Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/82d007c8-9ebd-34e1-a062-ad727f30ce08.roa
File:                     82d007c8-9ebd-34e1-a062-ad727f30ce08.roa (raw, json)
Hash identifier:          g7nIpuS+VrJQiO5PvKALogkDUOf24JJqHpaEujXhiQU=
Subject key identifier:   04:DE:5D:8A:0A:38:B5:79:6D:64:4A:30:B4:02:2D:49:19:92:5A:2D
Certificate issuer:       /CN=de0cc6bd-e920-421b-822f-9be354b0d759
Certificate serial:       010D0C9F4328584589A32180F66F216F27D87980
Authority key identifier: D0:DF:05:FA:E9:DB:8A:37:52:73:6A:48:66:74:53:C6:68:10:70:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/82d007c8-9ebd-34e1-a062-ad727f30ce08.roa
Signing time:             Sun 14 Apr 2024 01:00:24 +0000
ROA not before:           Sun 14 Apr 2024 01:00:24 +0000
ROA not after:            Sat 13 Jul 2024 01:00:24 +0000
asID:                     399888
IP address blocks:        2602:fc52::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/de0cc6bd-e920-421b-822f-9be354b0d759.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/de0cc6bd-e920-421b-822f-9be354b0d759.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:89:a3:21:80:f6:6f:21:6f:27:d8:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de0cc6bd-e920-421b-822f-9be354b0d759
        Validity
            Not Before: Apr 14 01:00:24 2024 GMT
            Not After : Jul 13 01:00:24 2024 GMT
        Subject: CN=1a3b809a-6d79-4b4f-8d8a-46347d8ae120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:62:ac:4d:fa:b1:71:1b:a3:e0:b5:8b:5a:63:
                    8a:01:28:94:96:8c:23:b4:bd:35:89:db:b9:aa:a1:
                    be:f4:f2:b6:de:1b:bd:bc:9e:95:f3:04:61:83:84:
                    04:63:9e:5b:40:c9:9c:94:7c:6f:ff:c0:3d:73:86:
                    d9:4d:47:9a:0a:38:b8:50:5b:86:8d:6d:db:43:9b:
                    60:23:49:71:b7:14:70:f2:54:12:42:4a:74:a4:a4:
                    5b:af:42:b9:7d:89:ba:2c:16:5a:69:4a:7c:09:a9:
                    75:3b:24:2c:16:30:f4:95:ce:e2:5c:94:c8:0c:c1:
                    e2:bc:a5:a9:6b:30:77:78:2f:a0:0c:78:bf:25:80:
                    23:ad:dd:38:a1:70:04:7b:a1:a1:a8:08:22:49:37:
                    55:ec:9d:77:59:34:48:3f:ce:12:8e:75:ef:fc:d4:
                    b9:d5:39:3f:d5:86:be:04:6c:45:fe:eb:ab:c2:c1:
                    4b:87:67:98:d4:44:c4:95:27:15:e6:b2:e0:d7:75:
                    53:f2:7b:e0:92:cf:1b:b7:e4:c9:ef:14:33:f9:fe:
                    2b:47:ff:f7:1d:a7:5c:65:54:77:76:29:0a:45:52:
                    4f:af:63:77:b4:c6:2b:e9:f5:47:ec:67:ff:f3:2d:
                    47:86:c1:5c:79:ab:e3:01:0a:87:09:36:b0:20:49:
                    60:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DE:5D:8A:0A:38:B5:79:6D:64:4A:30:B4:02:2D:49:19:92:5A:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/82d007c8-9ebd-34e1-a062-ad727f30ce08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/de0cc6bd-e920-421b-822f-9be354b0d759.crl

            X509v3 Authority Key Identifier:
                keyid:D0:DF:05:FA:E9:DB:8A:37:52:73:6A:48:66:74:53:C6:68:10:70:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc52::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:58:a8:6a:6f:3d:80:e5:3d:a5:67:44:83:a6:22:da:80:90:
         88:ef:3a:b3:be:f1:bf:c8:19:87:d1:b4:da:c7:82:37:c7:d7:
         70:32:6f:5b:9c:b5:d2:1c:12:5f:e7:45:ce:43:6e:12:81:c9:
         16:d6:01:5e:a4:89:0d:6f:29:3b:7d:1d:46:43:f8:d0:d0:a2:
         4d:1d:27:be:74:60:7d:32:33:3a:9f:5c:ba:84:2b:79:ca:5a:
         90:00:5f:b0:e0:a4:41:57:c2:a7:ac:32:4f:6b:84:af:58:35:
         22:a1:dd:a9:96:8f:35:19:27:3e:8a:70:dc:bb:d8:f3:9a:2c:
         15:13:7e:02:88:19:f5:de:5f:41:62:08:66:11:65:43:af:9d:
         84:2b:5a:ac:e5:29:a0:91:85:ac:ec:3c:4b:0a:61:46:e0:c8:
         4a:58:2e:4f:7c:ae:35:df:e4:c3:6d:bf:a8:30:a2:dd:eb:7a:
         a7:49:f7:91:13:f6:14:6a:c1:ef:74:f5:ac:1c:9a:e8:13:29:
         ea:d0:f1:0a:9f:b5:89:08:b9:e5:7c:6d:ef:e5:9e:79:2f:53:
         8b:ff:3e:d1:f6:b8:4c:a0:4c:4e:b5:ab:1d:e1:f7:47:59:c6:
         1b:00:53:1b:df:7f:e3:84:31:39:64:3c:9c:31:5c:43:0f:77:
         3c:29:ee:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:57:36 2024 by rpki-client on console-ams.rpki-client.org