Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/f0c4693c-151f-3745-b1ce-9d65b68b967e.roa
File:                     f0c4693c-151f-3745-b1ce-9d65b68b967e.roa (raw, json)
Hash identifier:          tG6rcuIlDuKMIBUwlopbntSRg2/zz+92DBDb3EcnY8Y=
Subject key identifier:   F3:A5:D4:22:48:99:4F:65:62:C1:A2:F4:89:68:66:95:36:60:D7:5E
Certificate issuer:       /CN=a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e
Certificate serial:       010D0C9F43285847CFD4A6129929FC8E3E5A6580
Authority key identifier: 8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/f0c4693c-151f-3745-b1ce-9d65b68b967e.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     133846
IP address blocks:        2602:fab0:10::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:a6:12:99:29:fc:8e:3e:5a:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=01d8d9c1-21d5-4d8e-90d6-022c03ffdf20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:27:e3:5b:8d:1c:71:8e:bc:36:31:7b:0e:3c:
                    6c:cf:89:79:2d:60:ec:2e:a0:4f:73:8d:30:67:e5:
                    76:58:a3:15:28:7c:31:0d:d6:eb:d9:ca:70:7c:07:
                    96:d9:67:4d:e3:8b:d9:79:c5:85:a8:17:3f:63:1d:
                    fb:a6:8d:ff:5c:79:dd:04:da:42:2e:5e:17:f8:81:
                    9a:d3:c6:1d:6a:f6:77:5d:87:0b:a0:6d:28:55:73:
                    b4:29:fa:a6:00:17:40:05:fd:8c:07:7f:a0:91:62:
                    58:1b:c1:d6:0f:e6:d8:b1:69:cc:9c:c9:c3:42:ff:
                    8d:7a:7d:99:49:0a:cf:73:3d:d5:34:97:39:b0:12:
                    01:b7:6f:51:51:92:d3:e7:a3:0e:c0:6d:e2:2d:82:
                    39:e1:80:63:eb:41:73:47:3e:95:d8:50:d8:f4:f7:
                    73:1b:2e:43:45:bf:2b:f3:b9:5c:59:79:0a:49:b9:
                    75:0c:1b:05:4b:0a:8a:d5:10:f2:95:10:c5:ae:4c:
                    d3:23:49:da:8e:62:9e:39:4e:e0:57:c7:70:12:6e:
                    52:68:10:2e:56:9c:ac:1b:99:3e:d6:e8:b8:85:e7:
                    48:9e:00:83:68:68:cf:0d:c7:27:f8:da:3b:52:11:
                    47:08:10:68:de:83:66:eb:19:d4:26:ff:c5:d2:5b:
                    84:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A5:D4:22:48:99:4F:65:62:C1:A2:F4:89:68:66:95:36:60:D7:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/f0c4693c-151f-3745-b1ce-9d65b68b967e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.crl

            X509v3 Authority Key Identifier:
                keyid:8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fab0:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:8a:af:2e:20:70:1a:3a:31:21:14:1a:0d:14:98:18:37:06:
         17:23:b4:91:57:f9:31:0a:cd:b4:3a:5c:53:5e:83:08:09:09:
         cc:26:9e:da:2f:8a:a1:48:5a:a2:6e:6b:2e:78:35:5b:d7:74:
         8e:76:ce:06:6f:9a:06:66:a4:8a:58:52:51:83:54:b3:be:b5:
         47:6e:de:d7:98:4a:7b:09:d4:4c:b4:1b:2d:f5:cd:08:58:c2:
         4d:b8:93:88:3d:d5:5c:94:16:26:9a:7d:c5:a4:6e:90:2d:72:
         65:b1:f5:7a:bb:d4:bb:3f:58:58:26:bc:1d:81:40:8c:0b:da:
         0e:65:7e:b5:46:04:32:1c:49:fa:45:d0:db:23:2a:6a:d1:bb:
         a7:98:2e:a8:a1:58:eb:fc:99:e0:11:82:b1:6a:25:23:05:29:
         3e:ca:3e:8a:b0:8b:7b:d9:fc:4f:cb:69:e6:7d:bf:58:3e:6f:
         8a:e1:b6:87:0b:54:2a:b2:0d:72:8c:05:6d:9b:49:66:f4:fd:
         7b:68:95:1e:3b:ba:8f:f1:38:e0:79:bb:f2:32:7e:e9:20:39:
         4f:d6:4d:1d:66:57:04:06:12:76:ce:95:7a:2b:90:87:1b:a2:
         d9:66:e2:07:78:5f:12:8a:91:c6:b0:ac:61:51:cc:f0:e6:c4:
         ec:d3:63:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:28 2024 by rpki-client on console-ams.rpki-client.org