Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/7902899e-42c1-3c3c-aba3-5953cd19370b.roa
File:                     7902899e-42c1-3c3c-aba3-5953cd19370b.roa (raw, json)
Hash identifier:          +ddhlvA6QniWCiWr4/4pMtloA5I1nPaDEeC+TxwvSyg=
Subject key identifier:   75:68:5D:35:00:6F:09:EE:13:1E:69:D0:C5:02:7B:92:77:66:D9:15
Certificate issuer:       /CN=98161ef7-249b-450b-ba6a-5819e613ed63
Certificate serial:       010D0C9F432858472835FCAE41AE9752A6EA4AE0
Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/7902899e-42c1-3c3c-aba3-5953cd19370b.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     14923
IP address blocks:        2602:2b7:c28::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:fc:ae:41:ae:97:52:a6:ea:4a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=fc61a5ff-c57f-4100-ba22-280c4ea6bcc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7f:56:66:4e:12:6b:77:45:a5:c1:44:59:37:
                    7c:b4:f7:3c:e6:e8:86:ca:75:f2:2a:a2:57:03:39:
                    57:c1:0f:72:4e:ee:cc:63:0d:d1:61:6d:72:41:0a:
                    bd:02:d0:cb:f9:bf:dd:13:8b:f0:70:45:4b:c9:74:
                    1f:be:c4:e4:41:eb:ae:eb:a7:40:46:73:44:f4:f9:
                    71:f7:0b:86:01:11:c4:06:83:86:f9:cf:5c:0e:a2:
                    4a:43:17:0e:0f:ec:15:96:cb:f9:59:4e:30:df:88:
                    6b:d1:d1:4c:de:9a:27:c7:57:38:19:f9:1b:09:cf:
                    c9:0f:86:c5:35:73:e7:31:2f:6d:19:c7:83:58:7c:
                    86:3f:2b:71:dd:8e:6f:5e:97:de:1b:ad:ca:ae:95:
                    f9:e8:b4:e3:74:89:ae:6c:03:b3:fe:1a:98:ab:78:
                    af:39:2c:0e:eb:ef:a4:c3:d4:bb:dc:65:2b:b3:54:
                    ed:12:1e:98:d8:b2:ac:56:fc:cc:ba:45:f9:50:ce:
                    e5:4d:9b:13:23:7d:ee:84:39:e0:04:5e:e9:f6:1d:
                    95:5f:32:12:fc:0e:e6:1e:f5:1c:20:a6:13:5e:b6:
                    52:4a:a4:84:d1:98:22:32:78:dc:41:04:93:3b:b3:
                    40:e1:e8:4d:b2:16:aa:68:46:85:ac:2d:75:4c:06:
                    b3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:68:5D:35:00:6F:09:EE:13:1E:69:D0:C5:02:7B:92:77:66:D9:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/7902899e-42c1-3c3c-aba3-5953cd19370b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl

            X509v3 Authority Key Identifier:
                keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2b7:c28::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:dd:98:7c:0a:7f:d2:d9:48:b4:8d:99:22:71:95:a7:6f:77:
         b7:a7:f6:52:a2:67:37:8b:ff:ab:ad:76:93:af:3a:62:ca:6f:
         e8:19:13:68:11:cd:ea:11:e2:47:3e:c6:4b:c2:ad:0b:2f:bb:
         2e:ed:5b:16:fc:19:0a:c9:db:2b:47:24:2d:80:7b:cb:4e:1e:
         8d:19:fb:27:a1:05:e3:c8:00:3e:16:d3:f3:65:03:29:80:18:
         db:70:fc:f8:5c:e8:7a:d9:4e:a6:13:00:84:4f:e6:20:50:92:
         88:e2:f3:c4:70:ba:82:f4:79:69:3c:47:25:00:51:d2:77:8e:
         8f:c7:3b:95:3c:e6:8e:e6:31:1e:00:c6:1d:26:e0:e2:ed:20:
         24:3a:6d:04:56:3a:e0:9a:7b:09:de:d4:5c:cc:95:fd:a5:e3:
         8e:71:a9:ce:5a:ed:c1:5c:c4:5d:3a:b2:d0:ed:1f:29:34:84:
         37:42:e5:a3:74:76:51:4b:68:67:11:51:ab:3b:28:77:ba:60:
         b1:cb:42:a9:9d:82:bc:04:d9:b0:2f:40:ec:6f:d6:89:2f:15:
         7c:bf:db:49:93:d2:98:8f:ee:82:d4:0d:e8:90:76:05:47:10:
         16:3d:6c:c0:50:e4:6f:45:58:23:eb:9c:50:b7:4a:7f:19:36:
         b2:75:05:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:30:47 2024 by rpki-client on console-ams.rpki-client.org