Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/2baf96ad-1173-3a17-b553-d836f00d57d3.roa
File:                     2baf96ad-1173-3a17-b553-d836f00d57d3.roa (raw, json)
Hash identifier:          Ri6G33lWl9SIvS5eXPGyskGS51pgMQ4psoI/A493rMM=
Subject key identifier:   51:0D:B3:C6:DD:80:6D:03:10:AC:BA:C4:11:56:B2:64:8A:44:97:87
Certificate issuer:       /CN=54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb
Certificate serial:       010D0C9F43285845AF53736D57F9637909830A80
Authority key identifier: 53:65:50:E9:F8:19:F1:12:15:D9:A6:AC:59:7E:1F:43:51:66:D8:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/2baf96ad-1173-3a17-b553-d836f00d57d3.roa
Signing time:             Sat 27 Apr 2024 13:00:34 +0000
ROA not before:           Sat 27 Apr 2024 13:00:34 +0000
ROA not after:            Fri 26 Jul 2024 13:00:34 +0000
asID:                     22296
IP address blocks:        2602:2e5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:af:53:73:6d:57:f9:63:79:09:83:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb
        Validity
            Not Before: Apr 27 13:00:34 2024 GMT
            Not After : Jul 26 13:00:34 2024 GMT
        Subject: CN=96f2c325-e302-4605-a876-a8213c9369df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7f:da:7e:f5:80:99:b1:ec:2e:fb:02:21:0a:
                    df:a7:d5:30:b1:19:a6:cb:f0:8e:e6:00:21:d5:d9:
                    e2:83:4a:17:0a:8f:f7:42:5d:22:98:29:f9:00:0a:
                    65:90:67:37:56:6e:62:5a:81:b2:33:13:60:61:a1:
                    dd:ca:aa:4a:72:dc:cb:1b:b0:82:b4:5e:40:2d:99:
                    d1:36:3a:ff:71:94:53:53:22:48:f4:5c:dd:4a:aa:
                    9d:1d:ce:8d:12:af:32:e1:ba:1c:65:77:34:0a:3b:
                    84:43:cb:38:c6:cc:95:51:00:8e:33:9c:72:de:23:
                    49:32:5c:78:a9:e1:a6:0d:5c:0b:a8:60:79:17:09:
                    62:a5:ab:a8:17:e5:10:40:76:ca:0e:35:a0:0c:12:
                    59:a2:7d:e3:a2:55:c9:3b:75:72:3f:2d:00:25:05:
                    59:08:c4:53:82:d1:1d:92:e0:f4:eb:c0:3c:ac:95:
                    51:50:ae:60:e2:a7:61:a0:c6:50:95:67:77:fd:52:
                    f0:c7:92:9f:6f:40:29:28:64:52:94:32:1d:86:cf:
                    2e:bd:ae:bf:6e:83:3f:c2:9c:9c:3f:9e:f3:23:1b:
                    74:5e:ad:a8:73:6c:09:38:9f:68:9d:1c:19:9d:72:
                    df:97:2a:23:b1:d1:32:3a:20:7f:3d:76:05:92:1b:
                    ed:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0D:B3:C6:DD:80:6D:03:10:AC:BA:C4:11:56:B2:64:8A:44:97:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/2baf96ad-1173-3a17-b553-d836f00d57d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.crl

            X509v3 Authority Key Identifier:
                keyid:53:65:50:E9:F8:19:F1:12:15:D9:A6:AC:59:7E:1F:43:51:66:D8:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2e5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:f5:b9:21:48:6f:fb:c1:6b:03:88:c7:fe:fe:60:80:98:8d:
         9d:a3:8c:3d:b7:b8:db:e2:3b:7f:9d:6b:25:a7:d3:e6:f8:c6:
         ab:aa:52:bd:0c:7e:af:18:c7:55:1d:5e:2f:33:5e:d2:56:f6:
         c4:f1:dc:59:09:b4:74:87:d1:71:28:f0:a3:bc:ee:14:13:90:
         e8:10:eb:ac:6a:b4:d8:f7:45:e7:2d:55:fc:eb:29:6d:a1:21:
         44:12:17:7d:c1:a2:27:cf:e0:90:37:5b:60:8b:94:ea:da:e8:
         2c:9d:c8:17:23:75:61:d7:7e:9f:72:7a:65:1b:09:ab:f1:e8:
         a6:b0:f8:28:20:b6:03:a6:f0:6f:ef:14:32:34:f7:ca:23:c7:
         8b:0d:15:f2:24:ed:b1:f9:e1:2a:19:3e:a4:c5:65:35:bd:e2:
         ec:b0:af:69:8f:66:8b:95:f8:ca:e5:65:2e:8b:eb:61:48:0d:
         93:68:6c:c1:59:78:73:3d:82:4c:c3:cb:cc:5f:8c:84:c3:b5:
         37:9d:c9:6f:04:04:3e:5b:f0:4d:4b:68:c1:d8:2f:bc:2b:b9:
         00:db:c4:74:72:57:07:2a:d5:8e:8c:98:be:ec:50:61:c7:3f:
         bf:c8:21:b1:27:0f:35:2e:cd:61:47:86:4c:49:68:2b:2a:8d:
         f8:2a:8b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:06 2024 by rpki-client on console-ams.rpki-client.org