Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4e6f899a-97bf-34bd-a0fb-36a5631ee175.roa
File:                     4e6f899a-97bf-34bd-a0fb-36a5631ee175.roa (raw, json)
Hash identifier:          6MLfB61d44hCM7DbtzQ4xvJJDq6IM+1PJIp8df5O+9I=
Subject key identifier:   03:44:C4:22:AE:82:31:C8:12:3B:BF:F7:23:BC:D0:94:81:D8:51:0C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F432858472C65E6D58123858453CFD380
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4e6f899a-97bf-34bd-a0fb-36a5631ee175.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     0
IP address blocks:        2602:107:800::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:e6:d5:81:23:85:84:53:cf:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=ba7612db-5e1a-43e5-a402-e46789ea3424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cd:fa:18:db:02:7a:ee:54:e0:75:78:df:6d:
                    53:ac:c7:10:3e:00:63:ac:3b:c1:93:8c:8c:4f:c0:
                    4a:4b:fd:ee:42:f9:27:06:78:64:d8:3f:dc:66:d7:
                    e4:5e:20:bf:de:a3:70:68:ba:c3:65:6d:9c:eb:df:
                    80:58:9b:30:dd:70:80:cd:09:72:1d:47:f1:37:7c:
                    c5:2c:2f:68:96:e1:f5:ba:f9:6b:05:71:f5:60:42:
                    93:63:ad:15:a1:94:33:4c:22:33:c5:42:2e:18:7a:
                    22:79:e8:64:70:3a:09:f6:d0:20:ec:bd:20:dd:8f:
                    72:f6:95:6d:9e:93:b9:f7:2f:3b:de:3a:f2:e3:18:
                    b5:74:1e:3f:da:19:a5:b9:ee:39:fe:14:b0:9c:95:
                    6a:82:a0:65:7a:0b:95:f0:e5:36:ec:c1:2c:3c:be:
                    2e:24:c0:1a:f6:af:b4:ba:42:85:7a:58:1b:15:84:
                    0f:a6:b3:64:1a:ed:2a:61:cf:5b:67:1f:64:e2:15:
                    38:cf:c5:50:14:c7:02:91:b1:0a:55:1a:07:be:7a:
                    52:94:1d:f2:c8:80:54:c8:ae:c2:9f:9e:32:f7:90:
                    5a:27:af:04:6b:9e:ee:68:6d:d2:93:dd:2e:77:12:
                    d3:f6:1e:26:b0:c8:2b:a6:4c:cf:0f:08:f3:21:47:
                    28:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:44:C4:22:AE:82:31:C8:12:3B:BF:F7:23:BC:D0:94:81:D8:51:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4e6f899a-97bf-34bd-a0fb-36a5631ee175.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:2a:c5:35:f0:7f:dd:7f:c7:c9:24:d3:40:f0:ed:3e:f3:49:
         e8:ed:14:09:25:8b:1a:7b:54:1f:22:2e:ed:cb:5d:92:1e:6c:
         a8:a7:c0:e2:24:9d:ee:f0:ed:b8:22:82:18:d3:95:df:d6:f2:
         9e:cc:4b:63:3d:73:cb:9c:49:22:cf:18:e2:bb:9e:3f:ac:c0:
         7a:5d:3b:80:47:da:9a:9a:e9:8a:a0:6d:28:01:c3:00:e3:8c:
         9e:c7:0b:97:32:da:72:ce:75:c7:fd:59:3c:26:cc:d0:67:af:
         5c:6f:26:d1:bd:ab:25:26:20:b1:eb:6b:88:73:6e:ca:24:68:
         93:13:15:4c:a5:9f:be:e6:af:d6:07:1f:65:60:8a:a0:41:a0:
         dc:69:dd:f0:30:02:a2:44:fc:06:c0:2d:8b:25:04:30:93:64:
         9c:e0:ff:5b:65:95:23:e5:eb:4a:00:fc:77:44:f5:9d:49:2a:
         17:a7:07:b2:83:eb:c0:cc:4b:08:d6:9d:3f:a9:50:a4:b5:08:
         9b:7a:39:f6:76:90:bb:6c:f5:22:6d:7f:84:dd:62:d0:54:ff:
         07:82:b1:0a:3c:a2:e2:48:92:05:98:78:b9:65:f0:46:68:4b:
         ed:20:fa:f7:92:a7:74:cb:01:4f:15:95:f2:3a:e1:41:80:92:
         29:24:b0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:13 2024 by rpki-client on console-fra.rpki-client.org