Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/95fb1646-090a-3974-b3f1-33b1886bdfcf.roa
File:                     95fb1646-090a-3974-b3f1-33b1886bdfcf.roa (raw, json)
Hash identifier:          toskPwnACKsw/WBLyLUobBsOGCxyEV5yhT6TlTdBBa8=
Subject key identifier:   3C:1D:DE:F2:FB:FC:41:02:85:E9:9F:9D:52:A8:3F:6C:9A:EE:E0:8F
Certificate issuer:       /CN=5ef79eb4-544e-4504-9a6f-d1ddff5bcd45
Certificate serial:       010D0C9F4328584496DF5F947FE29ACF6BA13DC0
Authority key identifier: 75:B2:7A:F3:34:66:D4:62:06:FA:3F:26:9A:08:A2:A4:20:7D:D5:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/95fb1646-090a-3974-b3f1-33b1886bdfcf.roa
Signing time:             Thu 18 Jan 2024 02:00:26 +0000
ROA not before:           Thu 18 Jan 2024 02:00:26 +0000
ROA not after:            Wed 17 Apr 2024 01:00:26 +0000
asID:                     0
IP address blocks:        2602:fd10:100::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:96:df:5f:94:7f:e2:9a:cf:6b:a1:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ef79eb4-544e-4504-9a6f-d1ddff5bcd45
        Validity
            Not Before: Jan 18 02:00:26 2024 GMT
            Not After : Apr 17 01:00:26 2024 GMT
        Subject: CN=a6820025-1b0e-4161-bba6-f1202aa4e049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6d:8e:39:e8:31:45:dd:bc:e5:e6:64:54:d7:
                    3f:e0:cf:ea:f8:2b:e3:1c:2b:e6:66:5a:e4:fa:ec:
                    56:fc:d2:42:6a:ff:14:16:ea:1b:41:fa:05:fb:ce:
                    72:97:b4:de:a3:be:ce:21:e5:15:7e:91:32:b8:7e:
                    69:69:15:6f:04:11:d0:93:2f:74:ad:47:7e:13:cb:
                    93:10:f5:2a:f2:d0:79:00:c1:ab:15:5b:e0:0b:59:
                    14:cc:4f:49:3f:25:9a:3e:c3:9b:d3:83:ba:6d:8e:
                    63:ef:2e:7f:4f:b6:2a:67:22:5d:dc:07:36:16:17:
                    19:37:e0:65:ab:4b:be:18:08:29:3d:a3:8e:4a:dc:
                    f0:c4:88:93:1e:29:64:8b:ad:fb:e8:a8:0c:d2:a7:
                    d3:ba:d3:80:69:fd:5f:91:81:0e:d3:f3:b1:a5:f6:
                    e2:ea:b1:49:81:5d:25:c5:80:8e:dc:a3:6d:c5:d9:
                    8d:74:21:46:25:11:86:c8:b5:44:7f:9e:7d:d1:6e:
                    90:50:e5:e4:dc:06:a7:f7:9c:d6:e3:86:c3:17:bc:
                    c8:e6:79:ab:f3:8d:51:38:9e:3e:c9:7a:5c:c1:c4:
                    bf:51:ff:68:72:d7:6c:6c:62:30:ac:9a:b6:33:f7:
                    26:88:85:39:74:69:e1:3a:cc:e9:00:c6:e0:88:63:
                    21:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1D:DE:F2:FB:FC:41:02:85:E9:9F:9D:52:A8:3F:6C:9A:EE:E0:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/95fb1646-090a-3974-b3f1-33b1886bdfcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.crl

            X509v3 Authority Key Identifier:
                keyid:75:B2:7A:F3:34:66:D4:62:06:FA:3F:26:9A:08:A2:A4:20:7D:D5:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd10:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:fd:d4:01:de:03:9a:23:6e:6b:90:c5:5c:ef:47:02:73:59:
         af:e3:1c:44:bb:cc:b3:fa:ff:d9:bc:bc:99:8f:71:e6:fc:7b:
         6b:03:7c:06:c2:2a:da:19:07:1a:c9:45:0f:46:18:9d:41:9b:
         ac:19:8d:69:8a:a7:7c:38:99:e7:5b:9c:de:73:b3:29:06:41:
         aa:9f:d5:a2:93:42:a5:65:5d:8d:fb:54:3b:2e:7b:6a:fb:5d:
         94:76:53:d1:a4:56:6d:93:04:49:9f:b3:4a:02:b6:9e:db:39:
         89:39:00:63:ec:7f:67:4d:e6:50:8f:83:67:8b:54:10:70:4f:
         5e:83:0c:81:22:cd:47:be:1e:e4:5d:a2:54:28:a4:e8:c0:c6:
         0b:58:21:f5:df:fa:1a:b9:16:fd:84:77:cd:86:f2:09:53:d1:
         3f:cd:ae:87:e7:eb:86:ae:e1:55:a9:04:5d:86:78:54:35:62:
         93:bc:d5:df:b7:19:0f:6f:c9:1c:48:b5:1a:89:8f:01:e4:67:
         d2:81:47:d1:04:11:cd:23:eb:10:38:71:fc:72:a3:98:8f:ee:
         75:92:05:31:51:68:0d:a7:0c:a8:3a:e1:cb:07:dc:ab:3f:91:
         27:ca:fb:8a:fb:51:c2:3f:67:c2:7f:fd:16:42:d5:79:b9:83:
         97:f4:66:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:42:16 2024 by rpki-client on console-fra.rpki-client.org