Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/cf3eb7fa-6f22-3694-a962-2c0233945c68.roa
File:                     cf3eb7fa-6f22-3694-a962-2c0233945c68.roa (raw, json)
Hash identifier:          qDCKjXww/qAEwI+F0uAn8mk8h33ificrEFjYLdIfHeE=
Subject key identifier:   3E:58:04:3B:B4:26:D4:A4:2B:21:0F:6B:FA:08:66:C5:9C:BD:A9:C1
Certificate issuer:       /CN=813aad25-25fa-4b5c-bb84-15fabea23f87
Certificate serial:       010D0C9F43285845DBFE6B6B46602BE4922E8700
Authority key identifier: 5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/cf3eb7fa-6f22-3694-a962-2c0233945c68.roa
Signing time:             Mon 13 May 2024 13:00:34 +0000
ROA not before:           Mon 13 May 2024 13:00:34 +0000
ROA not after:            Sun 11 Aug 2024 13:00:34 +0000
asID:                     17024
IP address blocks:        2602:2d1::/38 maxlen: 38

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:db:fe:6b:6b:46:60:2b:e4:92:2e:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=813aad25-25fa-4b5c-bb84-15fabea23f87
        Validity
            Not Before: May 13 13:00:34 2024 GMT
            Not After : Aug 11 13:00:34 2024 GMT
        Subject: CN=94209c1a-6c1b-4afc-b95c-93a6089d6329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:70:d9:ae:1c:5d:bc:8c:69:b7:f1:94:fd:30:
                    44:1b:ea:67:c9:a0:41:67:37:ac:66:20:c7:99:9e:
                    97:e2:ba:35:87:bb:ff:2f:2d:0d:62:56:01:70:9d:
                    fc:03:69:3a:d7:91:65:d0:c8:92:71:19:34:d8:b0:
                    cd:91:a9:aa:26:e5:1c:6f:1a:42:df:d7:a9:e5:30:
                    5a:df:5d:3d:49:01:9a:a0:e1:11:31:ac:3a:29:91:
                    5d:fb:94:d6:20:84:ce:c5:cf:60:06:57:87:29:73:
                    2d:28:b8:85:86:94:ba:c1:02:6f:20:5d:d4:d4:b4:
                    17:12:a1:a1:9d:de:d6:51:af:94:eb:a9:74:8d:47:
                    fc:ed:3a:4f:19:5f:81:93:c1:e4:3d:5a:d5:fe:5e:
                    5a:99:3d:30:8d:be:66:cc:34:af:7b:db:00:ff:9a:
                    ea:f6:fc:9c:0c:40:bc:87:d4:96:bb:57:07:a8:cf:
                    22:e3:13:3d:0d:4d:bf:83:60:2c:39:3c:9d:58:a5:
                    58:40:7b:a4:3f:12:e3:1e:8a:1e:de:e4:85:f8:af:
                    05:a3:f6:90:6f:27:81:e3:70:01:5b:cf:3f:1a:60:
                    d9:59:a8:c8:ee:db:c9:a0:c9:3b:b4:c0:b2:ff:ce:
                    b5:79:1c:86:09:16:54:27:2c:29:7e:d2:b8:91:d1:
                    9e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:58:04:3B:B4:26:D4:A4:2B:21:0F:6B:FA:08:66:C5:9C:BD:A9:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/cf3eb7fa-6f22-3694-a962-2c0233945c68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl

            X509v3 Authority Key Identifier:
                keyid:5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2d1::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:01:17:a9:b2:ce:63:70:7a:9f:76:80:12:4c:45:34:53:e8:
         24:6c:5a:33:9c:7a:69:4f:63:20:b8:2b:45:37:39:d9:a1:37:
         6e:42:b6:7c:6f:f8:92:b0:aa:d5:15:9e:16:c5:b3:88:b0:73:
         16:54:19:94:96:55:f0:f5:cb:c5:e8:c2:14:f1:37:c8:e2:3e:
         a3:de:a8:ca:02:af:11:3e:a6:51:ad:e2:77:78:2c:49:b2:7b:
         f5:32:5c:45:a3:18:80:14:dc:18:45:9b:f5:d8:16:92:f8:32:
         ec:1d:0b:ea:37:83:fd:18:eb:60:b9:3b:17:33:59:12:a1:ff:
         1e:52:fc:05:7a:35:40:55:29:31:f9:43:43:48:b2:33:fb:d8:
         6c:4a:4b:72:ea:5f:1e:bf:7a:21:8c:4d:e7:3a:3b:59:8c:5d:
         cc:d3:bd:9b:56:f2:31:80:c9:ec:0a:95:94:2d:5c:2e:fd:73:
         bd:a1:9a:e1:15:3f:41:b0:42:a9:94:3a:71:24:58:a4:7d:fc:
         e1:a0:8e:10:72:c7:60:4f:0f:2f:91:41:9b:ea:68:c0:13:f7:
         b9:70:b0:93:c0:50:21:80:78:1d:31:b1:d9:27:45:7e:f0:f2:
         29:ac:db:9a:4b:2b:e2:38:eb:0d:31:b9:92:d8:45:32:6c:8b:
         c3:41:82:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:07 2024 by rpki-client on console-ams.rpki-client.org