Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/742b973a-1794-363e-a6d2-cd0330f9f252.roa
File:                     742b973a-1794-363e-a6d2-cd0330f9f252.roa (raw, json)
Hash identifier:          IY/3KG8NnsyW7mndRplHLZ/FO9tR5gkfhClALBsaA0Y=
Subject key identifier:   04:97:7E:12:B6:2A:35:69:FA:03:BC:38:14:FA:3F:CC:67:87:61:B8
Certificate issuer:       /CN=4272c123-bab5-43cb-a3b9-ac162a3b30af
Certificate serial:       010D0C9F43285847299B25D2E3CEB25D4B7F5080
Authority key identifier: F9:CE:7E:1C:E8:1E:7F:65:34:69:CD:9A:A5:DC:BC:87:38:0B:67:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/742b973a-1794-363e-a6d2-cd0330f9f252.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     400013
IP address blocks:        2602:80c:1009::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/4272c123-bab5-43cb-a3b9-ac162a3b30af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/4272c123-bab5-43cb-a3b9-ac162a3b30af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:25:d2:e3:ce:b2:5d:4b:7f:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4272c123-bab5-43cb-a3b9-ac162a3b30af
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=48866d41-5c11-4c64-9c14-2c0a828a623c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:05:b0:a6:6e:ea:06:d8:f4:8e:ad:07:05:39:
                    57:a0:b7:a0:23:39:b4:9b:cb:13:bd:c6:a1:84:44:
                    1a:d4:99:b5:15:e1:c4:30:24:c0:bd:3e:b9:25:bb:
                    c4:1a:e7:b8:54:64:32:3d:d4:25:81:21:8a:ca:a0:
                    38:87:bb:39:ff:a2:ec:17:48:f3:9f:f6:20:cb:81:
                    77:86:d7:a7:27:ba:2f:c1:68:ee:44:bc:03:22:0a:
                    c5:ff:45:8d:69:09:d8:3b:f5:89:47:d3:b4:9f:ff:
                    2c:70:23:8a:1e:81:6f:46:9a:a7:c1:25:53:b5:42:
                    84:2e:a4:ae:4b:71:a4:42:6f:9b:56:44:f7:d4:bd:
                    ae:59:d1:16:0f:f6:78:4d:b1:da:b4:fc:3d:2f:5f:
                    d0:5b:d0:93:cd:19:3a:e9:1a:47:2f:1e:5e:a8:8f:
                    82:9c:b3:54:df:ff:62:26:5c:1d:18:ad:a4:ab:35:
                    1c:d4:af:95:17:8f:06:65:2e:23:11:17:af:48:a6:
                    95:67:fb:31:ba:a3:72:f8:8f:fd:39:73:4b:87:4e:
                    85:cb:08:dc:8b:09:05:23:ff:ee:76:62:72:ff:a8:
                    91:44:b9:66:a9:9d:99:99:67:ce:69:66:f8:86:b5:
                    ad:3a:c7:94:b8:66:13:00:93:87:89:63:9d:ff:f4:
                    66:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:97:7E:12:B6:2A:35:69:FA:03:BC:38:14:FA:3F:CC:67:87:61:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/742b973a-1794-363e-a6d2-cd0330f9f252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/4272c123-bab5-43cb-a3b9-ac162a3b30af.crl

            X509v3 Authority Key Identifier:
                keyid:F9:CE:7E:1C:E8:1E:7F:65:34:69:CD:9A:A5:DC:BC:87:38:0B:67:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:1009::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:4b:bc:e2:79:df:b6:f3:30:68:80:e3:50:fc:38:0b:bf:49:
         47:0c:68:67:c6:11:42:52:c4:57:6d:a3:30:bf:bd:b7:62:1c:
         68:2b:03:74:e7:65:b8:8a:c9:e0:89:f1:34:82:e4:69:0d:7a:
         0f:d8:35:1c:45:4e:12:1a:64:69:09:3c:ad:06:a9:31:9f:77:
         f2:0f:fe:0c:6d:f7:92:72:cc:69:5c:e3:c9:47:a1:24:cf:3f:
         2b:b0:40:70:9e:75:b0:80:d5:7e:d9:66:50:aa:e9:e0:d7:64:
         99:99:67:13:0f:70:81:24:f8:75:4b:47:5b:6c:4c:ad:02:98:
         64:37:52:8e:bf:11:bc:ea:57:04:7c:f8:88:fe:55:38:60:79:
         6d:cd:1a:e3:6a:09:a6:2d:ad:59:bb:17:40:6b:69:3e:c8:92:
         a8:9f:8d:93:68:c7:2e:a3:61:c1:41:22:98:2d:a9:75:ad:29:
         9a:e5:24:e5:51:aa:bc:f1:48:ac:3a:49:70:06:7f:d2:83:13:
         4d:8d:bf:39:a8:b5:b3:14:60:52:62:48:55:17:3f:34:2c:89:
         e2:32:25:24:9a:12:b3:c5:36:c6:8c:d9:c4:7c:ee:4b:c0:31:
         3f:77:e7:20:58:31:d8:84:da:5e:4f:a5:58:00:f7:c6:2f:8a:
         0b:46:8f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:01:26 2024 by rpki-client on console-fra.rpki-client.org