Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/30b359ba-bc9c-3d0e-90e6-71751be9d1c6.roa
File:                     30b359ba-bc9c-3d0e-90e6-71751be9d1c6.roa (raw, json)
Hash identifier:          rjNzOWxpOJL5jBm9RaZR5seBR+tmT6tU+FErB0bXppE=
Subject key identifier:   F6:AA:65:68:03:E8:AA:86:6F:D8:58:08:18:BF:30:B1:55:C1:CF:E8
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F43285847256B28400D1E9992ADAC0D00
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/30b359ba-bc9c-3d0e-90e6-71751be9d1c6.roa
Signing time:             Sun 08 Sep 2024 13:00:41 +0000
ROA not before:           Sun 08 Sep 2024 13:00:41 +0000
ROA not after:            Sat 07 Dec 2024 14:00:41 +0000
asID:                     8075
IP address blocks:        2602:fd5e:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:25:6b:28:40:0d:1e:99:92:ad:ac:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Sep  8 13:00:41 2024 GMT
            Not After : Dec  7 14:00:41 2024 GMT
        Subject: CN=929bf88c-31f7-4fe7-a785-f43c03100234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:28:e9:98:67:57:37:b5:9f:5d:f5:8b:f0:ad:
                    5d:5b:09:2b:d7:99:1d:18:9e:47:c7:09:f6:49:e5:
                    92:ee:2f:f6:bf:27:7e:7d:35:a2:b9:84:bd:b3:b8:
                    27:2c:75:19:52:4b:88:ea:47:09:e3:04:34:60:29:
                    1f:ac:88:2c:71:fc:25:9c:02:f8:99:80:2e:31:3e:
                    37:94:59:33:4c:ed:4b:93:8c:22:db:6d:f7:cc:cc:
                    6e:da:d2:0b:25:34:42:4e:5d:d6:fb:52:23:b1:7b:
                    fd:df:97:f3:19:6f:ce:32:55:2c:3d:e5:c9:d8:8e:
                    a6:14:14:eb:e2:f0:06:c0:12:f5:5f:07:a0:8d:a9:
                    2e:e4:1e:a3:0b:f8:3e:33:cf:b3:62:04:96:60:1b:
                    53:dd:de:e9:9e:55:3f:b1:cc:77:0b:6d:c5:c7:c5:
                    dd:9a:3e:da:b3:18:0c:ce:b8:f0:b8:25:1e:d2:d8:
                    96:74:24:a8:7e:c3:a2:94:5d:27:8f:5a:fd:d2:b3:
                    e0:5d:c7:a6:41:f0:76:47:5d:f1:d4:92:e3:1f:75:
                    e7:d5:2b:1a:13:02:69:1a:bc:c8:0c:be:bd:60:21:
                    5e:52:0b:e7:ae:26:6f:e9:f8:07:20:de:61:fb:e7:
                    6d:a9:44:91:e7:21:b9:5e:5a:b9:86:58:63:38:d3:
                    d3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AA:65:68:03:E8:AA:86:6F:D8:58:08:18:BF:30:B1:55:C1:CF:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/30b359ba-bc9c-3d0e-90e6-71751be9d1c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd5e:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:32:e3:13:be:ad:9c:64:68:25:99:47:f7:a8:57:c4:a2:0d:
         4f:e4:2f:c2:63:1d:9f:85:7a:79:15:b3:2d:af:84:69:89:e9:
         24:ba:0c:3e:58:31:35:09:71:0f:01:6e:39:fa:e4:ce:3d:dc:
         a7:3c:5d:f1:eb:b1:41:cd:1c:31:f7:41:db:44:ec:97:88:0c:
         cb:ea:ef:ac:97:10:ba:9b:56:c4:81:e9:05:43:b6:37:0d:3d:
         0c:f3:40:2f:e0:67:11:60:d3:16:fe:32:f7:91:30:5c:d2:a3:
         9d:a6:62:1e:42:db:33:14:b5:c3:3e:d9:57:b2:a0:0b:b1:02:
         49:a5:ac:3c:08:6d:a0:36:eb:ab:7a:c6:8d:fe:be:d2:e0:c4:
         81:0d:3f:08:67:08:5c:6a:70:a3:d1:a7:8d:6b:00:e9:79:a7:
         9c:14:1d:91:2c:a9:1a:46:30:0b:8c:fb:4c:73:b1:bb:d7:ba:
         c5:3f:7c:b5:07:ce:4a:8f:65:cd:88:b4:3b:e9:53:b0:6b:5e:
         1c:eb:bc:32:e1:14:2f:cc:c0:f6:d1:a0:b7:1f:f7:71:f5:4b:
         86:17:f9:a7:ee:9b:34:00:9b:16:c7:53:d6:d6:f1:76:df:d6:
         3d:ed:d9:e3:63:a1:2d:d2:4c:59:03:c6:9a:48:50:dc:3f:44:
         8e:67:02:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:11 2024 by rpki-client on console-fra.rpki-client.org