Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/48d3af15-5056-3cb1-90e5-db2495aa1ccd.roa
File:                     48d3af15-5056-3cb1-90e5-db2495aa1ccd.roa (raw, json)
Hash identifier:          VXvWBysYYsWIolBMKACLnMDWrWhtpwxO/tNeHagBvs8=
Subject key identifier:   F5:B0:11:D9:39:35:9A:FF:A7:1E:50:12:A6:33:46:E7:F3:A4:86:B9
Certificate issuer:       /CN=38d6b993-a8bd-44a2-8e04-89483e698a23
Certificate serial:       010D0C9F4328584558C83721309CDAA1BA11AE20
Authority key identifier: 6E:44:A7:99:95:14:A3:8E:C7:8C:A1:78:70:17:73:5C:5D:00:A6:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/48d3af15-5056-3cb1-90e5-db2495aa1ccd.roa
Signing time:             Wed 27 Mar 2024 13:00:35 +0000
ROA not before:           Wed 27 Mar 2024 13:00:35 +0000
ROA not after:            Tue 25 Jun 2024 13:00:35 +0000
asID:                     57406
IP address blocks:        2602:29c::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:58:c8:37:21:30:9c:da:a1:ba:11:ae:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38d6b993-a8bd-44a2-8e04-89483e698a23
        Validity
            Not Before: Mar 27 13:00:35 2024 GMT
            Not After : Jun 25 13:00:35 2024 GMT
        Subject: CN=aea8a150-6c0c-4cef-b7e3-922a4fef425d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c1:e4:70:8d:a7:44:b1:8a:c2:62:74:a3:c4:
                    ad:51:0b:ab:b7:15:fd:4b:0a:c8:d5:72:54:1b:b7:
                    51:81:98:61:71:7b:4c:d6:8a:75:d7:ec:0e:38:63:
                    3b:bf:07:fb:e6:ce:c5:2d:05:80:74:62:d9:3d:7a:
                    f1:25:46:d8:52:96:bb:3a:16:38:fa:c3:21:e8:af:
                    d6:38:1e:95:39:4a:8a:b4:67:d1:bf:99:09:c0:44:
                    43:7d:78:3d:0d:ef:7a:20:4b:5d:45:4b:d6:2f:19:
                    3a:c7:dd:98:eb:92:19:fd:ec:f9:68:28:97:61:31:
                    98:40:30:c1:48:42:3b:37:a2:49:82:e2:d2:39:86:
                    a8:e8:bc:09:8c:71:6c:ce:0a:29:19:7a:bb:dd:7e:
                    d4:90:58:83:7b:fa:78:dd:22:10:7e:f7:60:47:c3:
                    69:cf:3f:0e:4a:34:45:cc:91:32:02:44:0f:61:fa:
                    61:af:1e:af:49:ac:c7:5e:4d:a1:07:8d:54:1e:21:
                    5b:87:d4:15:a2:c7:d6:48:be:97:c4:43:c3:c6:93:
                    7e:12:4b:cf:85:e8:64:e7:60:00:6d:3a:f6:28:59:
                    92:03:59:cc:d6:67:a8:fc:2a:d5:06:0c:fc:a3:f2:
                    9d:21:d7:97:af:1d:28:dd:38:bc:9a:d9:85:80:2d:
                    49:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B0:11:D9:39:35:9A:FF:A7:1E:50:12:A6:33:46:E7:F3:A4:86:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/48d3af15-5056-3cb1-90e5-db2495aa1ccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.crl

            X509v3 Authority Key Identifier:
                keyid:6E:44:A7:99:95:14:A3:8E:C7:8C:A1:78:70:17:73:5C:5D:00:A6:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:29c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:71:f1:94:12:a7:aa:c8:2b:70:7e:69:14:22:5d:4e:a8:c8:
         ad:73:90:f5:51:04:ef:f1:e4:ad:59:73:31:9b:24:ad:7c:44:
         75:2b:8b:5e:6e:cf:75:c2:65:25:50:8e:19:1a:ee:ae:28:2f:
         51:1d:9a:40:91:a5:3a:c0:73:d7:e6:a5:e4:9d:8a:44:ff:ad:
         b9:74:0d:68:80:b3:28:4d:d3:2e:e2:0c:df:5a:c1:52:b4:18:
         c4:ce:3a:7a:13:3f:67:7e:4a:b6:b6:bd:16:28:21:ea:bb:3a:
         69:ff:c2:e7:82:4a:f0:d2:21:8f:49:7a:b4:46:92:94:3c:72:
         8f:22:9b:26:10:50:5f:b9:e1:12:e5:c4:83:4c:4a:a3:9a:28:
         11:90:82:56:17:9e:10:6f:5e:68:96:92:c1:7e:79:89:d1:a2:
         bc:ac:f0:74:34:9e:30:cc:0f:41:30:7d:b9:6b:89:57:8c:3b:
         44:4b:fe:ea:76:84:4e:1c:23:2f:75:5e:f0:d8:a4:d4:d5:05:
         15:2a:9f:5b:b0:6c:71:57:43:2f:6e:53:c9:f9:de:9f:93:c2:
         13:d0:1c:19:b4:7d:fe:16:65:c8:36:75:1e:f2:d0:aa:e8:ba:
         81:22:44:a1:d2:91:df:53:d0:09:1e:17:71:cc:a7:d3:f8:ea:
         f9:46:b9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:09:00 2024 by rpki-client on console-fra.rpki-client.org