee:f3:ef:a5:73:75:86:db:fe:
         3f:f2:e1:20:78:0c:8d:61:6d:b5:5d:97:fd:4c:32:bb:85:7f:
         ea:9b:2a:9c:d0:b8:8b:6f:02:51:02:ff:b3:8a:87:b1:b5:54:
         29:74:d7:eb:52:92:3d:20:db:8f:dc:9d:54:c4:0d:3b:29:64:
         b1:d1:74:be:3c:01:30:0f:c9:4a:aa:0a:2d:6b:0f:b6:e1:e7:
         44:36:ce:fa:8a:32:08:25:f4:e4:37:3e:e9:f4:2e:5c:65:c3:
         9e:55:02:cc:b5:26:ed:72:00:77:1d:05:fb:d4:82:3e:fb:9d:
         c7:6a:d1:40:0a:5f:a2:ff:79:97:11:00:47:cf:4e:33:39:6a:
         55:df:c3:b1:7e:a7:03:98:1c:a1:65:59:c1:23:dc:bd:3d:65:
         35:d3:dc:1e:78:08:03:ce:73:7a:35:15:e9:27:ff:1b:be:db:
         88:46:45:4b:3b:3e:de:2c:6a:e5:ff:ab:bd:6a:77:4e:f5:8a:
         17:9c:3b:08:b9:e9:f3:e0:e3:86:d3:ce:a9:6d:94:0c:3a:ad:
         3d:e9:5e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:45:14 2024 by rpki-client on console-ams.rpki-client.org