Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/520c3b1a-f279-31b1-ba65-308eb39e5402.roa
File:                     520c3b1a-f279-31b1-ba65-308eb39e5402.roa (raw, json)
Hash identifier:          FWHMA+oe2RtqtZtgYu5x2myetU7hdT2oRieqC79OVaA=
Subject key identifier:   3B:C2:57:C3:22:54:BC:BF:61:81:41:48:35:82:37:79:6F:87:16:94
Certificate issuer:       /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial:       010D0C9F43285845C5A8EFDD55DF4282C7D4BE00
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/520c3b1a-f279-31b1-ba65-308eb39e5402.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     14618
IP address blocks:        2602:fdeb:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:ef:dd:55:df:42:82:c7:d4:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=041c2f4c-f6d0-4747-9d85-6685531a98b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c2:30:fd:0d:f3:94:af:4a:e7:49:95:d8:f8:
                    80:39:f1:1b:e2:ed:c7:cf:98:cc:65:ec:44:fa:24:
                    3f:90:f3:36:21:59:b2:a2:01:62:92:d0:ff:9f:a6:
                    1e:d0:e7:ae:6b:ba:69:22:3c:b7:e4:1a:46:76:5c:
                    95:be:30:a4:04:e7:e5:a0:f9:46:26:fc:bb:91:0e:
                    6d:ec:4e:b9:b0:cd:4f:5f:bf:d3:4f:16:6c:b3:f4:
                    a2:03:8c:fc:56:6c:ad:d8:7e:82:13:5a:73:5e:ff:
                    12:ed:1e:81:7a:a9:83:aa:83:3b:08:e2:04:e2:3b:
                    50:37:79:82:55:a4:9f:64:cb:1f:aa:fb:91:ab:82:
                    9a:54:a7:dd:7d:f5:96:2a:d6:71:b5:0c:71:11:81:
                    2d:5b:c0:cb:97:42:76:77:6c:e0:0b:03:0f:e7:36:
                    bc:e4:e7:e6:39:4c:3a:e4:01:5a:04:3c:73:8b:f3:
                    3b:42:39:d5:ed:be:96:8e:31:46:dd:14:51:e1:a2:
                    86:aa:5b:76:de:83:72:0f:d2:29:ec:6e:cd:4c:ff:
                    bd:3c:04:29:0f:c9:5c:71:64:42:4b:78:e8:62:af:
                    78:05:fd:67:c0:3a:6b:a0:94:aa:0f:e2:3a:8a:7a:
                    95:ff:29:17:e9:9f:72:54:9b:c0:4d:33:9d:7c:de:
                    56:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C2:57:C3:22:54:BC:BF:61:81:41:48:35:82:37:79:6F:87:16:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/520c3b1a-f279-31b1-ba65-308eb39e5402.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdeb:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:55:99:2f:9e:ac:cc:4f:b3:f6:64:6e:d3:11:12:e3:f6:23:
         08:48:89:db:82:08:34:4b:6d:0f:f8:bd:8e:5e:5b:c5:94:ad:
         e7:3f:79:85:54:4e:67:d9:f5:61:ca:79:c4:e9:3e:20:0b:9b:
         65:00:36:14:ed:42:b6:bc:03:c8:41:39:5c:26:5d:21:b9:05:
         0b:62:72:52:0f:7a:dd:60:e5:71:b0:c0:60:74:8c:9b:31:a6:
         bc:be:a2:fe:0a:85:1a:8b:59:ac:85:99:b9:ce:67:db:cf:7c:
         be:cf:41:4b:90:06:f6:a2:2b:8a:86:e2:ce:9b:d5:9c:1e:37:
         02:69:7f:37:75:7a:92:ae:57:e9:7f:ca:8a:5e:ba:fa:ca:62:
         e0:16:ba:b2:81:7e:07:af:83:23:9c:ad:b6:c4:3c:44:dd:cc:
         c6:27:b1:b1:21:81:46:8b:a8:fa:a6:9e:18:a2:51:69:2b:c7:
         28:e1:f8:ff:d5:5f:5d:b4:2f:ed:3c:c2:f5:87:d9:cc:cc:09:
         3a:3f:bd:f3:1a:a6:48:e2:bf:2d:47:9b:67:cd:1e:ed:94:3f:
         76:7a:b2:cc:24:09:92:b6:fb:18:22:14:4e:27:b2:bb:4e:ab:
         e5:ba:08:05:09:c1:88:4c:1e:42:10:15:86:bd:f0:df:7a:29:
         ca:e2:17:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:15:40 2024 by rpki-client on console-fra.rpki-client.org