Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/ee116b9b-3843-3020-b1f5-a01cdadea43f.roa
File:                     ee116b9b-3843-3020-b1f5-a01cdadea43f.roa (raw, json)
Hash identifier:          TspQvDXwRWEGfD0RVp/Sdc1xniBmavGwVPj/xzJXSu4=
Subject key identifier:   BA:AB:B0:19:2E:DF:A3:BB:91:CA:19:22:10:24:79:6B:49:95:B2:1A
Certificate issuer:       /CN=2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2
Certificate serial:       010D0C9F432858457FDDD7C65B66C366D64E6600
Authority key identifier: DB:4C:BE:6E:B3:E7:74:A6:66:DB:BF:8D:07:AD:66:A3:D3:67:D4:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/ee116b9b-3843-3020-b1f5-a01cdadea43f.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        2602:fb2a:c0::/42 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:d7:c6:5b:66:c3:66:d6:4e:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=d8651410-6bd0-4cdf-9abc-f8d901b80115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:91:59:7d:87:51:d2:72:54:e6:69:a1:19:55:
                    f0:00:e1:9e:6e:5f:39:b8:bd:c5:5b:cf:a1:f3:2d:
                    80:8a:72:13:bc:74:9c:c1:3b:2c:54:3a:18:72:0a:
                    31:f7:a7:bf:83:34:f7:a4:bc:2b:37:2e:ca:d0:ad:
                    28:d5:3c:f9:02:8c:4b:ec:07:4c:75:a6:65:68:da:
                    5a:a9:6b:3a:62:7c:b9:cf:ce:78:49:c1:b5:86:5a:
                    e9:dc:33:38:b4:f5:77:44:4a:58:f8:9d:0a:3c:da:
                    74:0d:19:b1:db:01:d4:78:9b:7a:e5:33:1e:34:6d:
                    ed:f7:42:a8:df:2a:75:f8:03:67:6f:06:bd:f3:6e:
                    1d:e7:79:dc:31:1f:b6:c4:06:5e:ec:c2:f8:b8:30:
                    f2:6f:be:b0:31:27:e3:aa:7a:8d:9d:f6:6d:4b:b9:
                    1e:b5:c5:b8:86:8d:ab:4b:56:58:fb:97:58:bc:b9:
                    5b:bf:1d:3a:03:29:e9:b4:c6:a1:a7:81:c4:32:87:
                    09:ad:71:fa:99:0d:93:26:11:e2:50:75:a8:52:ec:
                    6e:31:2a:04:3f:32:81:66:ea:d1:c8:2f:5b:99:98:
                    95:eb:59:24:99:e6:5a:f7:24:b6:3c:93:89:56:a4:
                    b5:e2:bb:19:2c:69:3a:72:06:56:82:ba:74:91:ea:
                    68:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AB:B0:19:2E:DF:A3:BB:91:CA:19:22:10:24:79:6B:49:95:B2:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/ee116b9b-3843-3020-b1f5-a01cdadea43f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.crl

            X509v3 Authority Key Identifier:
                keyid:DB:4C:BE:6E:B3:E7:74:A6:66:DB:BF:8D:07:AD:66:A3:D3:67:D4:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb2a:c0::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:a2:fb:07:c3:2e:03:0b:8f:e7:fd:a5:a7:ed:6b:77:b6:a7:
         1b:98:60:56:05:79:eb:a6:92:e6:8d:8d:c6:25:85:de:5c:15:
         5f:b9:f5:42:29:38:08:f1:94:b7:27:41:08:59:96:3c:be:5f:
         14:0a:0c:29:e9:a6:2c:a6:24:85:50:f1:4c:8e:76:ce:96:0a:
         fd:b2:b0:d4:20:d0:8c:b3:17:7e:f7:ff:72:ed:eb:d7:21:0d:
         87:0e:3c:b2:d3:e6:65:f6:89:d1:08:83:98:1f:25:c6:6a:cf:
         61:bf:a3:1a:86:5c:06:50:81:85:1d:0a:fe:9a:06:97:f5:81:
         0d:8b:d6:ee:07:9c:f6:40:1d:51:93:ce:3e:b6:f9:b2:76:3b:
         63:1c:fe:ba:e4:d3:59:c0:c0:4f:e7:e7:25:9b:f4:a8:58:b8:
         79:f3:42:83:62:a6:b0:07:f1:69:eb:ce:4c:f0:9e:f2:fa:15:
         47:34:25:01:56:a7:3f:93:37:0c:d8:15:de:6d:ae:0f:e4:ac:
         d2:11:0a:01:13:d2:20:b0:4f:f4:5d:9f:db:80:49:62:6b:c2:
         3c:0f:d0:5a:aa:9b:45:4a:b1:dd:6b:a7:a5:7d:2f:ee:f0:28:
         20:1f:54:6b:b0:9b:78:df:7f:76:a5:75:11:81:1c:59:ac:92:
         d7:18:53:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:35:12 2024 by rpki-client on console-fra.rpki-client.org