Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/f94d6a37-f85f-3ce3-9668-65bc8993f7a3.roa
File:                     f94d6a37-f85f-3ce3-9668-65bc8993f7a3.roa (raw, json)
Hash identifier:          BJaJT3h7dhx7kv/7DkJNS/38HprhxDdOlMv4Ao7G1kk=
Subject key identifier:   86:18:7E:6E:CA:08:4F:A7:B8:1C:CA:E1:01:A9:71:64:4C:AE:5B:D3
Certificate issuer:       /CN=1a767fb3-0911-435a-a3a4-189b82622157
Certificate serial:       010D0C9F4328584578E2FD24365F98693B037BA0
Authority key identifier: 31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/f94d6a37-f85f-3ce3-9668-65bc8993f7a3.roa
Signing time:             Mon 08 Apr 2024 01:00:25 +0000
ROA not before:           Mon 08 Apr 2024 01:00:25 +0000
ROA not after:            Sun 07 Jul 2024 01:00:25 +0000
asID:                     400919
IP address blocks:        2602:817:2001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:78:e2:fd:24:36:5f:98:69:3b:03:7b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a767fb3-0911-435a-a3a4-189b82622157
        Validity
            Not Before: Apr  8 01:00:25 2024 GMT
            Not After : Jul  7 01:00:25 2024 GMT
        Subject: CN=2428b5eb-69b2-4125-a234-17f99c6e7d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ea:0d:29:36:35:1a:b6:ad:2c:6f:36:fd:c3:
                    6a:75:05:e9:0f:3e:a6:d9:91:b5:43:48:71:9a:55:
                    54:b0:6c:0a:b3:ff:96:58:e1:d0:e6:f3:cf:f4:1d:
                    50:da:84:c1:c1:a8:26:aa:01:ba:c0:e9:eb:23:1b:
                    cd:aa:c3:fc:60:2c:4e:68:5a:4b:e1:e0:41:e1:4e:
                    09:3b:e8:89:c8:aa:d8:16:c1:9b:0f:b6:c3:10:41:
                    8e:19:eb:b8:09:66:8c:eb:ae:67:8a:1c:41:55:b9:
                    53:99:14:e7:33:73:6d:50:6a:c5:01:6f:4c:4c:a8:
                    80:8e:08:1a:a4:07:0b:44:cf:11:a9:28:57:14:4e:
                    50:43:3f:22:26:d2:f1:82:d0:1b:14:26:f9:fc:06:
                    39:e1:86:8a:9e:6c:a9:e7:9b:58:a1:ee:07:03:c8:
                    cb:50:8a:98:c8:0d:92:fb:32:92:63:89:5e:5f:ac:
                    cc:7a:e8:10:09:c6:42:95:62:bf:96:ba:94:ed:06:
                    6c:3a:ec:68:c1:f6:ec:c5:fe:a2:eb:2c:bd:33:47:
                    03:d9:28:0f:8e:5e:c2:4f:a1:ac:16:f8:42:a8:3f:
                    4b:06:dc:d0:2e:eb:1f:72:e4:17:dc:5b:c5:cf:98:
                    6c:e2:e2:06:9f:c3:f0:28:31:37:1d:6c:65:37:81:
                    5f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:18:7E:6E:CA:08:4F:A7:B8:1C:CA:E1:01:A9:71:64:4C:AE:5B:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/f94d6a37-f85f-3ce3-9668-65bc8993f7a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl

            X509v3 Authority Key Identifier:
                keyid:31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:817:2001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:41:73:35:d4:94:33:26:b7:60:1d:16:fa:65:69:e5:7b:dc:
         d8:5b:95:7e:25:c2:cc:e5:64:d6:f3:49:eb:ea:84:73:83:a7:
         11:17:f4:6a:1d:fd:89:16:4a:92:fb:24:ec:28:75:b0:68:c4:
         55:72:f6:5e:db:2b:60:e7:ba:26:27:fe:99:ff:92:a4:85:79:
         98:98:4f:ab:48:8c:d3:87:1e:b0:48:5e:c6:28:e6:9d:33:2c:
         cc:7f:36:ac:f0:eb:73:45:83:df:ba:5f:75:30:3e:5b:c4:f9:
         18:6c:da:ea:4f:0f:4a:d8:ab:34:99:34:36:7d:0c:1b:a0:ea:
         46:5b:6e:21:6a:14:72:b5:43:4b:0a:e5:8e:53:f7:69:9b:2d:
         54:c2:5b:da:d7:37:3e:f9:4b:57:b8:17:c1:3a:1f:36:da:a5:
         d3:35:a1:d8:be:be:13:df:29:d7:d2:a0:68:db:52:77:83:9a:
         a9:6d:3b:30:54:3d:ff:f7:ab:ca:65:3f:07:de:b9:49:8b:e4:
         1a:72:5c:1e:a9:10:0e:9c:d1:6f:f3:9f:00:0e:d5:25:7d:d8:
         69:17:88:b6:84:05:f8:24:75:5a:10:17:aa:db:66:93:5e:ba:
         fb:a2:52:c8:a6:bb:58:84:7f:f2:b0:38:62:d9:a7:44:60:f1:
         b5:28:ac:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:24:43 2024 by rpki-client on console-ams.rpki-client.org