Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b/9b13e856-5928-3747-b00e-3bbc6baf6cde.roa
File:                     9b13e856-5928-3747-b00e-3bbc6baf6cde.roa (raw, json)
Hash identifier:          LVyE/ZYb0LiVVnJ4uTvULBw6pr9EAeyGC+XQQy4Vckw=
Subject key identifier:   B3:62:6F:BA:25:E7:66:D1:66:7E:62:6A:D3:22:A1:7B:61:97:DF:F6
Certificate issuer:       /CN=747306d8-f469-4e78-a1fc-d958dfc4f31b
Certificate serial:       010D0C9F43285845777DCC8B6FE4AB6D3B9E3E80
Authority key identifier: 3A:6B:C4:F3:A8:7E:D4:46:1E:35:DC:C5:58:63:4A:AE:8A:B6:94:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b/9b13e856-5928-3747-b00e-3bbc6baf6cde.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     47778
IP address blocks:        2602:2a3:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b/747306d8-f469-4e78-a1fc-d958dfc4f31b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b/747306d8-f469-4e78-a1fc-d958dfc4f31b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:cc:8b:6f:e4:ab:6d:3b:9e:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747306d8-f469-4e78-a1fc-d958dfc4f31b
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=f5f4b753-1aea-4f2a-a0d5-28fbd297f357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4d:6a:59:3e:ea:25:c2:77:ea:a3:55:eb:cc:
                    d8:a1:15:c6:ff:e3:03:20:4c:48:10:bb:ff:9b:2e:
                    42:9e:e8:13:af:1c:c1:cf:ab:0d:af:c8:25:fe:11:
                    88:27:7d:14:67:7c:f3:4d:53:41:0f:a4:ed:c9:e9:
                    30:57:31:29:17:02:a5:fe:af:5d:22:73:ba:73:96:
                    96:54:29:38:ec:d6:48:3a:2b:c6:c3:0f:c1:fd:1d:
                    65:e7:ac:3e:8e:00:28:a3:1e:b0:af:91:cd:b9:7c:
                    24:21:a6:5f:44:47:2c:52:68:4d:84:48:60:0d:c7:
                    37:f6:6e:c2:d5:7b:7e:d7:cf:06:db:cd:41:de:01:
                    78:0e:28:d6:7e:ee:bd:be:61:d9:e1:8b:7b:dc:fb:
                    e8:e7:68:ee:9c:36:7e:da:bb:fa:9b:a7:74:42:22:
                    56:cd:68:25:26:d1:7b:ca:0f:c9:1e:79:88:8f:3b:
                    07:7f:8a:36:e9:e7:8e:6b:04:97:12:a6:6a:06:53:
                    f7:dc:6e:49:28:95:da:b2:01:3e:74:c0:2d:64:45:
                    3a:13:d7:79:1b:19:52:fe:09:72:64:ea:63:72:b3:
                    fb:58:36:64:aa:dd:04:dc:84:44:17:08:47:ff:60:
                    72:fc:bd:c8:04:33:17:b9:ce:0b:63:68:ef:d7:11:
                    9d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:62:6F:BA:25:E7:66:D1:66:7E:62:6A:D3:22:A1:7B:61:97:DF:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b/9b13e856-5928-3747-b00e-3bbc6baf6cde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b/747306d8-f469-4e78-a1fc-d958dfc4f31b.crl

            X509v3 Authority Key Identifier:
                keyid:3A:6B:C4:F3:A8:7E:D4:46:1E:35:DC:C5:58:63:4A:AE:8A:B6:94:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a3:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:86:5b:2f:a6:f8:de:8d:2d:5c:d6:a2:52:40:96:b8:b3:5b:
         66:29:04:4f:52:c5:33:2e:e8:70:77:3c:99:7b:8a:69:55:79:
         16:f4:d2:43:33:a2:fe:0f:35:af:ce:47:f3:80:d1:77:73:de:
         63:8d:0b:a1:03:3c:39:59:ee:81:fc:3b:5d:a1:df:2e:9e:26:
         2b:8e:63:ca:ee:c4:0f:96:8b:7e:ed:31:4c:a0:27:d6:17:69:
         d1:cd:9b:68:d9:da:19:26:19:ee:ea:6c:2b:7c:3a:4c:c1:49:
         c2:84:ba:04:92:9a:d7:16:33:ff:f0:0c:2d:40:c5:38:42:0e:
         e9:8c:2e:b0:75:17:96:b5:e6:01:ac:5a:19:97:ee:62:e2:bb:
         96:13:fb:f1:5d:cf:57:f5:33:a8:9e:ea:f1:b6:43:fc:82:29:
         ce:c6:62:be:52:cb:9e:16:fa:ae:df:66:5f:9f:00:18:f4:0c:
         10:a8:3b:89:4a:36:c1:44:77:89:8e:50:37:b1:cd:91:97:62:
         14:98:a6:b2:ab:41:14:c5:7b:3a:8d:e4:de:87:e0:51:4f:b5:
         4b:ca:5a:fe:c7:01:74:92:df:e7:a3:1e:71:21:5f:92:bf:bd:
         3f:e4:e4:ad:07:59:85:80:c3:02:a2:8a:1f:7c:67:03:b4:57:
         a2:87:96:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 18:21:56 2024 by rpki-client on console-ams.rpki-client.org