Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/cce51543-b0dc-321d-9685-6861e58a4aa1.roa
File:                     cce51543-b0dc-321d-9685-6861e58a4aa1.roa (raw, json)
Hash identifier:          0tABoS2yxxZXaqVfmXjMMAbFP+JlhUXSTDFXjudqmi4=
Subject key identifier:   C4:74:9C:D6:66:95:2E:AB:91:52:03:B1:6A:24:90:07:41:1C:0D:E2
Certificate issuer:       /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
Certificate serial:       010D0C9F43285845D933B0B087A1AD8AD73C8900
Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/cce51543-b0dc-321d-9685-6861e58a4aa1.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     950
IP address blocks:        2602:fc09:210::/44 maxlen: 48
                          2602:fc09:950::/44 maxlen: 48
                          2602:fc09:960::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:b0:b0:87:a1:ad:8a:d7:3c:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=799f3989-d0db-4a44-9ba2-9259d44af2a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cf:4a:05:6c:dc:db:29:77:bc:fc:bf:56:ac:
                    47:f8:61:75:3e:43:91:2f:ef:df:27:b0:07:e0:63:
                    5b:8e:ab:23:36:a0:cf:a0:79:55:2a:f8:1c:42:c3:
                    ca:ec:a2:53:1b:46:e2:14:fd:f5:ef:51:85:72:a1:
                    d5:dd:4e:74:b3:c7:ef:ae:da:58:ab:3f:47:8a:55:
                    06:0b:58:5a:ec:f5:bb:fa:93:62:e5:fe:e1:f4:53:
                    63:a4:b3:7d:1c:b7:f0:6f:0f:bf:c2:66:4b:14:8b:
                    12:b5:71:40:78:de:e7:b1:af:cd:8f:06:72:65:ea:
                    32:e6:8a:31:b0:5e:cc:57:75:a0:e9:3d:66:b3:04:
                    04:ca:32:1d:05:c4:74:03:a4:9c:5e:4b:ac:bc:b7:
                    8c:e5:29:62:9d:fb:28:62:26:df:09:56:e6:f8:8f:
                    da:ac:d3:b7:07:80:90:98:92:86:3f:b7:04:27:4f:
                    88:88:2a:6d:28:cd:d7:92:98:80:bc:e6:e1:a8:2c:
                    98:a1:62:83:bd:0b:f2:36:80:a7:9c:39:2b:87:9c:
                    3f:ad:6a:29:26:06:e1:49:dd:c2:54:13:0c:46:54:
                    fa:ff:f2:77:7d:3e:97:68:a1:94:79:bb:21:82:0e:
                    8a:b7:22:99:08:fd:25:26:9b:d0:bf:9a:23:38:8b:
                    c6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:74:9C:D6:66:95:2E:AB:91:52:03:B1:6A:24:90:07:41:1C:0D:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/cce51543-b0dc-321d-9685-6861e58a4aa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl

            X509v3 Authority Key Identifier:
                keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc09:210::/44
                  2602:fc09:950::-2602:fc09:96f:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:37:ef:5c:ee:1e:22:ff:9f:a2:cf:72:df:9b:b4:14:22:4c:
         28:0a:c7:49:60:94:28:4e:65:f5:ec:ed:15:d0:1b:b3:e2:78:
         1b:f3:eb:27:cd:2c:e7:61:04:0f:82:97:16:59:ca:ce:e5:dc:
         a6:2c:50:19:2a:08:1c:2a:60:1b:5a:21:6b:05:7f:b0:af:31:
         86:28:1d:39:7f:76:bf:a3:bf:14:da:13:fe:a4:bd:df:89:e1:
         71:f8:3e:14:15:59:e7:85:06:3c:58:9f:bb:a2:7a:0f:be:e7:
         f5:5b:b8:52:c2:68:71:39:c5:59:e5:aa:d3:a7:f9:f3:b4:b5:
         53:2a:84:3f:ac:cc:85:cd:4b:d1:e0:fc:b6:f5:3a:54:68:f5:
         32:c6:76:8a:c9:ac:7c:73:fe:62:53:c5:e7:ab:64:90:64:0d:
         e8:83:5e:0d:ef:43:12:a8:5e:93:b8:67:89:40:19:fe:ed:d7:
         25:50:74:48:45:64:37:44:95:ac:74:19:aa:cf:ca:31:13:5b:
         41:7a:08:56:6c:68:1f:21:94:b2:0b:a5:58:b8:64:fa:b5:2a:
         d3:05:4f:19:af:da:c2:b2:b8:62:22:29:00:34:48:f8:87:35:
         0b:cc:13:9d:77:27:7f:55:84:10:11:3f:3a:31:76:1d:00:68:
         c8:98:b1:d9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 18 15:35:25 2024 by rpki-client on console-fra.rpki-client.org