Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/37ea5906-a684-3b03-bead-bb0f2822852a.roa
File:                     37ea5906-a684-3b03-bead-bb0f2822852a.roa (raw, json)
Hash identifier:          J7MhIsYBbgfOJBPJ0TsQ7O0nQsemKP7+dpfYW6ZqJ+4=
Subject key identifier:   C9:B8:8D:FD:73:7D:FF:91:9D:95:00:EF:BA:6D:ED:A8:4A:03:17:9E
Certificate issuer:       /CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78
Certificate serial:       010D0C9F43285847E35F6E50369EEBA332AA2AC0
Authority key identifier: 1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/37ea5906-a684-3b03-bead-bb0f2822852a.roa
Signing time:             Fri 15 Nov 2024 14:00:39 +0000
ROA not before:           Fri 15 Nov 2024 14:00:39 +0000
ROA not after:            Thu 13 Feb 2025 14:00:39 +0000
asID:                     11721
IP address blocks:        2602:fa8a:6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:5f:6e:50:36:9e:eb:a3:32:aa:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78
        Validity
            Not Before: Nov 15 14:00:39 2024 GMT
            Not After : Feb 13 14:00:39 2025 GMT
        Subject: CN=fccfa0f3-b520-4408-b5e9-22b17e1861e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fd:73:7e:37:10:73:57:f4:82:e9:bb:0e:08:
                    67:f3:b5:3a:d0:65:b6:01:bf:dc:af:bc:6f:ab:84:
                    2b:a4:fa:ac:74:d0:43:e3:70:96:84:f3:fb:5f:e6:
                    8a:e5:62:d0:c6:27:b0:11:10:fc:82:1c:95:45:90:
                    2f:71:4e:2c:68:f7:b9:ab:3c:e4:b0:ff:d4:55:a2:
                    82:f2:7f:bc:1b:ad:67:34:81:a2:29:f0:54:e0:34:
                    20:fb:31:48:a0:f0:38:05:7e:07:8a:40:f6:db:fe:
                    2f:fb:0c:88:54:2c:57:40:59:10:e8:cd:fd:90:15:
                    65:5a:aa:21:7b:28:b3:f6:bf:be:54:c8:c8:a5:d1:
                    d0:14:7f:2b:77:96:3c:88:f1:88:38:fa:b4:a7:e6:
                    42:45:ae:dd:8b:aa:e5:d0:a4:2a:91:ba:ad:8b:c5:
                    ac:50:30:39:69:86:85:a1:97:3d:07:00:7b:14:1d:
                    a0:42:b8:a1:89:ad:90:aa:d7:e2:6a:03:a6:82:5c:
                    af:8f:8a:0c:fa:68:6d:cb:53:40:73:f2:9a:92:97:
                    7e:98:e8:23:62:fd:11:5e:36:6d:8d:ce:5a:eb:97:
                    ed:ea:47:11:11:af:73:f7:4b:97:ad:9a:45:50:3d:
                    83:d4:ce:b5:e0:08:8b:96:52:dd:69:31:75:6f:4d:
                    fc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B8:8D:FD:73:7D:FF:91:9D:95:00:EF:BA:6D:ED:A8:4A:03:17:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/37ea5906-a684-3b03-bead-bb0f2822852a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl

            X509v3 Authority Key Identifier:
                keyid:1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa8a:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d4:72:34:09:63:78:be:3f:e4:6d:49:29:81:2b:1a:53:ac:
         1e:05:30:c2:bd:32:61:b9:1b:5b:e2:b5:ef:2c:bf:46:62:33:
         36:ae:e5:12:ed:e4:64:d7:03:e2:c2:ee:1d:0b:de:b2:51:96:
         5f:e7:17:48:fa:06:79:28:7b:33:70:88:bd:e0:69:b8:ac:ea:
         91:b0:43:02:29:bd:2d:61:33:0b:d3:84:54:69:06:44:ae:5b:
         52:72:5e:65:4a:d6:e6:26:75:ac:97:56:e6:ae:5b:90:03:2d:
         25:3b:c5:7f:35:02:96:65:a3:90:d0:1f:32:f7:50:e0:e8:1e:
         1f:af:6c:1f:56:b7:ba:f1:92:3f:45:be:f9:c9:8b:8f:d9:ac:
         68:a7:6d:15:6b:5c:62:ec:c5:1e:31:0d:6c:cc:4f:a5:e8:d7:
         77:b1:16:22:40:a8:9e:69:36:a6:de:b9:4a:6a:5e:93:cf:c4:
         e0:8c:06:17:bd:f7:2d:72:92:47:66:da:1b:da:00:fa:ae:57:
         ea:c0:50:c8:25:1d:61:65:e4:47:1b:f6:5c:d5:15:cd:77:23:
         c0:35:cc:c2:46:c4:24:c7:d8:6f:8f:00:cd:8f:04:a5:4d:b2:
         b1:19:ea:af:32:89:8b:ba:78:a5:49:8f:7b:b6:e5:7c:53:64:
         3f:0d:f5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:01:31 2024 by rpki-client on console-fra.rpki-client.org