Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/7c0cede4-8012-3c79-9d4f-59f194f7d629.roa
File:                     7c0cede4-8012-3c79-9d4f-59f194f7d629.roa (raw, json)
Hash identifier:          lFWjdfmHMBQrri7XH88trvCZ0ZkhFpX06PKl3MiggLM=
Subject key identifier:   AE:BC:1D:6B:D1:F3:C6:71:FE:4A:33:4E:59:85:84:F2:C3:60:70:71
Certificate issuer:       /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Certificate serial:       010D0C9F432858452110504B8F9662C8D8BD6C30
Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/7c0cede4-8012-3c79-9d4f-59f194f7d629.roa
Signing time:             Thu 07 Mar 2024 14:00:32 +0000
ROA not before:           Thu 07 Mar 2024 14:00:32 +0000
ROA not after:            Wed 05 Jun 2024 13:00:32 +0000
asID:                     11810
IP address blocks:        2620:98:c000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:21:10:50:4b:8f:96:62:c8:d8:bd:6c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
        Validity
            Not Before: Mar  7 14:00:32 2024 GMT
            Not After : Jun  5 13:00:32 2024 GMT
        Subject: CN=c28fad64-45e1-487b-a250-2db4bd116485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:20:0b:c6:2e:f8:7d:ff:59:5e:32:46:7f:bd:
                    5e:c6:85:c8:47:8e:a9:63:72:3d:b0:4e:58:65:98:
                    c6:59:c8:47:f1:63:1a:34:8d:67:b5:40:d1:ae:6b:
                    ae:14:01:a9:76:64:7b:f3:3f:51:6e:ef:82:d1:5a:
                    db:c4:57:74:8c:57:b3:f9:49:cc:4f:5b:af:0c:80:
                    70:33:ff:86:0a:33:a1:1c:14:8d:a7:3b:ec:79:b0:
                    ab:67:8e:a0:b6:e9:d5:e8:b0:0e:01:ae:ca:e5:af:
                    2e:c7:3a:e8:50:ef:0b:c2:19:96:4a:de:dd:2b:94:
                    24:c6:d0:db:94:2e:4f:76:0d:da:56:ee:a9:54:33:
                    c9:58:5f:90:20:e3:ab:ba:83:92:ba:da:b1:5f:20:
                    32:95:cb:9f:ec:40:f9:f9:47:f6:d0:4c:1e:64:74:
                    fe:e4:d0:26:6c:75:b6:ad:b2:6d:82:83:17:e5:55:
                    8c:c1:43:e2:5f:0e:33:8b:29:22:05:fc:86:67:67:
                    22:94:7e:1f:ed:8b:db:05:62:09:f8:45:2a:f4:6b:
                    98:01:d9:d1:84:17:0a:32:70:f6:45:3b:78:62:d5:
                    5d:41:03:f4:42:43:ea:ea:32:fa:d3:7a:26:54:ac:
                    42:e4:a8:21:2b:b1:55:f5:f4:6c:ae:c8:fa:25:48:
                    58:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:BC:1D:6B:D1:F3:C6:71:FE:4A:33:4E:59:85:84:F2:C3:60:70:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/7c0cede4-8012-3c79-9d4f-59f194f7d629.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl

            X509v3 Authority Key Identifier:
                keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:98:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:84:ce:e9:3d:e2:a0:db:b1:da:e7:7b:f9:b2:33:59:32:71:
         01:7f:59:74:00:3e:6f:ce:9d:df:b3:e4:0f:bc:58:bc:00:86:
         04:fc:df:f7:d2:64:ee:1a:53:81:a4:9c:da:f2:14:e1:36:14:
         b7:8d:85:b3:70:f2:37:8e:ab:51:cb:ae:d7:94:61:c8:c8:32:
         14:6d:65:0d:b6:c8:ce:25:46:e8:48:7d:e9:8f:cb:d8:ab:3b:
         e6:b4:7c:ec:27:55:45:f6:c0:c1:11:09:f4:ea:fc:aa:23:59:
         39:5b:e7:b1:d3:39:7e:78:43:bc:81:e5:07:49:39:3a:20:a5:
         b7:eb:e1:ed:6d:2e:dd:e5:4b:94:35:9e:ac:f6:ac:98:67:b0:
         d0:42:66:36:24:52:74:90:43:c6:57:38:6c:9b:40:df:dd:8f:
         50:21:d1:74:fc:c9:0b:9f:ba:53:7c:02:63:d1:a8:8c:cb:06:
         74:e1:ce:cf:54:3f:ef:8f:84:b2:e0:1d:dc:c7:a7:b5:40:a2:
         c1:61:7a:b8:bd:9b:60:54:fa:78:88:f3:b6:09:c1:be:45:3e:
         e2:aa:26:88:cc:6b:e7:18:0a:50:61:e6:3f:7e:43:f4:54:87:
         05:fd:93:67:d8:c2:ef:75:1d:11:f9:8c:7f:d2:3a:bd:f5:b9:
         b2:68:20:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:08 2024 by rpki-client on console-ams.rpki-client.org