Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/845171f5-1a1d-372f-b1a1-ff4de042b373.roa
File:                     845171f5-1a1d-372f-b1a1-ff4de042b373.roa (raw, json)
Hash identifier:          /OjyVOEFZWX7g/t+p/VDIjQhKKqJvmTdXVid9e7jvRg=
Subject key identifier:   95:CC:8B:28:9F:DC:E3:72:52:0A:B4:3F:23:65:C7:59:CC:F0:FE:AA
Certificate issuer:       /CN=e0b35546-769e-41a6-987e-2a9732555de4
Certificate serial:       010D0C9F43285845DBFE708F79B1D9007491A500
Authority key identifier: FD:F6:17:A5:81:7C:B3:18:B7:E3:11:FF:B0:FC:DF:D3:EC:CC:08:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/845171f5-1a1d-372f-b1a1-ff4de042b373.roa
Signing time:             Mon 13 May 2024 13:00:34 +0000
ROA not before:           Mon 13 May 2024 13:00:34 +0000
ROA not after:            Sun 11 Aug 2024 13:00:34 +0000
asID:                     203899
IP address blocks:        2602:faac::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/e0b35546-769e-41a6-987e-2a9732555de4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/e0b35546-769e-41a6-987e-2a9732555de4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:db:fe:70:8f:79:b1:d9:00:74:91:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0b35546-769e-41a6-987e-2a9732555de4
        Validity
            Not Before: May 13 13:00:34 2024 GMT
            Not After : Aug 11 13:00:34 2024 GMT
        Subject: CN=afb486f9-3806-4c97-b3bc-c0f3ba6a24a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d6:5e:c5:cf:70:57:97:7d:e2:20:ee:bd:61:
                    a3:3c:e3:55:f4:39:06:45:67:ab:48:89:49:df:e0:
                    9a:42:6d:80:64:16:e6:20:da:ea:80:75:7c:7d:85:
                    10:1d:de:13:8f:29:18:af:f7:69:f4:60:e0:c2:d8:
                    d8:40:20:6a:49:d6:a0:04:14:43:b7:e3:66:e1:8a:
                    71:d6:5f:30:36:36:36:e8:9f:11:12:3e:cb:d3:ac:
                    ff:fe:83:18:a1:21:61:e9:d7:6b:10:d6:29:83:59:
                    49:4f:18:cd:39:22:c9:bd:4a:8d:2d:d1:f5:a2:4e:
                    12:8c:68:aa:e3:e4:fb:8e:f0:92:17:6c:bf:a3:9a:
                    bb:77:6e:0a:de:51:dd:7c:4b:6b:9b:14:c9:8a:b0:
                    98:35:f7:77:f5:36:db:39:b9:73:07:ff:81:d6:9a:
                    2f:5b:17:5b:24:89:6b:70:4a:7f:a6:7a:24:09:17:
                    6e:e0:55:61:f5:5c:c9:8b:6b:ed:c3:59:95:2e:42:
                    90:9b:06:7e:b1:2c:fb:3f:a0:ca:f3:d0:e4:54:25:
                    9b:7f:45:aa:41:e8:12:6d:c7:5b:4f:f6:65:ad:c2:
                    5e:a0:18:ab:14:37:65:b0:05:a8:a7:ae:30:cc:a0:
                    c8:60:25:b1:69:30:ac:e5:df:90:19:94:63:19:79:
                    5e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CC:8B:28:9F:DC:E3:72:52:0A:B4:3F:23:65:C7:59:CC:F0:FE:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/845171f5-1a1d-372f-b1a1-ff4de042b373.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/e0b35546-769e-41a6-987e-2a9732555de4.crl

            X509v3 Authority Key Identifier:
                keyid:FD:F6:17:A5:81:7C:B3:18:B7:E3:11:FF:B0:FC:DF:D3:EC:CC:08:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faac::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:31:ee:bd:a2:06:c9:85:37:25:d2:87:32:c7:0b:47:92:0d:
         25:d2:41:52:e0:7f:b5:a4:e0:ae:0e:76:8e:69:b7:d3:36:34:
         c6:cc:ea:8b:f7:d8:37:58:a2:85:a5:0c:3c:0e:97:53:19:b9:
         14:a3:2a:7c:f8:fa:f5:24:f0:75:b9:33:e8:e9:63:60:4f:2b:
         ea:90:83:66:9d:2a:c0:a4:74:84:8d:7d:8c:05:f1:f0:89:8c:
         5a:88:63:54:2c:59:30:22:ae:da:8e:95:5d:dd:ce:46:f2:4f:
         e5:ec:18:12:2f:3e:e6:00:83:69:6e:10:23:e6:cf:5a:7e:7c:
         35:bc:e1:b9:50:4f:3c:d4:a2:9c:91:86:90:15:1b:d7:ae:08:
         72:51:82:1a:85:21:7a:bc:df:8a:4d:ea:86:97:64:90:ec:e6:
         5c:f4:dc:80:af:ab:29:df:8a:65:3c:15:1b:e0:7e:93:ad:46:
         6b:a7:cb:18:6c:4e:1d:2a:82:0f:a5:85:33:5d:7a:44:9e:79:
         0b:86:a3:ac:50:35:61:1b:6a:bd:d7:01:3e:ee:21:59:70:00:
         42:97:e0:78:77:43:0f:ae:6e:7d:ee:cb:ab:e2:84:17:ae:ff:
         5c:a9:be:01:0a:3a:52:78:a5:10:49:77:eb:02:4c:0f:d2:fa:
         e2:c9:c3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 06:56:38 2024 by rpki-client on console-fra.rpki-client.org