Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/7670f1ac-ca98-3178-a90b-87f3e498b9a8.roa
File:                     7670f1ac-ca98-3178-a90b-87f3e498b9a8.roa (raw, json)
Hash identifier:          N+oIs5C/av8SXvDBTZ8kINep1toIMlLbL7+nJiQauVY=
Subject key identifier:   26:E7:E9:86:D6:E2:C9:91:25:8A:94:A6:A2:02:A2:F7:2C:BE:BB:2C
Certificate issuer:       /CN=b82e5c10-aee7-4c19-a828-84974fcb8ac2
Certificate serial:       010D0C9F432858457D1338A9256BCDDFC94D7E80
Authority key identifier: 7C:7B:72:D5:62:73:5A:F1:21:F7:6B:56:C0:00:96:50:0D:33:CC:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/7670f1ac-ca98-3178-a90b-87f3e498b9a8.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     46427
IP address blocks:        2602:2c1::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:38:a9:25:6b:cd:df:c9:4d:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82e5c10-aee7-4c19-a828-84974fcb8ac2
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=871258e2-e0a9-4200-8eab-05fab6f54079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d6:e0:35:6e:7f:84:f7:09:9f:38:b3:92:2d:
                    bd:44:62:9e:26:64:ce:1b:d8:ff:b4:ef:eb:48:3d:
                    16:30:ab:37:90:ed:8f:5f:01:00:f7:25:85:9d:88:
                    7a:17:62:8e:6e:1b:22:bb:88:7a:48:10:86:b4:b0:
                    7f:70:d5:ab:4c:cb:ce:cd:13:27:45:3b:5c:22:4c:
                    2c:df:51:02:bb:a2:7e:ad:0e:01:31:34:36:be:9e:
                    2e:46:fb:ac:0d:a3:96:ee:44:5d:f6:ef:0c:0d:66:
                    1a:f4:5c:96:71:e5:2d:5c:6a:65:71:09:67:9b:83:
                    ed:ce:af:4f:a2:9b:02:dc:5b:66:1f:2a:60:8c:88:
                    3c:e1:db:06:57:af:48:3f:23:d7:ec:b1:7a:b6:ac:
                    94:66:19:0a:96:b7:5c:30:5a:dd:79:8f:21:cd:cf:
                    25:77:77:05:52:8b:c8:f4:94:8d:56:60:32:39:0d:
                    41:1d:af:9e:f6:03:4e:d6:0f:96:1a:d9:a3:d1:53:
                    14:ed:1c:2d:85:a3:ef:05:38:26:dd:c4:51:43:14:
                    05:0f:11:40:e7:ff:0e:03:2a:1a:06:b5:48:bc:06:
                    7f:9e:5a:c0:06:69:25:33:7d:d8:69:91:87:4f:28:
                    d5:52:08:ef:20:4d:c0:74:e3:28:91:98:47:f7:96:
                    74:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E7:E9:86:D6:E2:C9:91:25:8A:94:A6:A2:02:A2:F7:2C:BE:BB:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/7670f1ac-ca98-3178-a90b-87f3e498b9a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7B:72:D5:62:73:5A:F1:21:F7:6B:56:C0:00:96:50:0D:33:CC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2c1::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:ee:51:67:16:25:1b:71:b9:42:1e:62:b0:da:4e:59:4f:47:
         d5:33:8d:f3:4e:e7:19:25:73:49:20:c1:86:ab:e3:63:08:48:
         93:5f:b5:cc:16:aa:8f:8c:b7:4c:af:ec:20:6c:24:9f:1b:5c:
         8d:49:03:b2:0b:54:6e:39:b5:2a:d4:ef:33:76:21:23:3b:a3:
         2f:71:69:3f:50:cd:3e:a7:2a:3b:fb:15:a8:9a:cf:89:e6:3b:
         90:72:a8:3c:c0:cb:ca:b1:4b:df:3b:1e:92:f2:8a:9d:fd:48:
         40:10:b5:c4:c1:c8:f9:8c:92:ed:a1:a4:9e:f2:5a:48:ed:e2:
         b1:ec:16:49:87:85:6c:6d:ea:c2:69:44:cb:04:f3:ef:0b:a6:
         91:b2:25:64:c0:c1:bc:ed:09:ab:a2:53:c0:bc:ff:0f:03:e5:
         da:b1:81:d4:4b:24:88:e9:13:82:06:5a:de:ed:22:6b:a4:b3:
         70:e8:3f:33:43:f3:61:1e:cc:0e:c1:2e:f8:27:a5:39:0e:ed:
         a1:ea:e7:e0:c3:b6:f5:cb:da:97:39:2d:55:48:c6:5c:cc:a1:
         97:e3:4b:aa:16:a5:a0:cb:82:07:7c:f5:91:17:a6:f6:06:be:
         65:7c:d2:3e:be:b8:73:77:11:9a:c5:66:3e:53:2a:1c:f3:ee:
         41:55:d5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 01:33:17 2024 by rpki-client on console-fra.rpki-client.org