Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/4a9eb50d-2780-3043-b84e-a510d52cdef8.roa
File:                     4a9eb50d-2780-3043-b84e-a510d52cdef8.roa (raw, json)
Hash identifier:          NKmPJUSqQ8eIjbN5+GXbErlQAk4TOnYpjXQzFbbzgsg=
Subject key identifier:   44:4B:66:80:10:15:A1:5E:4D:59:D7:7A:A1:C7:96:8C:94:B0:4E:43
Certificate issuer:       /CN=98161ef7-249b-450b-ba6a-5819e613ed63
Certificate serial:       010D0C9F43285847B531550073E3B1AFE473E180
Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/4a9eb50d-2780-3043-b84e-a510d52cdef8.roa
Signing time:             Wed 30 Oct 2024 01:00:32 +0000
ROA not before:           Wed 30 Oct 2024 01:00:32 +0000
ROA not after:            Tue 28 Jan 2025 02:00:32 +0000
asID:                     174
IP address blocks:        2602:2b7:100::/40 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b5:31:55:00:73:e3:b1:af:e4:73:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63
        Validity
            Not Before: Oct 30 01:00:32 2024 GMT
            Not After : Jan 28 02:00:32 2025 GMT
        Subject: CN=c065d526-656c-47bf-b82a-2ff5433aa699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9f:40:c2:b7:f1:25:b9:15:e3:5a:c2:e6:91:
                    7f:e5:78:ba:d0:ab:1c:b3:7b:71:11:dc:3f:57:e0:
                    07:33:4e:12:9f:23:dc:4a:0a:f3:78:4a:0c:73:2d:
                    3f:8e:50:fc:a1:6f:fa:b6:62:54:88:b2:05:ad:9a:
                    27:6a:b9:39:d2:66:e4:1a:7d:f8:07:0d:3b:e3:43:
                    a0:f3:ce:30:58:fa:db:c2:31:bc:9e:3c:d0:e3:e8:
                    69:db:9a:73:c9:98:6e:41:84:2e:d6:db:28:2a:37:
                    51:59:02:19:1e:c2:53:20:6b:4d:0c:1e:df:c0:22:
                    ef:1f:8f:38:f5:f8:1d:7c:80:11:5b:7f:86:07:83:
                    c8:60:82:73:d7:c9:f2:a0:25:81:1b:c2:08:98:73:
                    88:4f:b1:b3:42:33:fd:45:4a:de:44:42:a7:e7:54:
                    7c:b2:6c:31:61:87:bf:6f:2c:15:da:5f:89:05:c5:
                    90:d9:49:29:04:25:d4:6a:cf:64:30:bc:cb:d9:c9:
                    aa:70:80:91:50:dc:8e:8b:61:cd:1c:62:48:df:d4:
                    23:90:79:e5:79:cf:8c:22:b4:ef:fd:34:e7:2d:ef:
                    ae:d7:4f:bd:05:b7:d3:2d:e6:d7:91:9a:be:d9:72:
                    75:c1:77:85:1d:eb:b4:e7:7a:6f:b6:f0:08:be:38:
                    c7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4B:66:80:10:15:A1:5E:4D:59:D7:7A:A1:C7:96:8C:94:B0:4E:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/4a9eb50d-2780-3043-b84e-a510d52cdef8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl

            X509v3 Authority Key Identifier:
                keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2b7:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:05:b5:63:27:1b:f9:75:08:5f:00:fb:30:b8:4b:91:85:f9:
         cb:c9:9f:be:db:21:d7:28:8a:6a:97:3a:b0:6d:ac:56:a5:26:
         4b:07:55:79:4f:a6:4e:e9:2f:52:50:e9:72:a1:95:aa:7c:d8:
         06:a8:cc:76:22:fd:05:f5:aa:d9:bd:3d:92:e1:fc:f4:42:27:
         91:ec:d8:49:cf:10:9b:e4:6e:5e:76:ff:ff:90:a4:76:56:e7:
         ef:4c:d2:68:b7:1a:88:7c:62:33:84:9c:68:59:43:3f:29:ab:
         6a:43:eb:c1:5e:84:45:fa:2b:54:64:b1:7d:a1:2b:b4:cf:ee:
         c7:d3:57:6b:b4:fe:22:e1:84:6b:7b:c4:a0:65:99:f6:1a:06:
         d3:87:b3:3b:24:9a:3d:34:d4:f6:39:d3:51:9d:a9:2d:50:92:
         9f:3d:fe:3f:be:55:d7:63:b4:7d:7b:27:fa:e4:bd:79:7d:7d:
         6b:43:61:4f:b5:39:3c:45:8e:c9:34:42:11:dc:df:40:b1:fa:
         cb:0d:25:7e:e1:07:2f:79:35:f1:96:9a:38:ed:57:47:36:47:
         38:1f:91:4a:d2:15:ae:19:d4:a5:7f:52:cc:00:81:28:93:7c:
         9b:13:e4:0a:1f:95:e4:23:b8:80:db:19:2d:68:4e:49:a9:f7:
         40:04:5d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:13 2024 by rpki-client on console-ams.rpki-client.org