Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/c01fa5af-9add-32ad-9e4a-fe57adab934f.roa
File:                     c01fa5af-9add-32ad-9e4a-fe57adab934f.roa (raw, json)
Hash identifier:          ioGB7dYaQ0W0YjP9j+2bsQrBDVXldvliqES9MLgS3EM=
Subject key identifier:   32:97:41:66:FC:4F:37:39:64:4C:31:47:EF:9F:CD:14:A9:96:5C:1C
Certificate issuer:       /CN=5ef79eb4-544e-4504-9a6f-d1ddff5bcd45
Certificate serial:       010D0C9F4328584496DF5FD73388B1E5A87BCB80
Authority key identifier: 75:B2:7A:F3:34:66:D4:62:06:FA:3F:26:9A:08:A2:A4:20:7D:D5:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/c01fa5af-9add-32ad-9e4a-fe57adab934f.roa
Signing time:             Thu 18 Jan 2024 02:00:26 +0000
ROA not before:           Thu 18 Jan 2024 02:00:26 +0000
ROA not after:            Wed 17 Apr 2024 01:00:26 +0000
asID:                     0
IP address blocks:        2602:fd10:700::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:96:df:5f:d7:33:88:b1:e5:a8:7b:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ef79eb4-544e-4504-9a6f-d1ddff5bcd45
        Validity
            Not Before: Jan 18 02:00:26 2024 GMT
            Not After : Apr 17 01:00:26 2024 GMT
        Subject: CN=c19d9f44-0298-48d8-bd87-26a1ac51c6c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:aa:e0:33:8b:f0:b3:c4:00:36:16:5c:49:fa:
                    71:80:eb:8f:a8:e4:7e:54:4f:5a:f1:a4:58:df:34:
                    b7:80:8e:ac:5c:bd:4c:26:a6:a9:14:9f:45:e7:93:
                    10:7b:17:c7:fb:56:0a:1a:7f:76:35:9d:8b:1a:a5:
                    69:ed:91:ab:4b:71:4d:c5:23:65:ee:ab:b6:df:89:
                    7f:7b:78:3d:e1:a2:88:d6:cc:7c:89:cc:bd:9e:f5:
                    b1:60:19:5b:4d:39:cf:8f:33:2b:21:9d:6b:53:2f:
                    f1:e1:fb:3c:46:9b:66:69:ff:4c:aa:76:a8:75:17:
                    22:9d:d5:21:c3:ba:f9:ab:c5:39:59:0d:20:63:32:
                    bc:2e:b9:96:52:b6:7b:67:58:82:40:09:7f:f9:ae:
                    14:45:b4:33:35:de:b8:61:07:29:0a:16:4f:89:4a:
                    bf:10:07:75:39:d0:b6:81:e1:33:7d:9e:c5:52:bb:
                    4f:dd:24:5e:4f:fb:16:d4:9b:83:e2:b1:84:2a:0e:
                    54:bf:23:ed:73:8d:a0:03:bf:b2:16:2b:3a:10:a2:
                    f2:cf:e6:f9:b1:0f:cd:d7:2a:51:19:3f:1f:83:b8:
                    6b:39:3c:cf:1f:bc:27:ea:76:9f:61:8b:b8:2b:b8:
                    40:30:fc:33:94:ec:e5:8a:55:63:be:74:c6:d5:7b:
                    6e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:97:41:66:FC:4F:37:39:64:4C:31:47:EF:9F:CD:14:A9:96:5C:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/c01fa5af-9add-32ad-9e4a-fe57adab934f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.crl

            X509v3 Authority Key Identifier:
                keyid:75:B2:7A:F3:34:66:D4:62:06:FA:3F:26:9A:08:A2:A4:20:7D:D5:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd10:700::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:76:8f:3f:ac:96:df:84:f4:3f:08:2f:ab:23:a1:25:02:7e:
         15:bc:02:cd:4f:bc:ed:c7:32:1a:c8:98:8e:c3:fa:24:34:da:
         70:a5:df:8a:29:5a:17:9d:49:e9:03:1e:44:34:ec:0a:33:f9:
         b1:b6:6d:a9:f7:6c:c6:70:32:ce:32:53:0f:cf:2e:ec:43:65:
         66:01:6b:f6:cc:e3:89:0b:a1:e2:89:a8:5a:30:55:32:8f:9c:
         ac:7c:ea:2a:aa:2a:a7:92:70:5c:c3:b2:94:91:9e:ce:ba:e0:
         27:40:e9:02:c1:dd:cf:b3:00:6f:82:88:19:ec:00:62:f6:8e:
         b0:f8:fe:a9:c8:a9:79:e4:35:61:f5:83:3f:d5:c1:d2:9f:07:
         a9:f5:f3:5b:fb:16:5e:0e:b8:20:c5:c4:57:80:16:be:0a:74:
         e5:c0:ff:ac:40:40:e3:3f:7b:8a:c3:71:33:1b:45:c3:e1:17:
         5f:9b:fe:b1:4f:0a:60:fe:e4:81:70:db:fb:f0:02:4f:7e:83:
         12:2f:6f:5b:2b:f0:9b:9d:86:6a:88:3b:74:93:00:e5:ca:0b:
         86:e0:d9:05:4c:7d:f8:36:ef:55:a7:a5:e5:f1:57:ef:0f:ee:
         0b:18:ad:c9:53:1e:d0:fa:cc:7b:76:c0:2b:5f:6b:e7:17:b5:
         5b:18:89:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:17:57 2024 by rpki-client on console-ams.rpki-client.org