Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/6d6467c5-e645-387e-841d-1f6d46f5c87e.roa
File:                     6d6467c5-e645-387e-841d-1f6d46f5c87e.roa (raw, json)
Hash identifier:          LktZaRfMNc/Qtcd+WY8r3nrmvYZYfbx9/eeGzXyMZH8=
Subject key identifier:   14:35:D8:20:04:CA:60:D1:2C:23:7B:CA:E0:4A:16:2F:1E:DE:17:DE
Certificate issuer:       /CN=15115143-11c8-4b06-80a1-a991fa50f2fa
Certificate serial:       010D0C9F4328584521104D36D7902C869228E980
Authority key identifier: 57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/6d6467c5-e645-387e-841d-1f6d46f5c87e.roa
Signing time:             Thu 07 Mar 2024 14:00:32 +0000
ROA not before:           Thu 07 Mar 2024 14:00:32 +0000
ROA not after:            Wed 05 Jun 2024 13:00:32 +0000
asID:                     201814
IP address blocks:        2602:fbec:fec::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:21:10:4d:36:d7:90:2c:86:92:28:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15115143-11c8-4b06-80a1-a991fa50f2fa
        Validity
            Not Before: Mar  7 14:00:32 2024 GMT
            Not After : Jun  5 13:00:32 2024 GMT
        Subject: CN=52c8c7a4-5ad3-48c4-98dc-1a7adb49afa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ad:01:76:85:9e:22:f6:b0:91:7d:8f:e9:6a:
                    fc:54:35:86:b7:e2:2f:66:c9:75:34:df:49:65:45:
                    cd:89:1f:99:33:e7:12:7e:cb:28:f2:bc:55:82:f1:
                    aa:2b:e2:2d:14:2e:b9:18:9a:04:69:56:af:c6:14:
                    d2:09:56:ef:64:13:a8:df:24:b7:f3:8f:16:21:38:
                    6b:30:ef:f3:ee:1b:a7:6a:2f:0e:48:ce:61:2d:21:
                    bc:42:b4:c7:c3:a0:34:64:2d:dc:8f:45:40:c0:23:
                    9a:21:41:0f:64:b5:3b:c4:15:e1:0d:b2:de:3c:dd:
                    ca:ac:d5:ae:7e:71:6f:e5:4f:67:03:01:f1:f4:8f:
                    85:c3:c1:ce:af:e6:f4:66:f9:72:e0:46:59:4f:52:
                    5c:da:69:f5:a8:4d:41:70:e0:ba:1d:2c:7c:69:a7:
                    b2:5e:72:e5:a5:c5:90:52:55:38:19:f3:ab:e0:be:
                    5a:34:da:5e:06:fe:40:17:e0:a6:f0:03:58:f6:98:
                    6c:f8:f3:f1:5b:35:37:59:65:e3:4f:04:ff:f8:c4:
                    67:28:1b:79:f9:7e:36:0d:93:c5:29:92:29:c8:62:
                    a4:44:8a:9d:e5:a0:6a:26:09:ac:a8:36:37:9a:5d:
                    06:04:ec:45:8e:16:81:38:ef:e3:51:06:ad:f0:df:
                    fd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:35:D8:20:04:CA:60:D1:2C:23:7B:CA:E0:4A:16:2F:1E:DE:17:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/6d6467c5-e645-387e-841d-1f6d46f5c87e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl

            X509v3 Authority Key Identifier:
                keyid:57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbec:fec::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:03:f5:b9:5c:2b:1f:d3:9d:da:d2:37:96:57:8c:8b:72:31:
         36:8f:87:2f:23:04:76:fb:9e:80:94:c7:78:cf:32:e2:f4:d8:
         75:0b:4a:a1:2f:a0:a6:78:2c:70:58:a7:2f:c0:79:be:d3:32:
         94:fa:50:f7:2f:5c:02:f3:18:8c:9b:00:ca:84:a8:a5:14:78:
         4b:25:b4:44:5a:6b:29:76:71:a8:58:f9:37:c5:d9:f9:ec:40:
         b0:e6:8c:62:82:1b:56:1c:fe:62:48:48:78:2d:e2:9c:58:08:
         c0:52:0f:20:c7:bd:77:58:cd:02:c8:5f:f1:5e:70:b7:36:00:
         7e:ab:d3:a6:b7:fa:f1:e5:d3:ef:3d:02:59:6b:b6:94:19:2c:
         93:58:b0:6d:71:47:44:59:f5:fe:eb:11:fb:77:f6:f0:82:65:
         79:b4:d9:48:52:6d:b3:e4:69:2a:7e:8f:75:73:88:65:e1:cc:
         79:a7:9d:86:b5:cd:24:e1:cb:b1:3d:51:51:7d:be:74:ab:14:
         1b:4a:fc:d2:d2:50:16:c6:e6:72:a8:af:58:a0:92:ae:91:02:
         52:90:c7:ee:ba:d7:19:80:5d:49:f6:4e:ff:2a:73:4e:4d:0d:
         9d:95:dd:29:9f:14:f2:1c:22:2f:71:e4:f0:a5:3e:bf:ba:5b:
         e2:07:c6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:32:31 2024 by rpki-client on console-fra.rpki-client.org