Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/924bc74d-b046-30c2-b4cc-123603abad90.roa
File:                     924bc74d-b046-30c2-b4cc-123603abad90.roa (raw, json)
Hash identifier:          IAhMDDGk0IPjLF+yT9lzT2AylRWwsmBOYYgtkDJvA0M=
Subject key identifier:   26:C5:F6:50:71:47:69:D3:14:1C:23:54:E9:03:82:C6:CB:45:6F:55
Certificate issuer:       /CN=73c8aa7b-fac7-4435-95df-f01200da47d9
Certificate serial:       010D0C9F43285845A262CE9051F7DF2200D43100
Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/924bc74d-b046-30c2-b4cc-123603abad90.roa
Signing time:             Mon 22 Apr 2024 21:46:07 +0000
ROA not before:           Mon 22 Apr 2024 21:46:07 +0000
ROA not after:            Sun 21 Jul 2024 21:46:07 +0000
asID:                     16509
IP address blocks:        2602:f98b:30::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a2:62:ce:90:51:f7:df:22:00:d4:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9
        Validity
            Not Before: Apr 22 21:46:07 2024 GMT
            Not After : Jul 21 21:46:07 2024 GMT
        Subject: CN=8d270ea3-550b-4fcd-a615-58a2d9f41752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7b:91:9c:47:b2:33:c7:5d:d9:6f:97:c2:56:
                    6a:be:b0:c4:8d:b7:64:b3:47:c1:bf:c9:f9:07:df:
                    9b:96:ce:ad:93:76:5b:b5:83:cf:13:0d:e5:d7:fc:
                    7d:b9:a6:89:1e:ac:a4:30:af:1a:ab:3d:26:06:80:
                    6a:9e:24:8a:db:a4:a6:13:be:90:e7:f8:8c:af:45:
                    ff:d9:0f:be:9b:7b:40:0e:98:eb:37:51:f6:76:38:
                    c4:85:fd:b3:cd:54:90:bb:dc:90:16:a5:c8:27:eb:
                    ba:8c:70:56:c6:ad:34:12:da:97:65:6a:41:5b:be:
                    1e:18:5a:08:65:d8:ec:9b:96:f8:72:00:57:43:e1:
                    ab:b8:bf:4a:93:83:ad:21:30:8c:7c:23:31:6a:87:
                    56:d6:b4:03:07:f0:5d:a7:61:93:6d:d6:cf:8e:ea:
                    ad:ad:52:c5:40:7d:31:f2:4b:e7:33:da:e1:46:e0:
                    3f:2e:74:d2:7f:83:b4:72:5d:8e:ba:8a:21:73:92:
                    b9:a2:79:0d:88:7f:65:c6:6f:01:78:4a:d0:81:15:
                    1d:7a:df:e6:15:e3:de:61:dd:52:86:d6:0a:c3:24:
                    c3:ea:9e:0c:43:11:5b:2a:8a:3a:c9:e6:ff:d4:59:
                    28:45:c1:86:a5:2d:88:40:c2:dc:8d:66:33:d1:e7:
                    e4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C5:F6:50:71:47:69:D3:14:1C:23:54:E9:03:82:C6:CB:45:6F:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/924bc74d-b046-30c2-b4cc-123603abad90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl

            X509v3 Authority Key Identifier:
                keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f98b:30::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:e0:2f:f9:cc:b6:21:43:5c:49:d6:6f:50:2d:b4:e7:6c:65:
         f9:a2:4d:a3:0a:eb:05:a3:f4:02:8a:c0:4d:9c:4b:4b:98:7f:
         64:4b:4e:61:fa:fb:b4:44:be:f0:9e:d5:15:aa:08:f8:cf:0d:
         4a:fc:e5:75:13:6b:94:cf:f9:a1:95:13:0d:72:55:80:1a:f2:
         1a:1e:8f:7b:ab:bb:b8:63:76:32:58:c9:bc:41:82:da:0d:78:
         64:4b:04:2c:4f:e9:40:a3:82:ec:1f:dd:40:ac:7d:e5:be:fc:
         52:68:97:71:66:dc:0b:c5:d4:b8:18:f4:9c:c4:40:a5:8b:3f:
         5f:df:5b:65:00:91:74:b4:bf:e7:08:cb:aa:96:1f:5a:d8:14:
         16:25:89:ff:2c:15:7c:8f:ac:d2:ca:36:9e:0e:49:0c:19:fa:
         35:02:e5:81:6a:9e:e5:10:41:ad:02:51:8a:27:ca:14:98:17:
         18:59:f5:27:df:dd:41:36:b7:98:72:06:e9:75:f0:fc:76:c1:
         d4:3d:ef:b2:6e:6f:8b:b5:22:12:53:d6:f2:0c:b5:62:86:84:
         78:d5:7f:51:e2:a7:65:79:7e:e7:7d:4e:c1:9d:ba:57:96:59:
         5e:82:7a:d7:8f:ff:9b:7f:f4:96:1f:a4:23:c9:82:ce:38:f3:
         88:5d:bd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 11:45:02 2024 by rpki-client on console-fra.rpki-client.org