Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/a9b5ebc3-3d2e-30d7-a836-ba8ce67fdded.roa
File:                     a9b5ebc3-3d2e-30d7-a836-ba8ce67fdded.roa (raw, json)
Hash identifier:          bpSCWZNfGDKrUyHqL8os21l2h/FeoROdk8XMoCyvXHU=
Subject key identifier:   B7:26:2A:06:80:4D:7D:2A:A6:97:29:86:B6:B8:5C:B7:4C:7E:CE:60
Certificate issuer:       /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial:       010D0C9F43285847C8D9E1BB2D13780F94658400
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/a9b5ebc3-3d2e-30d7-a836-ba8ce67fdded.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     29802
IP address blocks:        2602:ffd1:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:e1:bb:2d:13:78:0f:94:65:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=d69dcd40-c592-4884-92d4-a4d6e94af456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:34:d1:23:78:c6:1e:0e:6c:72:dd:d7:b6:63:
                    44:ff:2b:2d:48:f2:6a:c7:f3:3f:ff:3d:ca:e7:c0:
                    bd:d2:93:0b:04:3f:c9:74:c5:d1:19:c6:85:fe:8c:
                    29:fc:a4:05:ca:5b:2a:6d:42:3b:5c:82:5b:51:f2:
                    24:2e:d5:04:0b:ce:bf:09:b4:db:d8:96:7b:71:a7:
                    21:b1:70:3b:a8:0b:c8:9c:e3:a9:31:11:8c:20:65:
                    0b:b1:2e:98:ab:e0:b9:da:dc:a3:ef:09:e4:4d:08:
                    1c:c9:ec:98:d3:b5:4c:3d:e2:21:13:4b:80:0b:90:
                    f8:41:e0:06:75:4b:fa:12:6a:2b:56:ef:c4:f5:d4:
                    f7:f4:95:92:c5:ca:1f:93:d8:6d:77:10:cb:33:a5:
                    44:a8:35:db:57:66:b8:9a:8e:55:6c:b8:8b:c3:7b:
                    9e:7e:41:c6:dc:dc:93:ed:28:36:b3:be:a8:1e:c7:
                    af:c2:f4:f0:4b:43:5d:bd:11:c3:4e:f0:ff:1b:5f:
                    d0:13:22:8c:d3:e0:08:ec:b1:83:f4:05:b6:1e:81:
                    4a:38:04:18:4a:17:d8:7e:a0:68:0f:01:6e:4b:01:
                    d3:dd:ea:17:0e:97:48:4b:a8:15:6d:ab:18:b5:7b:
                    5a:3b:8e:52:5a:b1:61:90:3b:58:b1:37:e0:f0:3c:
                    73:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:26:2A:06:80:4D:7D:2A:A6:97:29:86:B6:B8:5C:B7:4C:7E:CE:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/a9b5ebc3-3d2e-30d7-a836-ba8ce67fdded.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl

            X509v3 Authority Key Identifier:
                keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffd1:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:ef:f3:0a:b8:b4:91:cc:27:a0:a7:22:35:7f:6d:28:f3:00:
         87:84:83:b7:81:12:6b:79:7d:2e:9a:82:98:00:70:73:72:df:
         48:e8:ab:69:c1:be:20:20:44:31:0f:ca:11:f0:c6:88:74:1a:
         e1:f7:85:2d:ed:77:44:01:88:c0:74:b6:80:4d:64:ad:bd:a4:
         46:ec:c7:a4:20:27:11:c1:66:24:f8:b6:10:e5:af:70:26:d0:
         24:95:67:ff:e6:9d:c4:9a:41:83:2f:10:31:60:e7:87:56:53:
         11:30:d4:b9:67:c9:27:5b:db:27:85:17:85:6c:98:b0:79:e5:
         81:8f:c6:09:ed:90:3a:be:e5:d4:ec:52:ca:d9:61:4c:6b:2d:
         74:c7:29:16:0c:b6:bf:00:92:75:0c:5f:eb:cb:60:4f:6a:77:
         e9:13:e4:1d:98:64:67:b2:78:b4:3d:99:44:11:47:1c:12:96:
         19:05:40:81:fc:9b:fd:63:10:a4:bc:9a:48:38:44:a8:eb:23:
         4a:2a:3a:7f:e5:f4:46:a4:c4:9a:bd:e7:95:43:f3:07:3a:01:
         e5:df:14:d0:41:1b:3c:49:b9:1b:19:34:fa:58:5a:9d:6b:ca:
         ab:7d:4d:21:d3:2a:6b:f9:d6:81:53:5a:e6:a0:87:21:51:b9:
         9d:95:9b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:12:07 2024 by rpki-client on console-ams.rpki-client.org