Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/21e1f23d-5f1f-317b-8982-26cebe1a6742.roa
File:                     21e1f23d-5f1f-317b-8982-26cebe1a6742.roa (raw, json)
Hash identifier:          YWlRxmuukt8iUN+w5ai0ctJ+t/rSLZwcTlr/DQSudUA=
Subject key identifier:   6D:49:2A:9D:81:67:8A:8A:0D:56:4D:BB:95:A9:F0:39:A9:67:BB:EC
Certificate issuer:       /CN=0f521759-b880-4a7d-be8b-3ce70e4aba83
Certificate serial:       010D0C9F43285845A15E127745A30EAF85B9BE00
Authority key identifier: 07:C2:8B:51:71:01:77:8F:B1:D5:C0:66:6F:21:6A:D7:24:B0:E5:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/21e1f23d-5f1f-317b-8982-26cebe1a6742.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     398065
IP address blocks:        2602:817:3000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:12:77:45:a3:0e:af:85:b9:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f521759-b880-4a7d-be8b-3ce70e4aba83
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=bbd40f99-6d02-4dcf-962a-af13a72dc247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:95:de:23:d7:37:68:b8:16:23:ba:ae:82:e3:
                    20:36:fe:c4:8d:08:e2:81:b0:8f:d0:37:2d:53:15:
                    9b:9a:cb:d6:00:8e:bf:1b:55:bd:43:89:4c:77:2d:
                    0c:b5:79:d0:18:f0:26:83:2d:b1:7d:55:b6:d8:54:
                    56:e0:83:d3:6e:47:0d:75:b8:b1:b1:77:a3:e6:7a:
                    91:97:be:16:a6:1b:79:47:4f:df:7c:f9:bd:a3:c9:
                    6d:c4:96:e9:9d:50:fa:50:3e:40:00:3c:28:fe:7b:
                    e0:40:4d:eb:e7:1a:cd:80:4a:94:83:b8:a2:96:b3:
                    d9:3f:37:bf:6a:15:25:52:af:d7:34:8b:84:cc:11:
                    94:7d:e7:38:2a:a2:17:01:82:d8:0b:88:ca:d5:38:
                    09:89:2b:2e:2c:c7:8d:e2:f7:34:cd:07:fe:38:74:
                    76:73:89:68:ee:89:91:ab:74:23:b6:13:6e:a5:53:
                    65:39:16:1a:bc:e4:75:d6:0c:dc:74:de:a7:45:8c:
                    00:a7:fc:22:3b:ba:17:0d:05:3c:fa:90:c9:27:b1:
                    f8:39:c6:ef:c6:b4:d8:d0:99:8f:19:00:83:65:1c:
                    c1:d4:f1:be:0a:b9:6b:2a:0d:6e:22:f7:dd:4e:b2:
                    76:55:3d:a8:d0:0e:2d:f1:05:4e:8c:9b:84:68:86:
                    5b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:49:2A:9D:81:67:8A:8A:0D:56:4D:BB:95:A9:F0:39:A9:67:BB:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/21e1f23d-5f1f-317b-8982-26cebe1a6742.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.crl

            X509v3 Authority Key Identifier:
                keyid:07:C2:8B:51:71:01:77:8F:B1:D5:C0:66:6F:21:6A:D7:24:B0:E5:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:817:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:02:05:7d:46:be:90:78:c8:e5:a2:bb:f5:5e:5f:72:4e:5d:
         9d:88:68:c0:66:8c:0a:8e:b5:14:62:fc:0d:88:22:35:fc:48:
         23:8b:b7:d6:29:56:df:d2:fe:b6:83:4a:8c:8e:aa:b1:ca:c2:
         81:13:e6:ea:53:84:73:bb:21:9d:4e:7c:bf:35:1c:17:b5:4a:
         a7:9a:5d:53:b9:74:21:b3:ec:0c:16:28:e9:b8:2e:66:30:af:
         cb:ef:9f:48:ff:7b:44:79:e9:72:91:e1:ae:3b:91:e3:d3:1b:
         24:ba:b3:c4:e0:2a:54:8b:2e:c5:e8:72:d7:13:17:ee:0d:47:
         6a:8b:03:58:fa:f2:d9:e2:ef:b3:48:04:df:a6:dd:a0:5e:1c:
         a8:44:0e:16:b9:ef:e3:02:8e:56:fc:fe:f1:20:4e:63:ba:b1:
         81:f3:4a:f4:bd:a0:54:32:1f:f7:ea:57:6c:1f:e8:f1:09:02:
         3a:66:5b:32:50:da:15:7c:54:b5:61:77:78:62:3e:e3:24:04:
         77:b8:bd:a4:d4:cb:51:2a:0e:9d:4e:54:bf:ee:33:c7:0e:ba:
         15:d4:87:02:e8:b2:79:14:ee:4c:cc:49:f8:3c:dd:7b:8b:d6:
         ed:93:40:6a:44:36:7c:97:ad:d8:b9:c7:27:32:a8:eb:92:5b:
         fb:b9:44:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:27 2024 by rpki-client on console-fra.rpki-client.org