Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/20a12472-5a8f-34f9-93fe-5929eccc24c9.roa
File:                     20a12472-5a8f-34f9-93fe-5929eccc24c9.roa (raw, json)
Hash identifier:          yFF1H5RjaLLisMRJ+CsSiEkyIVZxC6VxkkguHz+ee+o=
Subject key identifier:   2D:C9:7D:44:7E:F3:2B:80:9F:C3:79:69:60:DF:67:CC:EC:06:6E:67
Certificate issuer:       /CN=d06d1174-4bf4-465b-9f0b-1091633e6717
Certificate serial:       010D0C9F43285845E7291F1FFD0A0A1606DE0480
Authority key identifier: F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/20a12472-5a8f-34f9-93fe-5929eccc24c9.roa
Signing time:             Fri 17 May 2024 13:00:34 +0000
ROA not before:           Fri 17 May 2024 13:00:34 +0000
ROA not after:            Thu 15 Aug 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        2602:fb00:1::/48 maxlen: 48
                          2602:fb00:4::/48 maxlen: 48
                          2602:fb00:3::/48 maxlen: 48
                          2602:fb00:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e7:29:1f:1f:fd:0a:0a:16:06:de:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d06d1174-4bf4-465b-9f0b-1091633e6717
        Validity
            Not Before: May 17 13:00:34 2024 GMT
            Not After : Aug 15 13:00:34 2024 GMT
        Subject: CN=f54cf972-139e-4cef-8465-1279d9d58d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:95:b9:b7:ec:f1:dc:17:f3:87:31:d6:84:d4:
                    27:83:e3:dd:4f:c0:48:66:50:90:e5:1d:55:34:61:
                    8c:4d:ec:11:67:91:68:4f:36:cd:6f:9b:47:ae:f9:
                    73:81:8e:95:e0:c2:d1:27:bb:fc:c6:ed:ca:06:32:
                    76:2d:18:63:a0:d8:c7:28:19:40:6f:bc:42:1d:1e:
                    55:14:00:b5:05:ba:89:5a:86:87:31:e0:b1:5b:be:
                    50:ac:ea:85:90:59:6b:64:d3:db:d8:37:57:6a:32:
                    0e:0c:53:f6:2a:70:79:59:09:29:f2:ae:ca:46:fa:
                    38:cc:f9:54:d9:5d:61:ce:a5:11:eb:2d:a2:f1:9d:
                    f3:3e:d4:62:5a:72:83:a2:ae:6f:52:b1:b3:b7:2b:
                    80:81:a1:79:7e:92:5f:03:22:0f:81:cc:19:47:01:
                    b7:f2:78:09:7c:fb:b3:20:ba:49:0a:10:91:64:b8:
                    b0:73:17:8c:2f:c1:1d:82:7a:45:7a:bb:69:d3:47:
                    22:f2:1d:7a:61:57:f7:20:4b:de:e8:72:14:bf:45:
                    2e:3b:08:15:6d:d4:d4:1d:eb:3b:da:fb:f5:ed:3c:
                    e1:72:ba:e4:fe:00:f9:3b:81:1e:f8:d3:80:77:6c:
                    6a:1b:ca:e1:40:db:c2:b4:97:21:a7:0d:53:95:bd:
                    04:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C9:7D:44:7E:F3:2B:80:9F:C3:79:69:60:DF:67:CC:EC:06:6E:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/20a12472-5a8f-34f9-93fe-5929eccc24c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl

            X509v3 Authority Key Identifier:
                keyid:F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb00:1::-2602:fb00:4:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:69:cd:1e:fa:0f:47:8b:43:b9:1b:cd:5d:37:75:aa:c5:c5:
         27:91:05:f0:9b:a7:89:d0:21:47:d2:02:88:d1:3b:05:80:3c:
         f2:fe:8d:b0:6a:19:48:d7:42:57:aa:e5:4c:56:9e:73:ab:87:
         58:f0:bf:3b:ea:79:10:06:af:13:dd:76:48:57:75:2d:5d:74:
         c7:e1:be:aa:b7:7e:ab:c3:f3:3f:cb:ea:da:25:91:f3:98:9d:
         2a:2b:99:be:45:3a:95:9a:cd:b6:44:07:51:f2:f8:5a:8b:95:
         0c:72:58:7e:39:9c:de:92:49:91:df:21:bb:2c:d1:ad:1d:a4:
         4d:e8:cf:a0:e2:54:16:f4:0a:1d:29:76:5a:cf:01:5f:45:5e:
         cd:0d:bd:84:78:af:23:f2:a4:e2:1e:9c:d8:27:44:cc:4e:bc:
         4d:09:46:a0:37:2d:07:40:bb:80:b6:a3:b1:fe:f4:6e:cc:bc:
         c9:c9:3a:73:da:36:26:b5:8f:cf:66:99:0c:33:26:e6:0a:5c:
         38:23:1a:d3:c8:8d:07:5c:e2:30:53:fc:ea:e5:41:6c:4a:51:
         10:92:5d:d2:04:98:ee:f3:ee:79:4e:43:15:5e:8d:f3:d1:35:
         a1:61:98:35:50:3f:3e:76:08:55:d8:39:20:ea:de:d0:dc:de:
         51:b7:2c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:32:40 2024 by rpki-client on console-fra.rpki-client.org