Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/7177e3d2-c014-3d45-b0bf-e13884e6e7b3.roa
File:                     7177e3d2-c014-3d45-b0bf-e13884e6e7b3.roa (raw, json)
Hash identifier:          GiP+LTJgLc81Zf09XDjWs1mJkEi2OzG+IQBIqTwP3zs=
Subject key identifier:   7C:46:78:BC:7F:93:E1:6F:E1:3C:4E:BA:99:63:FE:3D:E9:ED:E1:BA
Certificate issuer:       /CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Certificate serial:       010D0C9F43285845C02D11C60AF47B7BCDC2A200
Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/7177e3d2-c014-3d45-b0bf-e13884e6e7b3.roa
Signing time:             Fri 03 May 2024 13:52:05 +0000
ROA not before:           Fri 03 May 2024 13:52:05 +0000
ROA not after:            Thu 01 Aug 2024 13:52:05 +0000
asID:                     13627
IP address blocks:        2602:fba3:402::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c0:2d:11:c6:0a:f4:7b:7b:cd:c2:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37
        Validity
            Not Before: May  3 13:52:05 2024 GMT
            Not After : Aug  1 13:52:05 2024 GMT
        Subject: CN=c72fc71d-76e8-46c3-bced-cabd5438ee9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a8:90:cc:83:63:90:68:9e:1b:61:9b:7f:35:
                    0c:df:9e:28:e9:f5:0a:40:cf:64:ba:cd:3a:01:c4:
                    59:b3:3d:5b:c1:05:c7:36:f7:b5:e0:58:35:fd:e1:
                    95:44:c5:1d:62:a2:31:33:9d:ab:77:1c:22:8a:cc:
                    8a:0f:4a:82:50:14:44:8f:28:61:64:4a:c4:97:47:
                    71:f5:63:09:c5:f5:98:17:b8:62:46:2a:10:3e:58:
                    5c:ce:55:15:5e:43:1f:69:8e:76:9c:0c:91:b0:10:
                    ba:51:fa:a3:30:ff:c8:9b:2e:4d:57:45:ac:2b:6a:
                    0e:ea:ee:42:43:ec:ab:ec:4f:88:52:7c:6a:25:ad:
                    01:64:f5:8d:b9:f0:e0:c4:1e:40:8d:87:0c:ae:f0:
                    8f:01:fb:f6:14:5c:2c:f3:68:37:78:f4:19:a3:db:
                    20:be:74:21:d6:ed:e0:d6:f1:f8:a5:e3:30:aa:2b:
                    e1:e1:a2:a0:3e:5f:83:e5:24:4e:ec:2c:18:d3:f7:
                    17:03:94:e0:6a:97:d5:e2:c8:06:49:f9:6b:ec:92:
                    fa:af:ae:67:65:76:93:a4:f4:f4:31:b0:76:2a:9b:
                    d4:f9:e6:a0:0e:e9:5b:09:9c:21:db:8e:17:50:11:
                    b9:76:4c:95:f8:5e:63:89:b1:dc:e9:25:12:5a:2e:
                    87:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:46:78:BC:7F:93:E1:6F:E1:3C:4E:BA:99:63:FE:3D:E9:ED:E1:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/7177e3d2-c014-3d45-b0bf-e13884e6e7b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl

            X509v3 Authority Key Identifier:
                keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba3:402::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:3d:9b:88:2d:f9:6c:09:51:92:6b:c9:1e:4c:78:c0:80:ae:
         a6:ad:90:f3:c8:7b:52:f6:6b:be:0a:d0:b5:c0:ed:9f:f4:27:
         8e:6b:b1:9f:7e:e2:04:ef:d0:3c:3e:57:45:3a:c3:63:6b:96:
         2d:9f:83:55:12:56:d9:64:d7:cb:64:a2:eb:91:3e:c2:a2:8f:
         04:49:ea:3d:fd:6b:da:65:ad:1a:7a:9f:8b:5e:50:df:71:61:
         79:95:7c:e0:6e:7b:15:37:13:ec:07:82:77:64:4a:2b:6f:53:
         a8:b0:2e:bc:bd:de:cb:41:01:ec:95:bb:f3:7a:9b:f3:66:80:
         bf:31:b4:3d:9a:90:ae:36:3c:08:a3:6e:0e:37:fa:67:2a:3a:
         39:f3:d5:1c:08:e3:e3:f2:ff:c5:94:7f:e2:91:9a:ef:ba:a3:
         2e:14:49:c4:c4:f6:7f:8c:f5:ff:37:dc:b4:4a:9d:19:e6:e0:
         24:a5:cb:44:13:2e:aa:97:e7:4a:69:b9:ad:fe:4d:40:e3:d7:
         ef:33:fb:9f:3b:82:c9:21:db:da:cf:a5:8a:5f:bb:93:54:12:
         96:d9:d2:2f:c9:6f:3d:7c:7d:53:ae:e5:8e:df:82:fd:d7:a0:
         ca:c3:46:ce:d2:87:5d:bf:c6:a3:04:42:e9:21:d2:a3:1e:1f:
         0b:5a:31:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:00:38 2024 by rpki-client on console-ams.rpki-client.org