Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/724a3de3-fa7b-350e-9620-6cb73ca032ec.roa
File:                     724a3de3-fa7b-350e-9620-6cb73ca032ec.roa (raw, json)
Hash identifier:          BwOL3/V4GXQG5Mp2OyKO9YP+Pwjp0+DNm/D9JYhM+fY=
Subject key identifier:   A9:59:76:F3:EE:1F:92:0D:44:3A:46:C4:02:E1:4F:EF:F5:F4:8E:CB
Certificate issuer:       /CN=e14e5e67-4161-4a2d-bd73-2deb5f1d8f51
Certificate serial:       010D0C9F432858473A5B83B1F74336D7D4B0BC80
Authority key identifier: 1B:D7:71:21:BE:98:06:94:A9:F3:2C:ED:72:1C:49:54:48:BE:69:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/724a3de3-fa7b-350e-9620-6cb73ca032ec.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     395823
IP address blocks:        2602:fce8::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:83:b1:f7:43:36:d7:d4:b0:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14e5e67-4161-4a2d-bd73-2deb5f1d8f51
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=2279b5fb-723b-44bb-9cab-f569c3b55fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:14:5f:a8:1c:a8:5c:ca:44:ef:70:5d:6b:b1:
                    f6:5f:ae:d6:b2:8a:a2:7b:cd:39:ed:08:02:3d:5a:
                    70:95:c4:c5:f0:6a:86:94:53:f9:fb:29:c1:86:5e:
                    d7:48:81:4d:7d:0f:60:3b:7d:85:9e:eb:1a:13:ef:
                    a1:4f:68:0e:61:17:d2:ce:a9:4d:7f:57:ac:90:64:
                    89:78:39:da:be:12:1e:0b:94:0a:99:9c:c2:db:4f:
                    71:87:5c:d4:1d:32:88:79:89:03:39:f9:f0:7d:b2:
                    a8:0c:6b:7a:90:51:67:0b:ce:dd:21:dd:ef:7c:28:
                    43:9b:d7:24:8b:22:54:23:6d:04:32:e1:31:9d:8a:
                    9f:16:d9:70:2f:c9:9c:bc:9f:2c:63:57:fc:d8:44:
                    79:cc:e8:4e:2f:06:14:a6:fa:d6:04:3a:ac:56:e6:
                    30:fc:73:c4:bd:0d:67:0a:18:81:a6:33:29:20:79:
                    03:47:f2:fd:2e:14:5d:e1:21:de:9f:45:fc:01:36:
                    cc:73:95:59:0c:5a:78:9b:9c:46:a6:94:7a:1f:87:
                    74:09:6a:85:af:c1:35:6d:71:3b:63:a7:74:c1:19:
                    3f:5b:be:66:29:63:fd:55:e5:81:9d:5a:9a:0c:50:
                    1c:6a:62:77:e8:21:1e:0f:1b:6c:ad:2c:96:ae:e3:
                    db:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:59:76:F3:EE:1F:92:0D:44:3A:46:C4:02:E1:4F:EF:F5:F4:8E:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/724a3de3-fa7b-350e-9620-6cb73ca032ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.crl

            X509v3 Authority Key Identifier:
                keyid:1B:D7:71:21:BE:98:06:94:A9:F3:2C:ED:72:1C:49:54:48:BE:69:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fce8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:f4:6e:7d:46:dd:1d:a4:8f:9a:c1:c8:3b:b1:7b:f0:e9:a2:
         f1:a2:37:16:87:8f:5b:d2:5e:a6:6b:e1:41:4f:80:1f:d4:e1:
         2e:2c:8c:e8:72:a6:9f:bb:d1:9e:12:87:35:e5:b9:68:c7:d5:
         d7:36:44:ac:3b:6f:27:28:ce:67:8a:de:ec:56:3f:2e:1c:48:
         ae:51:4f:a7:c5:60:0f:26:f3:a1:52:62:9a:4c:72:0e:66:4a:
         e4:44:74:11:3e:c0:6a:33:88:85:a9:18:62:28:44:f7:73:50:
         bc:f5:08:ef:a1:fb:94:7b:f0:c2:c2:88:9c:8c:a0:e9:02:90:
         93:aa:15:a9:75:b6:18:0a:42:33:1d:cf:db:e6:38:f8:d1:b3:
         bc:c1:d3:f9:2c:17:27:c8:57:33:35:5c:3d:02:98:c6:e1:46:
         48:08:98:3e:7b:5e:c4:88:f1:ee:04:3f:94:e8:a2:55:b1:e0:
         8a:13:d9:b1:2f:ce:c2:28:a1:de:37:2a:a7:e5:76:00:60:af:
         e1:e5:21:30:b2:32:57:a5:e5:15:85:f1:88:5f:c1:71:90:3f:
         33:27:dd:b8:64:b0:4f:56:83:92:73:06:74:c1:e8:30:c3:c8:
         62:26:a4:f1:41:68:bf:14:ca:b4:12:37:93:d3:54:81:98:7c:
         ff:01:4a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:45 2024 by rpki-client on console-fra.rpki-client.org