Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/f0c4693c-151f-3745-b1ce-9d65b68b967e.roa
File:                     f0c4693c-151f-3745-b1ce-9d65b68b967e.roa (raw, json)
Hash identifier:          iyl6hdjmAP6KQJ+iLU7rY80367ZucxSFKYFv6JMilbc=
Subject key identifier:   24:5E:C2:D9:07:E6:C3:1D:B4:60:C6:9D:72:D7:7F:36:8D:86:BB:23
Certificate issuer:       /CN=a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e
Certificate serial:       010D0C9F43285845304D3ADB3BE26CF0D2EB3F80
Authority key identifier: 8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/f0c4693c-151f-3745-b1ce-9d65b68b967e.roa
Signing time:             Wed 13 Mar 2024 01:00:26 +0000
ROA not before:           Wed 13 Mar 2024 01:00:26 +0000
ROA not after:            Tue 11 Jun 2024 01:00:26 +0000
asID:                     133846
IP address blocks:        2602:fab0:10::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:30:4d:3a:db:3b:e2:6c:f0:d2:eb:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e
        Validity
            Not Before: Mar 13 01:00:26 2024 GMT
            Not After : Jun 11 01:00:26 2024 GMT
        Subject: CN=bea14cb8-d618-43ef-86d3-b6bbda56b21a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e0:ed:9c:ae:28:10:5c:74:35:c3:56:91:04:
                    9b:f4:11:57:21:fc:e3:7e:29:55:9c:90:59:5a:30:
                    b4:26:32:83:7b:76:d0:ba:03:cb:28:af:4a:bc:f4:
                    75:ab:df:4b:fc:af:57:64:9d:83:2e:58:c4:65:a4:
                    e9:85:34:43:4b:b4:69:4f:9a:10:2d:bc:89:e4:ce:
                    33:18:5e:35:96:c0:05:1d:7a:aa:8f:58:e9:aa:48:
                    96:a5:6c:4b:9e:2d:20:b8:85:8c:b9:59:46:c1:5a:
                    80:54:7d:ca:a7:ff:70:b8:21:35:fb:3c:6f:03:43:
                    e5:d5:da:67:cd:60:38:47:71:0b:37:62:a9:29:b9:
                    ef:12:75:b7:6f:a9:21:19:ea:56:64:cd:1e:11:2e:
                    ba:f1:58:28:16:0b:5e:b1:da:b7:45:c6:83:0e:85:
                    94:b5:33:85:a7:34:f8:6f:ad:c8:2d:e8:c1:7a:74:
                    1f:3b:1b:7a:34:0c:55:b4:cd:cd:e4:9a:32:e1:26:
                    59:b8:6b:0f:e1:78:f6:95:2e:ad:17:a5:37:e9:46:
                    d5:d3:2e:12:3e:b0:3a:81:43:3b:99:f0:61:ae:4b:
                    a5:d9:65:af:d3:ac:5c:ca:b7:9c:3d:92:44:a9:85:
                    2c:4b:9b:77:3c:38:33:5a:ac:ea:53:d7:c9:20:a1:
                    26:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5E:C2:D9:07:E6:C3:1D:B4:60:C6:9D:72:D7:7F:36:8D:86:BB:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/f0c4693c-151f-3745-b1ce-9d65b68b967e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.crl

            X509v3 Authority Key Identifier:
                keyid:8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fab0:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:a5:53:24:54:8e:8a:ba:ff:aa:1c:cb:9f:94:ad:9e:7c:05:
         2e:7a:44:55:3c:f0:82:b6:29:ac:d7:e8:03:19:c5:0c:f7:90:
         86:c4:d2:41:67:f0:b6:4e:ca:dc:10:b9:bb:d1:f1:35:bc:96:
         f5:ce:bc:d2:01:b0:3d:74:c0:7e:a7:c6:0e:57:cf:1c:d5:1f:
         69:8b:93:85:16:e9:52:a2:fb:f5:46:12:ce:b3:e5:9a:39:9d:
         2b:73:91:ac:3b:65:16:49:49:4e:1e:a5:96:31:3d:8f:3d:ba:
         3a:b2:f0:f2:0f:47:68:b7:40:33:60:a5:ca:5f:35:42:c1:21:
         16:98:39:fb:3d:41:ae:98:5c:53:e9:c0:0a:ca:18:46:40:97:
         f5:da:54:4f:ca:cd:78:ba:27:dd:0b:78:6e:3c:2a:a5:4c:06:
         55:dd:01:4f:5a:38:3c:7c:7e:78:c8:93:46:c5:cb:8e:0d:1b:
         f9:97:31:80:dc:5f:26:28:d8:f0:c0:a2:36:e9:ff:2d:2d:6e:
         e6:e6:7a:bc:bd:be:86:d7:8f:7d:92:a9:0d:e8:57:a1:f1:8a:
         91:6a:af:35:f7:9f:c7:02:bc:4c:89:fd:ea:b8:35:4f:8a:52:
         f2:80:0c:76:3d:08:ee:43:f1:13:97:07:b5:c1:4b:c1:5a:d9:
         fb:6c:6e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:28:51 2024 by rpki-client on console-ams.rpki-client.org