Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/1df4b28f-02b3-3841-bb10-309af355a5d9.roa
File:                     1df4b28f-02b3-3841-bb10-309af355a5d9.roa (raw, json)
Hash identifier:          /MbF7ZAFn/9sRJMqIrT9ztwwOVgoxOECWe7il9pB18A=
Subject key identifier:   50:86:74:5C:83:00:0D:54:BF:3A:00:B1:00:87:DF:96:2A:2B:41:7E
Certificate issuer:       /CN=ccdced21-8f04-4273-8f8a-07593c3968fb
Certificate serial:       010D0C9F4328584531B2988FDF54B772074F2D80
Authority key identifier: B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/1df4b28f-02b3-3841-bb10-309af355a5d9.roa
Signing time:             Wed 13 Mar 2024 13:00:30 +0000
ROA not before:           Wed 13 Mar 2024 13:00:30 +0000
ROA not after:            Tue 11 Jun 2024 13:00:30 +0000
asID:                     199626
IP address blocks:        2602:2b5::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:31:b2:98:8f:df:54:b7:72:07:4f:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccdced21-8f04-4273-8f8a-07593c3968fb
        Validity
            Not Before: Mar 13 13:00:30 2024 GMT
            Not After : Jun 11 13:00:30 2024 GMT
        Subject: CN=80c1c72d-8cfd-4a60-a284-673c524f8f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d9:d4:f1:15:d2:d3:82:0c:76:ac:89:40:da:
                    8c:69:1a:68:24:31:59:98:58:18:77:6d:83:fa:1d:
                    af:e5:c0:6f:ba:c0:59:74:c0:bb:7e:fd:4b:17:6a:
                    b2:24:4f:0b:d5:31:30:06:eb:0b:ff:87:5d:5f:52:
                    19:a0:15:35:7c:78:a4:c5:55:1a:87:70:e4:6a:3d:
                    0c:86:47:49:57:3c:ff:ab:9f:4c:e0:fa:0d:4e:8f:
                    ee:0b:cc:55:25:f5:cb:bd:6a:c6:90:74:7c:b4:37:
                    77:e3:a0:8a:79:ce:45:01:de:a2:34:4b:df:42:8e:
                    b1:eb:45:b5:4b:cd:e6:26:2b:a3:d8:4b:8f:d4:e6:
                    93:a1:54:dc:87:91:9b:bf:4a:ab:4a:69:b8:29:95:
                    6b:7f:62:38:51:91:76:a9:2f:d3:a7:88:89:a3:1f:
                    6f:90:d3:6c:7f:87:aa:c7:77:14:ae:87:7b:bf:de:
                    fe:63:e1:4e:11:84:ad:b1:f1:2a:dd:1d:13:c6:09:
                    c3:e6:ed:f6:7e:a0:3f:cd:1b:bb:d7:0a:73:56:2b:
                    51:61:50:92:a5:aa:97:e7:7c:39:f1:95:da:5e:fd:
                    bc:36:9f:9c:0a:29:ab:eb:00:7b:09:09:82:5c:8a:
                    9a:0d:99:3f:bc:c9:80:ea:cf:25:1b:e3:87:ff:b9:
                    84:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:86:74:5C:83:00:0D:54:BF:3A:00:B1:00:87:DF:96:2A:2B:41:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/1df4b28f-02b3-3841-bb10-309af355a5d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl

            X509v3 Authority Key Identifier:
                keyid:B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2b5::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:c0:22:e3:b7:4b:6f:23:25:65:f4:64:15:03:7a:45:1b:ae:
         b5:4b:5d:24:c0:87:07:bd:73:20:0a:14:2b:d1:9c:01:6b:cf:
         9a:92:ec:78:68:62:d6:c4:bc:22:02:71:0b:a5:4d:fc:c2:00:
         4a:5b:fc:0a:e4:8e:81:04:ef:1a:f8:02:91:01:df:97:36:6c:
         38:cf:e0:e6:ad:bc:92:6c:36:b5:f7:56:16:b3:c1:32:42:65:
         a4:5c:f4:0e:f8:30:4f:45:8c:72:d2:4d:36:06:b0:37:30:da:
         38:cd:e5:ce:cc:37:01:77:64:4f:f9:75:25:b7:2e:2f:86:28:
         8d:75:58:32:dc:35:2d:5d:5e:06:68:11:3c:99:5d:60:7a:02:
         46:3c:58:89:f1:ae:e7:6f:01:1b:46:25:f7:ba:a8:62:d5:02:
         16:05:e9:90:28:4f:0f:95:15:bc:dd:2a:39:e0:ab:27:d5:fa:
         43:9b:77:ef:2e:cb:c1:c7:ad:86:8e:c0:0b:35:b8:ff:88:73:
         15:c1:d3:ce:8a:f3:60:e9:79:e9:51:5e:20:c0:82:95:12:72:
         1b:94:c9:7e:f6:3f:cb:20:fe:e7:3f:a8:58:b7:78:2d:1c:04:
         b2:cb:05:4d:23:88:7c:02:44:f9:5e:6d:0c:ef:a2:c7:ec:6f:
         95:86:0b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 06:56:37 2024 by rpki-client on console-fra.rpki-client.org