Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/38aa2871-1127-35de-be08-5b917c38fae4.roa
File:                     38aa2871-1127-35de-be08-5b917c38fae4.roa (raw, json)
Hash identifier:          CbKMbG61QkyzsEzie1ORVqlfEZcPLNrsf1Mkh1Hzocg=
Subject key identifier:   57:E0:EF:A5:0B:CB:E7:6B:E7:4F:1B:3B:BC:3C:12:4C:53:84:97:44
Certificate issuer:       /CN=443e93d6-47f3-4dff-a7d2-d7de4a2a04ce
Certificate serial:       010D0C9F432858472F3079DB49DE5933F150CC00
Authority key identifier: A0:76:4E:8D:13:F2:EB:39:E7:16:02:EC:C0:26:5D:8A:D5:93:E2:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/38aa2871-1127-35de-be08-5b917c38fae4.roa
Signing time:             Thu 12 Sep 2024 01:00:31 +0000
ROA not before:           Thu 12 Sep 2024 01:00:31 +0000
ROA not after:            Wed 11 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        2602:2df::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:30:79:db:49:de:59:33:f1:50:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443e93d6-47f3-4dff-a7d2-d7de4a2a04ce
        Validity
            Not Before: Sep 12 01:00:31 2024 GMT
            Not After : Dec 11 02:00:31 2024 GMT
        Subject: CN=98c498a9-5075-4bd5-be08-0190a0259476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:68:81:00:ed:cf:2b:1c:66:98:b1:1a:ff:be:
                    7d:65:b5:49:d2:ec:b9:7b:b0:40:1d:8f:de:74:73:
                    2a:9f:89:1f:15:9a:a8:2a:a7:c6:48:b6:d9:03:29:
                    ec:ad:62:cb:e9:a2:3f:18:26:ce:8a:ef:36:8a:0e:
                    99:9e:0c:2b:07:d5:c6:9d:ab:92:1e:e2:ee:57:5a:
                    b8:46:b8:70:6b:81:23:e7:73:c1:fc:24:f2:fe:bb:
                    ff:20:25:12:b1:36:6b:28:a2:ab:40:ef:80:8e:6d:
                    da:b5:64:49:5b:ff:d0:28:42:6e:a0:76:c9:44:7b:
                    d3:bc:c4:c6:e4:21:b2:29:5a:0a:a2:14:d8:f2:79:
                    8a:ee:20:14:ec:1a:a9:f6:8a:a7:d2:5f:19:93:53:
                    f4:15:34:52:25:7f:b0:94:7d:a7:fa:c5:28:39:84:
                    0f:23:24:d5:99:47:fc:8f:1c:bc:99:1a:81:80:2d:
                    57:dc:0a:d4:5b:c9:d2:08:7a:92:55:8d:ab:c5:20:
                    99:7f:ac:97:c9:4d:fa:7c:19:e0:8e:6f:ec:dd:28:
                    9f:0a:81:18:dd:4a:54:b4:ce:ea:1a:13:d1:2a:7a:
                    82:9a:e8:b4:ac:ba:ae:fc:f3:37:82:d2:6c:ae:40:
                    65:c5:63:1b:30:45:78:5a:6a:0a:e8:f1:69:7d:5b:
                    52:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E0:EF:A5:0B:CB:E7:6B:E7:4F:1B:3B:BC:3C:12:4C:53:84:97:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/38aa2871-1127-35de-be08-5b917c38fae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.crl

            X509v3 Authority Key Identifier:
                keyid:A0:76:4E:8D:13:F2:EB:39:E7:16:02:EC:C0:26:5D:8A:D5:93:E2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2df::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:a0:ed:85:35:64:47:fc:fa:f0:9d:87:f7:bd:ee:6c:ae:33:
         66:85:1e:2f:1e:95:44:81:84:4f:ff:86:89:6f:67:4b:aa:53:
         83:d9:36:1b:e7:25:a7:0f:d5:84:2b:d9:a9:02:2e:fe:65:58:
         10:b4:d1:9d:35:93:d5:58:cf:83:7f:49:53:1e:c9:da:a1:39:
         da:ed:17:db:67:60:fc:e9:42:19:9d:1b:7d:be:9c:82:41:11:
         2f:59:ca:e3:f3:88:83:22:1e:9a:74:65:62:b6:c0:bf:c0:16:
         6f:00:e6:55:f4:ae:89:0f:9a:c9:54:8e:95:b0:0d:af:07:2d:
         fd:bc:93:6e:15:85:4a:93:33:ba:5f:76:f0:e0:46:2b:10:3e:
         53:d5:66:f2:77:27:b1:6c:18:4d:4d:f2:02:58:72:06:a0:9e:
         66:89:ce:11:e7:e8:a3:46:33:54:31:f8:07:87:3b:04:b0:30:
         5c:e7:11:a3:e9:f0:ae:92:98:11:2b:a0:ba:57:db:df:84:25:
         a3:fd:ec:fa:cd:8e:0a:9f:0c:cc:e3:15:16:f2:c5:95:6a:dc:
         d5:63:52:72:1f:cf:7d:10:f9:a9:65:25:af:fb:f8:05:26:4f:
         30:96:09:bc:23:df:b0:5e:f6:34:5c:69:9f:e0:05:ee:f6:12:
         00:a4:05:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:07 2024 by rpki-client on console-ams.rpki-client.org