Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/6c1c0587-f233-3a11-b157-ddc3c62d241f.roa
File:                     6c1c0587-f233-3a11-b157-ddc3c62d241f.roa (raw, json)
Hash identifier:          KtlIw+HVwWRTpx+I1BNNXsYZyHb1hmIMfEK0kOMwaes=
Subject key identifier:   0A:C5:33:A9:30:99:71:53:5A:65:19:CB:A2:28:8E:03:9A:F1:99:47
Certificate issuer:       /CN=73c8aa7b-fac7-4435-95df-f01200da47d9
Certificate serial:       010D0C9F43285845A2283EE32CC3B52D1B8B7B80
Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/6c1c0587-f233-3a11-b157-ddc3c62d241f.roa
Signing time:             Mon 22 Apr 2024 19:48:07 +0000
ROA not before:           Mon 22 Apr 2024 19:48:07 +0000
ROA not after:            Sun 21 Jul 2024 19:48:07 +0000
asID:                     32764
IP address blocks:        2602:f98b:30::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a2:28:3e:e3:2c:c3:b5:2d:1b:8b:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9
        Validity
            Not Before: Apr 22 19:48:07 2024 GMT
            Not After : Jul 21 19:48:07 2024 GMT
        Subject: CN=df18674f-3451-4eba-ad3f-78f2881282fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5d:4e:b7:24:8b:df:0d:79:05:ca:59:96:d6:
                    fe:ec:6a:18:59:f1:61:4e:de:1b:61:c1:29:81:1d:
                    9c:33:20:a4:e7:be:9f:61:05:4e:9d:15:77:2e:78:
                    4f:e6:c5:ee:ed:53:1f:e1:82:45:ed:59:ba:35:d6:
                    7e:86:dc:29:7a:92:07:85:ee:1a:da:5f:07:c8:e6:
                    c7:42:c7:11:e4:3c:ef:48:9c:e6:d2:82:ff:f7:20:
                    ec:6a:cc:f5:bf:3f:85:6d:51:7b:44:69:99:b8:10:
                    cc:0b:b1:6c:60:11:b2:39:a1:11:d2:b8:69:3d:fd:
                    e7:cc:4c:24:a9:dc:46:dd:fc:af:69:25:7f:62:71:
                    20:9e:f4:2b:22:37:53:a4:9a:22:01:7f:e3:26:86:
                    33:33:76:7e:7a:0a:7b:37:b7:96:5e:94:5c:c7:cc:
                    de:79:c9:3b:c5:d5:8d:ec:0a:ae:d3:00:43:9b:39:
                    36:23:c0:e8:67:07:1f:54:77:44:4d:f9:a3:6d:51:
                    41:86:2f:3c:b1:55:88:e7:de:5b:54:3b:e9:63:41:
                    89:76:b3:e1:e4:ff:59:c0:9b:e1:7c:bf:ad:eb:77:
                    7e:9d:f0:9a:ef:52:76:fd:5a:6d:ce:2a:97:e5:7e:
                    06:0d:e6:b2:07:3b:80:14:33:54:25:c5:b1:33:66:
                    5f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C5:33:A9:30:99:71:53:5A:65:19:CB:A2:28:8E:03:9A:F1:99:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/6c1c0587-f233-3a11-b157-ddc3c62d241f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl

            X509v3 Authority Key Identifier:
                keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f98b:30::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:75:99:13:65:7e:79:7f:46:3e:22:86:48:b5:b5:8e:bb:41:
         6e:1d:f0:37:2d:33:ca:d9:d1:87:5b:ff:e3:0a:7b:c7:6c:aa:
         e5:bc:7b:16:85:87:b3:c5:bb:b7:c0:b0:44:7d:a6:73:19:8a:
         4b:5a:7d:a9:d5:1f:3f:10:9a:f2:c8:bf:fa:06:ed:78:a7:45:
         1d:de:64:78:a9:77:c8:44:11:b6:d2:de:c5:e0:ad:be:dd:98:
         32:35:e3:ed:56:d1:f2:6a:4e:71:98:81:c6:4b:66:53:ed:22:
         c1:5a:71:3b:54:12:28:1e:7f:6e:23:0e:13:b4:42:9e:a7:fe:
         a1:8b:ac:00:7b:cc:4b:90:c8:e9:43:1a:a7:19:3f:17:86:f7:
         37:37:30:28:8b:b2:20:09:42:65:49:64:9d:f0:16:0e:2a:46:
         27:38:a4:38:96:40:0c:19:eb:77:eb:b1:b4:29:99:d1:f7:40:
         a1:ab:d7:01:68:42:56:03:d2:02:f4:35:87:e1:ef:26:4d:b0:
         fc:28:35:b2:8d:ea:ba:e3:41:b3:3c:00:2d:4c:16:0d:ef:da:
         ba:49:94:50:15:02:de:ed:b5:ab:a4:6c:43:70:37:a0:62:67:
         94:e1:53:bf:a9:0c:5f:35:3d:5e:a4:52:f9:d7:87:89:bd:7b:
         9b:75:ba:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 11:45:02 2024 by rpki-client on console-fra.rpki-client.org