Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/0e14be3c-f65a-35e1-a43c-19cb9391cd86.roa
File:                     0e14be3c-f65a-35e1-a43c-19cb9391cd86.roa (raw, json)
Hash identifier:          xJOclahRivUkU63laWyvaSeREskPKyoStEbbXkUTMnc=
Subject key identifier:   42:37:E7:51:69:1C:AB:01:AD:DF:BA:69:F0:B1:E5:90:53:6F:15:DE
Certificate issuer:       /CN=090cf75b-f998-45e2-a8ea-c4d882201d24
Certificate serial:       010D0C9F432858474585EF06CCA1C46E7E78E680
Authority key identifier: 14:9C:C7:07:9A:90:D7:69:1D:47:04:E9:AD:6D:E7:D7:CE:2C:7D:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/0e14be3c-f65a-35e1-a43c-19cb9391cd86.roa
Signing time:             Fri 20 Sep 2024 01:00:31 +0000
ROA not before:           Fri 20 Sep 2024 01:00:31 +0000
ROA not after:            Thu 19 Dec 2024 02:00:31 +0000
asID:                     44258
IP address blocks:        2602:fd63:3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/090cf75b-f998-45e2-a8ea-c4d882201d24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/090cf75b-f998-45e2-a8ea-c4d882201d24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:45:85:ef:06:cc:a1:c4:6e:7e:78:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090cf75b-f998-45e2-a8ea-c4d882201d24
        Validity
            Not Before: Sep 20 01:00:31 2024 GMT
            Not After : Dec 19 02:00:31 2024 GMT
        Subject: CN=c72df99b-ce77-4600-bd10-9a7ae8d3abbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:52:33:7a:58:41:24:6f:9e:38:56:39:8e:85:
                    75:59:11:e5:ae:6b:38:3b:1b:ca:23:0f:cb:5c:ed:
                    49:a6:3d:ea:78:a4:5b:03:98:00:96:9a:35:75:37:
                    0c:7a:1e:19:e2:33:dd:37:f9:3b:fc:4d:9b:4c:51:
                    0a:36:a5:7a:4b:99:eb:7c:62:dd:e5:f2:e3:48:d4:
                    32:9f:59:cb:c5:5a:b9:6c:ac:39:d4:20:89:64:da:
                    b4:56:20:00:38:05:22:5a:01:5c:4a:2a:72:4a:3d:
                    2b:52:0e:8d:58:03:42:9d:63:34:47:3f:20:57:de:
                    d4:36:ff:72:ba:f6:aa:67:0e:58:5a:73:14:42:4c:
                    29:9d:73:1a:79:c7:fa:ed:77:03:be:62:93:6d:6c:
                    31:59:6d:45:f5:14:df:ea:a8:61:2c:39:a4:76:89:
                    ac:8e:5f:15:83:6f:6f:78:e9:00:ab:64:0b:2d:47:
                    03:6b:cd:54:38:f8:a6:12:67:66:90:27:14:db:f9:
                    55:be:19:72:1c:1e:b1:14:f6:76:dc:86:75:d3:c7:
                    85:90:4d:69:8b:83:b9:a6:01:8b:4a:74:cc:4a:87:
                    c8:c6:bf:d4:0c:1e:9d:1e:fc:e6:12:10:e4:09:01:
                    f8:3a:3e:d4:ba:d6:86:5f:d0:47:c7:9a:66:32:7b:
                    79:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:37:E7:51:69:1C:AB:01:AD:DF:BA:69:F0:B1:E5:90:53:6F:15:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/0e14be3c-f65a-35e1-a43c-19cb9391cd86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/090cf75b-f998-45e2-a8ea-c4d882201d24.crl

            X509v3 Authority Key Identifier:
                keyid:14:9C:C7:07:9A:90:D7:69:1D:47:04:E9:AD:6D:E7:D7:CE:2C:7D:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd63:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:c8:e3:9e:36:6f:33:37:05:e1:28:59:08:ee:1b:ee:80:8c:
         60:a1:3e:55:03:43:b1:2f:1c:7c:22:ae:0a:c8:09:0c:11:57:
         8a:a8:c6:df:8a:e4:64:6f:24:85:7f:13:a3:c8:c2:18:3c:5a:
         61:de:b5:de:b7:9f:3d:36:33:bf:5b:11:65:7b:e1:59:a2:7a:
         bc:15:51:db:76:ae:f5:fa:41:56:76:5a:04:b5:21:fc:19:af:
         8e:cc:69:f2:55:1e:75:02:da:48:90:0c:b6:15:71:47:19:4f:
         84:7e:42:dc:75:aa:43:3b:88:de:91:d1:79:c4:ac:ee:fb:d5:
         0e:74:62:ad:cd:9e:9e:77:f8:aa:0a:b1:e4:3b:ab:8c:55:b5:
         eb:85:6a:9e:50:25:07:a0:24:32:1f:b8:50:df:32:fd:c2:46:
         db:c7:ea:ae:04:3d:76:ed:84:79:e5:b3:41:c9:4d:1c:71:b1:
         53:15:5d:d2:e2:13:ee:95:d4:9d:d6:05:31:92:34:48:40:3f:
         d1:f1:91:27:78:ca:1d:23:70:c5:45:dd:20:34:5c:1c:5c:ed:
         9e:b5:9b:9a:08:d8:9c:b2:9d:d0:de:9e:bd:f4:25:12:4b:11:
         cf:3b:a2:2d:8a:2e:10:e3:84:53:48:c7:de:58:e4:f2:a5:3d:
         62:4d:7e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:06 2024 by rpki-client on console-fra.rpki-client.org