Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/8170ea04-59c0-329b-82f2-b942818b77fc.roa
File:                     8170ea04-59c0-329b-82f2-b942818b77fc.roa (raw, json)
Hash identifier:          HB9E1amXnu5Vbl7snTbkSKbRNTrfz84xxFGxCRD2wp0=
Subject key identifier:   33:5C:44:A2:73:38:86:A5:CA:AC:90:4F:B0:4E:E0:47:69:6D:08:BB
Certificate issuer:       /CN=503450af-ac6f-4861-96c0-24f7e8724111
Certificate serial:       010D0C9F43285845304D35ECA79E5C52F12F0C20
Authority key identifier: F9:63:1A:91:2B:F7:A0:6A:5D:82:31:40:0C:21:D5:FD:BB:ED:FA:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/8170ea04-59c0-329b-82f2-b942818b77fc.roa
Signing time:             Wed 13 Mar 2024 01:00:26 +0000
ROA not before:           Wed 13 Mar 2024 01:00:26 +0000
ROA not after:            Tue 11 Jun 2024 01:00:26 +0000
asID:                     22961
IP address blocks:        2602:29d::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/503450af-ac6f-4861-96c0-24f7e8724111.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/503450af-ac6f-4861-96c0-24f7e8724111.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:30:4d:35:ec:a7:9e:5c:52:f1:2f:0c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=503450af-ac6f-4861-96c0-24f7e8724111
        Validity
            Not Before: Mar 13 01:00:26 2024 GMT
            Not After : Jun 11 01:00:26 2024 GMT
        Subject: CN=a9ce9950-4308-4e18-9c1b-fed75a1086dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e4:64:07:45:cb:8d:de:47:3d:6b:64:7b:fd:
                    af:3c:d1:29:2d:13:37:b2:e0:b1:34:b9:58:3e:56:
                    2b:92:cd:38:b3:4d:c9:a1:c0:c3:25:ed:41:e2:c5:
                    4e:3c:cd:94:fb:4d:80:da:99:4b:84:fc:6e:1d:25:
                    c8:fc:a0:bb:e9:90:28:83:0d:3c:fb:18:f3:59:9e:
                    5f:32:f0:0e:10:76:87:3e:c0:b4:5e:a4:68:62:0c:
                    55:9e:a9:a4:68:8e:e1:5e:5f:c9:09:3f:c8:a5:8b:
                    a8:c2:19:fe:50:fc:3a:0d:6f:4e:db:dd:3a:ea:7b:
                    dd:30:85:28:e6:07:2a:3e:75:7e:06:a3:46:30:cd:
                    a9:59:70:1d:e6:e6:9d:d9:15:5b:d1:59:00:54:4a:
                    89:d7:ec:35:8d:68:15:78:bd:6c:78:d9:d8:61:3b:
                    0b:98:39:6b:d9:36:fd:52:41:ef:4b:3c:4d:fe:c1:
                    17:f3:92:bc:6c:e0:63:c8:45:40:d7:34:dd:20:ea:
                    38:da:08:87:5f:61:88:d4:a0:6a:04:17:c6:39:b0:
                    8a:b5:c3:f8:c9:b1:e7:fe:db:ea:f1:83:dc:cf:ef:
                    86:3b:78:61:e0:ef:62:fb:fc:ff:10:ae:54:ac:f4:
                    7c:83:23:a4:05:50:b1:6d:a5:47:98:64:97:2c:40:
                    42:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5C:44:A2:73:38:86:A5:CA:AC:90:4F:B0:4E:E0:47:69:6D:08:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/8170ea04-59c0-329b-82f2-b942818b77fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/503450af-ac6f-4861-96c0-24f7e8724111.crl

            X509v3 Authority Key Identifier:
                keyid:F9:63:1A:91:2B:F7:A0:6A:5D:82:31:40:0C:21:D5:FD:BB:ED:FA:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:29d::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:8f:c6:0e:76:d2:11:f0:fc:29:e3:93:99:90:84:00:69:2f:
         a8:c8:8a:a0:f1:4c:8f:99:c8:ef:46:81:52:19:5c:c9:3d:5d:
         ac:70:ef:f3:28:1c:68:11:b9:58:88:97:14:66:db:da:43:c5:
         11:3f:74:c1:ac:f0:2e:94:c0:14:72:a1:f1:08:6f:bb:e1:c2:
         7b:67:b2:5b:ce:6b:ef:54:b0:81:97:a8:b9:7a:87:be:ad:1b:
         c8:33:4c:36:a5:e1:6d:9f:5c:e4:c6:ce:99:81:09:24:45:70:
         66:6e:97:aa:c4:49:76:7f:16:ff:73:9c:31:7a:64:c1:ba:89:
         9e:3b:9a:26:43:91:27:c9:6a:58:ff:c1:fb:31:4c:9f:da:8f:
         51:47:eb:8e:ec:fa:9f:62:ea:44:5b:77:81:e4:66:c8:3d:fb:
         0e:69:48:0e:5d:9a:26:ca:ff:8a:7f:5d:4e:eb:63:56:d3:07:
         0f:d8:84:5b:6d:ed:40:0a:d4:1a:a7:7b:6e:29:80:89:65:49:
         be:62:f3:3d:a6:cf:a3:3b:8f:ea:33:90:e5:08:bf:97:3e:c1:
         d6:dd:fd:2b:6c:0d:ed:0c:36:be:1c:e0:33:45:3f:fd:4d:19:
         df:c0:72:8e:d0:35:ed:cd:f5:87:5d:dd:e3:bb:27:6f:f5:6a:
         4b:c9:86:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:06 2024 by rpki-client on console-ams.rpki-client.org