Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2/551ee6c7-d739-3462-912c-6527e0e5a7d5.roa
File:                     551ee6c7-d739-3462-912c-6527e0e5a7d5.roa (raw, json)
Hash identifier:          auLC0LZ39cl1aL6oyz3uTqUbGu3d5lzlSFjz7gbI7F0=
Subject key identifier:   E2:C0:DD:F5:F9:7C:E7:3F:4A:5E:E6:24:FF:0E:B7:A9:63:2C:69:31
Certificate issuer:       /CN=ed14d35e-d16f-4ad5-82c4-5dcd3b569de2
Certificate serial:       010D0C9F43285845C0138A45CC4BD90BC84FE1A8
Authority key identifier: 55:42:44:A6:EF:F2:01:59:61:93:69:92:0C:27:51:AE:B5:D2:67:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2/551ee6c7-d739-3462-912c-6527e0e5a7d5.roa
Signing time:             Fri 03 May 2024 13:00:34 +0000
ROA not before:           Fri 03 May 2024 13:00:34 +0000
ROA not after:            Thu 01 Aug 2024 13:00:34 +0000
asID:                     197767
IP address blocks:        2602:fa3f::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c0:13:8a:45:cc:4b:d9:0b:c8:4f:e1:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed14d35e-d16f-4ad5-82c4-5dcd3b569de2
        Validity
            Not Before: May  3 13:00:34 2024 GMT
            Not After : Aug  1 13:00:34 2024 GMT
        Subject: CN=e480fe7c-f708-42da-8758-80389451222a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:81:35:d3:bb:01:55:6e:b3:7e:b7:41:63:73:
                    1e:96:e5:98:19:84:fc:e5:eb:fb:a2:c4:af:ef:c4:
                    f9:86:0c:71:6a:2d:f8:07:b8:56:08:c8:f7:0a:08:
                    cd:9c:aa:2d:d3:a9:9e:ab:06:c1:6d:ac:bd:a1:95:
                    1c:5a:ab:d8:64:97:fb:80:66:81:3f:9b:f1:6e:7b:
                    40:1e:e9:45:30:66:02:d9:e3:07:ec:af:b8:6f:0f:
                    ae:41:bd:f6:17:a9:3d:01:c6:7a:c6:d9:74:6f:cf:
                    19:66:cc:24:96:54:76:75:f1:d5:b0:d4:5d:8b:82:
                    6d:12:dc:ee:2c:d4:93:0f:46:e6:f4:70:d9:ba:84:
                    60:a4:a6:b2:c8:39:29:4f:5b:a0:3d:f0:e0:8c:79:
                    08:84:61:a2:d3:5f:34:b2:6c:db:c0:ab:a1:95:91:
                    d1:9f:99:4d:71:9c:9e:ac:f1:bc:1a:42:36:e0:95:
                    03:2d:48:99:ca:b1:2e:13:80:d4:81:45:0e:44:a8:
                    40:01:6c:c4:a0:15:82:71:c2:15:b1:8e:c6:c9:7e:
                    a3:92:49:75:20:82:59:ef:d3:aa:d1:71:d7:bc:6a:
                    bd:c3:ae:80:8e:a1:11:1c:23:19:a2:4e:5e:12:cf:
                    92:b7:f1:e6:03:2f:da:d4:05:46:93:90:cd:f7:d3:
                    3a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C0:DD:F5:F9:7C:E7:3F:4A:5E:E6:24:FF:0E:B7:A9:63:2C:69:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2/551ee6c7-d739-3462-912c-6527e0e5a7d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2.crl

            X509v3 Authority Key Identifier:
                keyid:55:42:44:A6:EF:F2:01:59:61:93:69:92:0C:27:51:AE:B5:D2:67:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa3f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:2d:68:9f:10:dc:86:a6:79:97:0f:3c:96:41:b1:ed:6f:e4:
         59:80:13:4b:aa:94:95:7a:a8:1a:8d:ce:22:66:56:bc:40:0b:
         86:ea:9c:e7:7a:2e:73:a7:19:3e:45:da:6c:c3:58:a8:84:23:
         fb:04:08:b3:89:e8:0f:da:d5:24:2b:bb:e4:72:3d:f5:21:6a:
         b9:2d:25:6d:93:55:6b:50:78:af:62:53:5d:53:a8:6e:f9:bf:
         4c:a5:f9:a4:81:9d:bd:80:69:9e:d3:75:e1:f2:17:c3:87:30:
         61:48:3b:d1:87:40:c6:bc:ae:fe:24:88:e2:26:37:25:87:2c:
         e6:05:74:57:f9:87:80:9d:b8:33:d3:6e:83:dd:57:e5:fe:79:
         85:41:6d:f0:a0:e3:67:8c:ea:e5:c7:f3:e0:cd:d9:80:e1:27:
         2e:47:0f:d9:8a:c5:1a:6e:af:d4:2a:25:f5:f5:34:cb:7a:7e:
         b7:1e:8d:4b:70:b2:0b:c5:e0:89:18:a6:f8:4c:68:f8:e0:20:
         fb:ce:78:f6:70:ac:07:fe:ac:d5:23:fb:90:ab:a5:e2:fa:2a:
         f9:1e:a3:08:7d:12:aa:96:29:14:dd:07:ea:5a:1e:38:d2:04:
         3a:cf:29:3d:a1:ae:23:b8:fe:55:33:07:24:b4:f6:27:63:c8:
         2c:52:9b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:50:35 2024 by rpki-client on console-fra.rpki-client.org