Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6/c0f85f1e-222e-3708-8d2c-72da38ec41aa.roa
File:                     c0f85f1e-222e-3708-8d2c-72da38ec41aa.roa (raw, json)
Hash identifier:          C2R6KmJ5IKSdukTu9y2bNqzuX4smmI0IWkAWshvzoIw=
Subject key identifier:   9E:D3:2A:24:19:8F:C4:22:F2:D7:7A:9A:0A:D0:7A:96:FF:A8:6B:DB
Certificate issuer:       /CN=e618da9e-0816-460e-9515-1743f366bdc6
Certificate serial:       010D0C9F43285847537B7DEFE64514F9C4999D00
Authority key identifier: 25:1B:3B:D4:61:2C:93:3C:6B:18:D0:53:DA:75:11:03:2A:67:3C:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6/c0f85f1e-222e-3708-8d2c-72da38ec41aa.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     210000
IP address blocks:        2602:faf4::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6/e618da9e-0816-460e-9515-1743f366bdc6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6/e618da9e-0816-460e-9515-1743f366bdc6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:7d:ef:e6:45:14:f9:c4:99:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e618da9e-0816-460e-9515-1743f366bdc6
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=d272e451-470f-4e2a-b2f0-ef772e5f0bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b0:c2:98:b6:88:8d:92:48:ea:e8:8e:62:6f:
                    f1:fc:6c:c8:7e:32:74:e2:9d:47:c4:3b:e2:cd:fb:
                    4b:13:cb:5c:e7:8b:64:e6:7a:bf:37:22:c8:a4:26:
                    4d:70:14:23:7d:4d:63:1b:af:bf:0a:c7:4b:8a:b1:
                    47:3e:6a:14:1c:90:0b:67:45:7c:51:ab:e1:96:2a:
                    0d:b5:9a:54:78:1e:da:17:63:38:fb:af:8d:e8:77:
                    86:d4:49:d3:05:52:aa:8f:21:65:55:5d:7d:26:36:
                    d1:02:63:a5:29:0a:a6:69:26:9c:21:0d:1d:a6:2d:
                    b8:42:47:ab:e7:44:c5:b6:0f:65:42:26:ba:91:cd:
                    b7:bc:f3:ec:ee:6f:fe:35:89:e4:6e:7c:a7:f6:f9:
                    dc:32:ee:e4:f6:a8:6d:7e:8f:50:d9:e2:1c:89:31:
                    7f:de:2e:f5:18:5b:7c:f7:f6:0e:ac:78:b0:01:60:
                    b9:97:81:f6:b7:a5:f3:da:41:b8:ea:2e:b5:9b:3f:
                    ac:57:10:28:ff:f3:e5:53:c5:cd:cd:26:5c:22:63:
                    55:9c:83:1d:97:fc:85:4a:9d:7b:2c:3c:86:b0:8e:
                    42:fe:c7:6b:61:16:f2:aa:3b:65:f7:77:9f:b6:0c:
                    7d:cd:cd:e3:f4:4e:4a:df:46:49:c2:da:29:c0:08:
                    a3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D3:2A:24:19:8F:C4:22:F2:D7:7A:9A:0A:D0:7A:96:FF:A8:6B:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6/c0f85f1e-222e-3708-8d2c-72da38ec41aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6/e618da9e-0816-460e-9515-1743f366bdc6.crl

            X509v3 Authority Key Identifier:
                keyid:25:1B:3B:D4:61:2C:93:3C:6B:18:D0:53:DA:75:11:03:2A:67:3C:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faf4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:d7:c6:af:53:91:f3:b6:4e:6b:e3:ab:83:0a:77:5f:34:40:
         33:22:3a:bc:49:33:31:a3:81:aa:37:91:b5:84:1f:ac:60:c1:
         f8:c5:32:da:3f:86:16:6d:ad:22:f3:de:99:d0:6f:6f:35:f2:
         0c:cd:3a:ec:08:37:65:fb:c9:30:2d:57:fc:2d:b3:83:13:c7:
         30:0c:3f:39:a5:d2:8a:69:fa:a7:91:18:c7:ac:6a:ee:83:c9:
         c4:53:82:82:18:04:cf:3d:3d:d1:bc:77:27:cb:4b:fa:d0:96:
         1d:e8:e5:f4:21:c3:e5:d0:00:72:45:3a:8a:ee:3c:10:97:26:
         01:33:8c:d3:3c:71:62:c8:15:35:fe:0e:2e:ed:be:d3:2f:b6:
         cb:6d:8b:bb:39:c0:da:7d:f1:12:31:f7:94:6a:2f:a3:7f:22:
         73:96:c6:88:9b:75:27:96:cf:dd:71:ed:04:66:3f:73:a2:8e:
         3d:46:43:5b:9f:64:75:57:6c:8e:d3:ef:87:b0:d1:a0:99:12:
         97:37:79:2c:40:83:66:54:81:2a:70:92:7a:8b:5c:04:c8:85:
         73:20:b3:ed:fe:c9:52:90:10:84:3d:fe:25:0d:8a:87:92:31:
         92:ef:35:8e:73:0c:36:d1:fb:44:19:67:b9:bf:49:f4:14:d1:
         70:a3:6c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:24 2024 by rpki-client on console-fra.rpki-client.org