Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/84c08845-7c56-3c58-ac59-8a896b8ac0f3.roa
File:                     84c08845-7c56-3c58-ac59-8a896b8ac0f3.roa (raw, json)
Hash identifier:          EQX1JVdrLzUssfmQ7u9B7SxbLbR0JyyMTgD5yqvKVOE=
Subject key identifier:   FD:9E:34:67:CB:47:33:6F:2F:2D:71:52:40:05:D0:03:A5:89:92:46
Certificate issuer:       /CN=b82e5c10-aee7-4c19-a828-84974fcb8ac2
Certificate serial:       010D0C9F43285847679A1A976847B0814B65C140
Authority key identifier: 7C:7B:72:D5:62:73:5A:F1:21:F7:6B:56:C0:00:96:50:0D:33:CC:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/84c08845-7c56-3c58-ac59-8a896b8ac0f3.roa
Signing time:             Wed 02 Oct 2024 05:58:43 +0000
ROA not before:           Wed 02 Oct 2024 05:58:43 +0000
ROA not after:            Tue 31 Dec 2024 06:58:43 +0000
asID:                     46427
IP address blocks:        2602:2c1::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:67:9a:1a:97:68:47:b0:81:4b:65:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82e5c10-aee7-4c19-a828-84974fcb8ac2
        Validity
            Not Before: Oct  2 05:58:43 2024 GMT
            Not After : Dec 31 06:58:43 2024 GMT
        Subject: CN=ae2a49f9-7310-410c-a65d-fc17a2a8dda0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:dc:6f:90:63:12:1d:e9:63:6c:dc:60:0a:a0:
                    c9:65:05:41:09:e6:41:06:6d:9b:bf:4d:f6:5c:05:
                    a2:b0:a7:ba:a0:ca:32:71:8a:fd:65:84:fb:94:c9:
                    ba:ef:18:fd:8e:ff:56:16:19:c1:2f:f1:18:75:e3:
                    49:e9:41:30:a9:84:41:08:31:4e:0c:45:37:62:e5:
                    b4:4f:71:f8:c1:77:64:1f:53:f0:fe:df:25:b5:55:
                    de:d9:c4:fc:f2:0c:bd:75:54:08:c7:0d:0f:ec:2a:
                    fb:35:35:1b:cf:94:08:c4:cc:dc:d1:61:b3:6e:92:
                    87:38:6a:d0:2d:92:0b:53:73:59:aa:e2:bc:aa:85:
                    af:53:eb:c0:8c:1c:37:62:d1:10:f3:bc:ba:35:0b:
                    1f:cd:00:a4:51:57:46:1c:b8:58:b7:5c:c6:ea:41:
                    f6:47:f3:3a:5b:15:de:d6:48:af:30:51:4c:7d:b7:
                    1a:74:5c:59:9c:31:8e:b8:08:fe:68:d8:ee:83:40:
                    1a:a8:fd:06:62:93:ed:08:c4:91:6b:f3:50:73:b3:
                    b7:fc:ec:63:48:c7:4d:2f:ab:bb:c9:16:97:e3:1e:
                    2d:db:42:b2:bb:c3:bc:3f:a8:34:b9:7a:e9:db:8e:
                    28:b2:f2:c6:e3:cb:de:b1:f9:10:1a:21:40:ff:4b:
                    22:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9E:34:67:CB:47:33:6F:2F:2D:71:52:40:05:D0:03:A5:89:92:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/84c08845-7c56-3c58-ac59-8a896b8ac0f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7B:72:D5:62:73:5A:F1:21:F7:6B:56:C0:00:96:50:0D:33:CC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2c1::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:80:c5:7e:02:04:46:88:94:4c:cf:7f:ec:8f:d1:5b:99:3f:
         ac:a6:49:ad:a0:c0:ea:35:e8:f4:75:19:6e:da:3f:de:46:1f:
         89:d0:05:21:b6:45:cf:db:4d:22:59:00:1b:d8:69:2d:98:e5:
         5f:16:5a:f5:9e:9d:8e:9a:5c:6d:83:73:2c:46:1a:cf:88:2a:
         d9:66:eb:d5:1e:bc:a7:cd:ca:a2:1b:1e:c5:6e:58:b2:e0:15:
         d2:8f:e6:63:0c:65:24:24:1f:15:31:20:d9:ae:64:07:70:42:
         89:bd:0f:01:9a:ae:18:cc:3d:ae:50:1d:09:38:8b:8e:0e:7b:
         73:52:64:e0:cf:7e:82:a4:cc:10:9e:70:36:1c:d9:dd:e2:e0:
         e2:96:a0:b4:a3:48:28:fe:e3:8d:88:ec:48:73:54:18:1e:b5:
         bf:bf:97:b4:07:cf:d4:26:57:01:84:9c:b1:c6:35:8f:36:42:
         e5:6a:96:92:2a:76:df:65:d4:f7:a2:1c:7c:eb:07:f9:63:3c:
         33:1a:e6:4e:d7:b4:31:5f:e0:51:15:04:dd:9d:91:03:5c:d9:
         e2:9e:fa:0f:c7:ec:8a:ee:3a:d5:d8:5c:fa:01:54:46:9b:aa:
         b0:75:7b:3d:c1:a5:e3:57:86:27:45:83:ad:4b:77:6f:55:56:
         ed:c7:63:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:10:16 2024 by rpki-client on console-fra.rpki-client.org