Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/9bed396e-0337-3bd3-85ee-db89f9bebe8f.roa
File:                     9bed396e-0337-3bd3-85ee-db89f9bebe8f.roa (raw, json)
Hash identifier:          pj6BvjOC1bI212J0FoXBkk42oPEp4upLCLqEs6p3Gew=
Subject key identifier:   CA:98:07:C2:F2:A8:D6:35:D3:67:76:A2:2A:35:7F:9C:C9:EE:C6:00
Certificate issuer:       /CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
Certificate serial:       010D0C9F4328584569886E51BBCD8E15F91CFE00
Authority key identifier: 6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/9bed396e-0337-3bd3-85ee-db89f9bebe8f.roa
Signing time:             Tue 02 Apr 2024 13:00:37 +0000
ROA not before:           Tue 02 Apr 2024 13:00:37 +0000
ROA not after:            Mon 01 Jul 2024 13:00:37 +0000
asID:                     203283
IP address blocks:        2602:2db:11c::/46 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:69:88:6e:51:bb:cd:8e:15:f9:1c:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
        Validity
            Not Before: Apr  2 13:00:37 2024 GMT
            Not After : Jul  1 13:00:37 2024 GMT
        Subject: CN=9e9bd9d5-297a-4cf5-b34c-88e4e2de7cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c0:6b:ce:38:bc:03:8e:4b:64:97:55:c0:ca:
                    24:6c:8b:fb:b0:10:e8:bb:55:93:b9:fb:f0:85:2f:
                    2f:93:2e:9a:c0:35:77:7f:fb:bd:e1:c0:02:36:4c:
                    d8:43:31:ac:bb:10:cd:e4:03:cb:b2:5a:4e:e5:c3:
                    fe:4f:47:02:df:e1:b6:da:fd:1a:21:94:e2:45:3f:
                    10:21:fe:08:b7:59:37:c5:b6:ce:c6:69:bd:64:6c:
                    36:2c:ce:bb:9e:0a:e8:c0:1b:48:6c:07:99:52:f4:
                    6b:24:eb:d0:4c:39:8d:36:cb:bf:dd:bf:d4:f5:bc:
                    b4:2f:88:8b:e5:3c:1f:15:be:f7:45:18:fd:bb:6e:
                    d8:aa:60:b4:ee:34:6c:70:3e:e7:9d:7b:41:cb:c3:
                    83:80:d6:c6:56:d7:37:be:12:05:13:c6:67:8e:14:
                    9f:0c:1e:b8:28:69:8a:fe:25:8b:45:2f:d8:2e:de:
                    19:f1:eb:33:fa:5c:2c:2e:32:5c:ab:9d:d1:60:61:
                    6a:8a:f2:b7:4a:77:1c:df:c9:15:0e:ec:29:5b:63:
                    9b:9b:c7:c9:6d:d5:b2:e7:c8:26:19:f6:15:85:30:
                    e7:f4:04:c8:c1:06:88:55:31:a0:c3:3d:f1:24:fe:
                    46:a0:3d:9f:1a:d8:33:52:89:28:83:6b:e3:ce:f0:
                    6d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:98:07:C2:F2:A8:D6:35:D3:67:76:A2:2A:35:7F:9C:C9:EE:C6:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/9bed396e-0337-3bd3-85ee-db89f9bebe8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl

            X509v3 Authority Key Identifier:
                keyid:6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2db:11c::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:c6:13:86:51:a2:39:4c:83:59:a4:8e:a1:e3:df:f3:fa:ab:
         28:14:ca:d8:2b:f1:ec:73:d3:f5:cb:72:4a:9f:98:11:60:2b:
         81:75:af:d7:67:72:33:02:c9:85:d1:7d:f2:11:2f:96:2b:13:
         b7:d3:46:0d:d5:b3:51:2f:ca:22:27:1a:69:5c:3f:cf:2b:65:
         1b:94:fe:85:0e:5e:ac:de:b2:31:27:09:4c:5e:37:72:99:21:
         45:2a:83:b1:61:c2:41:ff:84:bd:d3:1c:64:25:84:1a:6c:6f:
         12:06:10:29:f2:8b:46:ed:08:7f:74:ec:b6:b7:13:e9:fe:88:
         4b:9c:df:c4:0c:1d:fc:e6:5d:5c:2c:58:62:27:76:01:fc:c8:
         86:42:81:37:96:39:cc:8d:ee:d0:eb:b1:6d:07:79:56:dd:83:
         c5:db:0b:32:a7:cf:f5:de:cf:b7:6a:e5:65:d3:0b:c4:b5:2f:
         d9:3c:36:cc:4b:d4:7f:62:7d:bf:25:6b:de:53:7a:ab:3c:ea:
         a6:07:a1:6f:1b:45:3a:18:d4:3b:3e:5a:af:be:1a:02:df:b4:
         60:91:39:49:f7:18:9c:7a:b8:6b:81:3d:83:db:db:58:22:59:
         1f:de:b4:10:10:c5:bb:70:c7:56:40:26:71:be:4b:01:ee:c5:
         58:98:59:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:14 2024 by rpki-client on console-ams.rpki-client.org