Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/8c50bf7a-c6fc-368a-8be3-df93c2db4768.roa
File:                     8c50bf7a-c6fc-368a-8be3-df93c2db4768.roa (raw, json)
Hash identifier:          tDf8PiILVv7ylXKvqXl02gzj99WmQ8OstwstP8MqKd0=
Subject key identifier:   4C:43:0C:59:3D:E7:C1:EE:3B:28:80:2A:19:B1:BC:A7:FE:A0:B4:BF
Certificate issuer:       /CN=f0dba087-0567-4455-9983-ac2ca8102281
Certificate serial:       010D0C9F432858479D76BC8DF1F5CFAB6F0933C0
Authority key identifier: 72:DC:68:AE:CA:BE:D0:04:AF:54:CF:CC:3E:73:0D:49:FB:BD:61:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/8c50bf7a-c6fc-368a-8be3-df93c2db4768.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     210715
IP address blocks:        2602:fa87:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/f0dba087-0567-4455-9983-ac2ca8102281.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/f0dba087-0567-4455-9983-ac2ca8102281.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:bc:8d:f1:f5:cf:ab:6f:09:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dba087-0567-4455-9983-ac2ca8102281
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=6a4e1c3f-8c3b-4887-89d4-e18f9ab78f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a3:8e:e7:2b:1c:bf:40:64:5c:b0:8d:25:45:
                    6d:4c:a3:9f:0a:9a:e7:78:d1:2f:94:d3:ff:ba:ea:
                    dd:f3:46:ca:34:a0:0e:b4:a4:04:d3:e4:1b:a9:f0:
                    05:95:8b:4f:06:0a:0f:4e:df:28:b3:90:2b:42:43:
                    5d:8e:21:1a:ca:b9:64:72:f7:8b:ba:ca:e3:3e:01:
                    72:30:df:1a:c3:ed:e2:0f:8c:cd:e5:27:ff:a7:97:
                    46:a2:13:cc:1b:07:d7:1b:ff:21:dc:ad:f4:36:fd:
                    65:0e:3d:46:94:af:29:c1:32:22:e0:52:ae:d6:94:
                    29:44:cc:41:64:f0:24:46:15:b0:38:66:d6:27:ae:
                    37:0e:3c:88:d2:9b:02:66:9e:92:55:42:27:98:1a:
                    e7:e0:86:ef:6a:1d:48:37:8b:17:ff:3a:85:55:d8:
                    01:37:8d:27:a4:03:80:a5:3e:7e:b6:97:0b:d4:41:
                    1d:fc:07:17:a9:18:e3:6a:fa:52:77:d3:29:48:d9:
                    4a:de:65:70:90:01:92:47:47:3b:cf:13:4f:8e:ad:
                    e2:72:9c:51:9e:af:2e:c0:bc:23:1d:84:5c:ba:d0:
                    8c:97:97:fb:bb:60:20:cc:03:eb:1f:a0:ba:d0:f8:
                    c9:15:bd:89:78:4f:2f:e9:bc:43:67:1a:d0:ac:a1:
                    69:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:43:0C:59:3D:E7:C1:EE:3B:28:80:2A:19:B1:BC:A7:FE:A0:B4:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/8c50bf7a-c6fc-368a-8be3-df93c2db4768.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/f0dba087-0567-4455-9983-ac2ca8102281.crl

            X509v3 Authority Key Identifier:
                keyid:72:DC:68:AE:CA:BE:D0:04:AF:54:CF:CC:3E:73:0D:49:FB:BD:61:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa87:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:0f:0a:d2:6a:3e:fd:2e:eb:00:07:8f:43:6f:7d:87:93:65:
         93:2d:23:e7:d7:29:53:a2:a7:e6:04:74:b3:a1:aa:79:93:12:
         d7:18:eb:8a:8b:eb:f4:55:4c:e7:a0:96:27:e7:d6:2a:59:d9:
         14:7b:b0:85:0b:06:30:0d:10:f7:af:70:0b:4a:d1:c9:a9:91:
         9a:25:ee:9e:52:95:58:89:d7:d9:f5:37:90:61:64:71:cf:c1:
         a2:c4:f4:76:0b:ca:9a:f2:12:f4:f8:8c:18:d5:54:02:f9:18:
         12:33:ec:21:d4:2d:df:8e:79:45:e2:27:87:dd:80:62:06:d8:
         09:4d:bc:b7:78:fc:90:80:c4:eb:5f:c5:23:05:c4:32:10:fe:
         d4:9a:a0:e5:f1:c2:1a:05:1c:86:46:ab:43:05:f8:e3:ca:b0:
         03:1d:b4:d8:93:cf:d8:00:07:9c:c9:5c:34:dc:35:58:7d:4f:
         af:1d:f0:cf:f6:55:ca:80:10:b8:a8:b4:2d:59:2f:64:dd:3c:
         c2:b9:91:dc:dc:b4:c0:1d:07:c4:53:c1:e4:6f:0c:1e:2c:78:
         a8:3c:e0:e4:00:8b:1c:a9:2c:20:1a:c5:41:4e:c1:d0:dc:e5:
         99:73:05:c4:05:ac:b7:9c:b1:fc:5e:8c:02:76:72:73:39:92:
         bf:06:40:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:25 2024 by rpki-client on console-fra.rpki-client.org