Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/c3a590de-e964-3608-b8eb-bd811473f6cc.roa
File:                     c3a590de-e964-3608-b8eb-bd811473f6cc.roa (raw, json)
Hash identifier:          S53jyJh9EU8hHALlKBwXfqiNCUOZMSjf1ok+ts7ucJg=
Subject key identifier:   BE:0D:9F:A4:DF:1A:3D:82:46:F1:73:6E:FB:22:CE:95:42:5E:FF:20
Certificate issuer:       /CN=98161ef7-249b-450b-ba6a-5819e613ed63
Certificate serial:       010D0C9F43285847BA56B00074BEEAFE97AB8100
Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/c3a590de-e964-3608-b8eb-bd811473f6cc.roa
Signing time:             Thu 31 Oct 2024 21:14:58 +0000
ROA not before:           Thu 31 Oct 2024 21:14:58 +0000
ROA not after:            Wed 29 Jan 2025 22:14:58 +0000
asID:                     53667
IP address blocks:        2602:2b7:c44::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ba:56:b0:00:74:be:ea:fe:97:ab:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63
        Validity
            Not Before: Oct 31 21:14:58 2024 GMT
            Not After : Jan 29 22:14:58 2025 GMT
        Subject: CN=01d73112-15d5-4c91-9699-1e7ac047ffb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c0:ab:ee:ed:5a:17:c6:0c:c8:52:8c:61:c6:
                    80:2c:66:18:83:ee:1c:53:56:04:ce:ed:e7:96:57:
                    52:4e:4c:9b:08:c0:fe:93:a7:65:d0:63:40:10:98:
                    03:f3:67:64:91:2f:76:f0:a3:03:32:8c:42:03:23:
                    55:dc:46:7e:52:e2:e7:df:f9:f4:ee:7f:bd:cc:61:
                    f8:b2:27:c3:56:0c:d9:c5:62:99:52:b4:b7:e8:52:
                    f9:91:89:43:4c:8f:30:c6:da:bc:b2:e0:f1:2b:4d:
                    8a:b8:bd:77:01:ff:2f:f6:34:90:18:cb:8b:95:fe:
                    34:8a:5b:36:97:95:06:88:69:cb:b6:74:c2:8b:cf:
                    38:fb:53:0f:96:51:b1:61:dc:19:c9:45:e2:d2:eb:
                    6f:ec:c8:5c:25:1e:87:3a:80:71:63:73:b5:d7:6b:
                    31:89:47:9f:d8:b0:3e:bd:34:50:d4:3d:0f:f1:c5:
                    c1:be:ce:9d:36:44:fe:c3:3d:71:60:27:d5:8a:bb:
                    b3:d3:f7:35:c5:42:54:c0:7f:14:3b:4e:27:bd:e0:
                    07:68:c4:32:63:b9:d7:3a:2c:63:f6:a6:ab:8e:58:
                    04:db:9a:c7:f2:eb:cc:e7:0a:97:c1:9f:2d:57:61:
                    68:bb:e5:5d:97:df:ed:27:d3:6b:68:bb:8b:ae:1f:
                    c4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0D:9F:A4:DF:1A:3D:82:46:F1:73:6E:FB:22:CE:95:42:5E:FF:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/c3a590de-e964-3608-b8eb-bd811473f6cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl

            X509v3 Authority Key Identifier:
                keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2b7:c44::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:b8:e2:a6:03:de:b2:0d:16:86:3f:c0:a3:44:42:e2:a0:2c:
         22:7d:a6:7a:33:29:2d:a8:12:f5:8c:ae:30:6e:d8:a4:aa:5c:
         8a:f3:df:e8:cf:86:56:88:fd:28:5c:92:fb:c8:f0:ac:df:b2:
         da:f7:70:d5:4f:32:55:ba:84:a9:a2:d1:1c:a6:e3:04:21:a9:
         d8:07:55:02:d3:cd:48:0a:4c:16:8f:08:c3:c1:d3:e2:0e:1f:
         04:7a:3d:69:3c:78:37:43:c6:ea:42:b4:1c:09:8c:23:f8:fd:
         94:b5:10:45:15:57:d3:9c:47:9f:fe:0a:0a:6a:2c:a1:72:49:
         0e:37:bc:6d:d1:a1:db:37:cf:22:e7:76:c2:c3:ae:ba:57:94:
         03:76:ff:0d:30:38:73:06:54:d0:5e:2f:db:9c:5c:e3:7a:80:
         52:e8:ea:1e:47:6a:21:40:52:32:7c:95:e6:df:7a:fb:a5:43:
         93:9f:36:8c:20:6c:3b:c8:68:85:9a:81:20:72:a2:6d:3e:8e:
         35:9e:37:f0:03:31:c4:22:6b:c4:eb:0a:81:cb:77:97:3b:fa:
         24:cd:9f:43:48:f4:21:5e:ae:4c:e1:68:1c:d7:70:c3:fd:31:
         8f:ff:d3:9b:12:82:0b:74:49:56:e9:9e:cf:e1:f0:7e:5f:06:
         1f:1a:20:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:30:47 2024 by rpki-client on console-ams.rpki-client.org