Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/c733dc09-d02d-3a61-84c0-81f6e8142032.roa
File:                     c733dc09-d02d-3a61-84c0-81f6e8142032.roa (raw, json)
Hash identifier:          o2Sc9747oI1rFo6+9za7mcONYmqre+zzf6amx1/11hI=
Subject key identifier:   83:2B:45:BD:62:2E:68:17:79:18:44:5A:F0:3F:D9:80:2D:A2:2F:E2
Certificate issuer:       /CN=ab1101f4-a527-459b-8c16-d78b261e6de3
Certificate serial:       010D0C9F43285845C5A8F70F634239C716A0C4C0
Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/c733dc09-d02d-3a61-84c0-81f6e8142032.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        2602:277:3ee::/48 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:f7:0f:63:42:39:c7:16:a0:c4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=1cd94670-036f-4618-9823-94eb616c991d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:de:3e:c9:d7:6c:c0:3a:00:ed:5e:2e:a1:3f:
                    d8:bd:db:95:6e:3c:47:40:5e:ed:1d:8d:be:eb:04:
                    cb:0d:bc:98:09:81:63:e3:c0:10:53:f3:5b:3e:9a:
                    f8:91:cb:a6:c8:e2:3f:36:49:48:dc:09:dd:8d:6f:
                    f1:dc:70:8b:2c:6a:14:ee:99:5a:a6:96:c4:fe:2b:
                    64:09:98:68:63:8a:0f:14:b1:2b:8a:5e:4a:1a:28:
                    04:6e:a1:33:1b:66:91:ba:79:26:db:2c:b7:b7:5b:
                    90:29:83:99:54:62:77:4e:fa:d8:fa:61:99:21:c6:
                    9b:61:19:c6:13:2e:19:bc:66:52:f2:e2:75:e1:e8:
                    e9:73:71:c8:cb:e3:63:41:f7:39:f2:38:2f:1e:cd:
                    a2:92:3d:cc:bd:0d:29:b4:af:38:6a:82:42:81:ac:
                    49:d1:1c:9b:e9:b1:bd:20:d6:63:40:26:8b:5d:d2:
                    6a:28:6a:78:3a:d2:76:db:8b:a9:a0:11:b5:85:06:
                    66:af:ab:ad:48:f9:82:7a:9f:b4:71:55:43:4c:ed:
                    6a:52:4c:19:61:4f:83:2d:1f:69:15:30:88:0a:d9:
                    05:93:14:b3:8c:a6:8d:b4:f0:96:43:b2:c6:1f:5d:
                    b3:70:5a:f4:4c:1d:13:0b:af:db:d4:0b:f1:72:0c:
                    21:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2B:45:BD:62:2E:68:17:79:18:44:5A:F0:3F:D9:80:2D:A2:2F:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/c733dc09-d02d-3a61-84c0-81f6e8142032.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl

            X509v3 Authority Key Identifier:
                keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:277:3ee::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:79:34:66:b8:de:46:4b:0a:71:75:1a:d7:bf:31:e6:07:c3:
         14:08:09:e9:69:c1:99:37:b6:08:16:31:13:dd:31:74:f2:a8:
         33:a1:65:e6:d4:58:a9:c9:77:10:88:29:46:dc:c2:15:f9:ff:
         68:0b:91:17:3d:31:82:6a:c5:26:39:a5:c0:6f:7e:24:b4:71:
         0d:dd:f9:64:21:57:11:7e:e4:5d:0e:5b:a5:50:ce:b0:ab:db:
         22:5d:29:e6:59:71:94:d7:27:f0:b9:3f:c4:bc:c1:d3:5c:af:
         8a:f8:2d:5e:c2:89:51:a6:f3:12:fe:d4:a3:dd:ef:1d:08:2f:
         e1:01:78:d1:04:9b:7f:4c:7a:88:83:9a:ae:df:9e:64:0b:05:
         37:d5:08:19:14:9a:98:07:0c:04:7d:d0:34:bb:a6:28:a2:35:
         96:4b:03:43:b7:b6:c9:62:98:a4:fb:03:08:48:ec:e5:0c:b8:
         06:98:e1:48:24:d7:ac:5e:d1:52:b2:2c:d6:a2:1e:27:31:2e:
         20:c7:0a:ad:de:7f:53:c1:95:71:6c:2d:9a:12:cb:56:db:d0:
         d9:2a:e6:cf:41:dd:3c:c4:4b:2e:45:27:70:86:27:1a:79:47:
         a4:42:0b:b4:51:bd:07:2d:77:7a:51:ee:a3:24:9d:37:d7:c9:
         c8:dc:23:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:09:05 2024 by rpki-client on console-fra.rpki-client.org