Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/c206813b-8430-3e72-8d8f-5072003ae84f.roa
File:                     c206813b-8430-3e72-8d8f-5072003ae84f.roa (raw, json)
Hash identifier:          KsJMRXXUAWjdOmHxSASJ/45R0cE1xcI5P6t/+s5b/z8=
Subject key identifier:   ED:28:E6:07:29:4A:79:EE:8A:BE:66:D9:34:10:CF:57:6E:F8:EE:4E
Certificate issuer:       /CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0
Certificate serial:       010D0C9F432858459633485DD1D376EDB6C74000
Authority key identifier: 8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/c206813b-8430-3e72-8d8f-5072003ae84f.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     57974
IP address blocks:        2602:299::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:48:5d:d1:d3:76:ed:b6:c7:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=102bf22d-2f65-4117-937d-8a220f1808a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d5:f8:4d:8f:67:45:33:d5:61:b4:69:29:b5:
                    8a:bf:e0:3d:de:9d:72:ca:e0:d1:32:cc:f6:ac:d0:
                    6a:52:07:b9:01:46:75:8f:1f:6e:99:91:fe:70:c8:
                    4e:1f:4c:26:17:16:5a:37:f8:d6:11:df:df:8b:eb:
                    36:fd:a8:bf:54:ae:f2:6f:57:3a:db:fb:f5:86:c0:
                    78:a6:30:8b:b6:76:2a:af:31:4b:41:b9:61:f5:96:
                    eb:6e:ad:d3:bd:07:bb:67:4a:00:6e:40:36:f9:19:
                    e1:e0:33:8c:54:bf:ea:ca:63:3e:ec:53:4c:99:b8:
                    7e:97:c7:9f:64:d2:3b:64:61:67:9d:e3:8a:00:42:
                    8b:56:38:ac:05:33:31:db:42:58:f3:d0:f4:c9:ab:
                    a6:df:3f:69:d1:7e:6d:c3:de:0c:67:1f:73:89:24:
                    55:03:66:3c:a9:34:60:b4:7c:80:f0:b9:7c:8c:87:
                    99:36:bd:c6:3c:8f:f4:e9:74:ee:14:0f:ae:8e:54:
                    24:5b:2f:32:5d:92:aa:47:22:3d:11:66:2a:74:8a:
                    fd:8c:8c:4d:7a:ff:85:53:ba:ed:fb:6b:ee:cc:5f:
                    4e:3e:69:fd:4e:06:e8:0f:77:03:28:a7:06:57:05:
                    a6:73:06:8d:e5:5b:00:78:4c:88:10:87:e9:2d:61:
                    33:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:28:E6:07:29:4A:79:EE:8A:BE:66:D9:34:10:CF:57:6E:F8:EE:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/c206813b-8430-3e72-8d8f-5072003ae84f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:299::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:22:79:0c:83:6f:ae:31:42:e5:b9:02:e6:81:8b:a3:ba:68:
         03:b1:fd:1e:1b:b5:01:14:5e:5d:50:d4:ed:e1:3e:70:4a:95:
         41:00:fe:86:91:78:0b:79:4a:c5:26:5a:a1:5c:1a:97:f7:0c:
         d4:0c:cb:f2:46:9b:6a:f7:90:cc:56:47:ea:ca:6b:c6:29:23:
         e4:f5:21:25:c6:1c:5a:f6:24:d7:b7:4e:ff:e2:99:e7:43:67:
         df:c7:47:65:5e:2e:c5:df:49:e8:21:54:d5:4f:d5:e3:4f:a3:
         b2:86:38:ef:b3:0a:bc:d1:8f:63:09:38:fb:3d:a2:fe:74:c1:
         3e:54:14:00:71:2c:b1:1c:96:56:d7:db:23:aa:38:06:1c:82:
         f3:b4:73:6f:56:0b:5e:f9:76:8e:36:ab:61:e1:06:85:26:84:
         15:8a:d3:1e:d1:23:6b:5d:fd:45:3d:ea:a5:2b:87:3e:7d:0c:
         e4:63:38:9e:17:88:46:58:75:ff:86:ef:17:e2:84:ca:2b:f2:
         a7:ff:64:57:3c:73:41:18:93:c6:ae:e8:f2:0d:02:c8:5d:36:
         92:ef:78:7b:5c:4d:05:cd:7d:ef:a9:9a:73:f1:f2:0b:af:f3:
         7f:d6:b4:12:a8:9a:29:e9:f1:28:44:01:35:25:f6:69:6e:a7:
         47:36:25:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 01:33:11 2024 by rpki-client on console-fra.rpki-client.org