Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/a0679dfd-78ee-3728-b6d4-7b3d95d28292.roa
File:                     a0679dfd-78ee-3728-b6d4-7b3d95d28292.roa (raw, json)
Hash identifier:          96Ns4d4zKFcZbuFXuicHpuM9RttkiIn3Op9fWmIky7w=
Subject key identifier:   79:27:D4:32:5C:80:67:27:F8:D6:52:7E:6E:D1:C3:17:F6:3F:A7:2A
Certificate issuer:       /CN=8c36a2b8-42c3-42fa-835e-49b2612cc29a
Certificate serial:       010D0C9F43285845410D4BE8895CBBF833B9C600
Authority key identifier: 8A:4B:04:14:87:83:45:20:69:D3:E3:19:20:AF:ED:0B:62:19:3B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/a0679dfd-78ee-3728-b6d4-7b3d95d28292.roa
Signing time:             Tue 19 Mar 2024 01:00:24 +0000
ROA not before:           Tue 19 Mar 2024 01:00:24 +0000
ROA not after:            Mon 17 Jun 2024 01:00:24 +0000
asID:                     948
IP address blocks:        2602:2cc::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:41:0d:4b:e8:89:5c:bb:f8:33:b9:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c36a2b8-42c3-42fa-835e-49b2612cc29a
        Validity
            Not Before: Mar 19 01:00:24 2024 GMT
            Not After : Jun 17 01:00:24 2024 GMT
        Subject: CN=f42f9b18-fc9f-4abc-8848-8b02e13e4b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9b:d7:83:2f:a5:dd:bf:a4:20:af:de:07:d9:
                    cf:63:e0:26:08:4e:86:a2:19:55:d9:9f:c1:14:a4:
                    c6:c8:4f:d1:a9:43:fe:41:1f:41:4c:60:f9:2d:5f:
                    9f:20:c3:db:c8:12:6a:2d:94:16:d6:79:7c:3b:e5:
                    9b:bb:9c:37:dd:b3:47:ae:48:7d:ee:10:05:d0:ec:
                    1c:6e:6b:e8:b5:24:4e:bd:d4:a9:f5:ef:50:53:26:
                    12:ed:42:91:fd:94:95:35:70:a6:f0:c0:71:12:52:
                    2c:0d:a2:04:d4:7b:7d:60:7f:3a:25:50:37:c0:39:
                    fa:73:8b:fb:16:29:bc:17:4d:19:6c:52:f1:a2:93:
                    07:a6:47:40:90:ae:8d:3d:f9:a5:50:f6:4c:9e:ef:
                    86:36:b9:07:8f:1e:51:d8:29:e4:59:d6:c7:94:2e:
                    d5:8c:b2:d1:cc:31:67:4d:a4:d2:f2:ef:b6:82:a2:
                    0a:d1:df:dc:d2:78:5b:25:3a:73:dc:60:32:52:cf:
                    2d:08:42:70:a2:14:84:6a:08:87:b5:33:0e:20:73:
                    7b:90:da:25:19:0d:49:17:40:bf:10:4c:1a:e4:5b:
                    1f:40:76:5a:a1:95:3e:93:b2:4d:c3:52:8b:31:d1:
                    0b:ef:17:aa:c2:17:30:41:2a:b9:8d:c7:61:9a:42:
                    f4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:27:D4:32:5C:80:67:27:F8:D6:52:7E:6E:D1:C3:17:F6:3F:A7:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/a0679dfd-78ee-3728-b6d4-7b3d95d28292.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.crl

            X509v3 Authority Key Identifier:
                keyid:8A:4B:04:14:87:83:45:20:69:D3:E3:19:20:AF:ED:0B:62:19:3B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2cc::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:9a:68:4c:30:b5:a1:7f:9d:f2:0a:3d:57:ad:a1:56:3a:b1:
         b5:96:de:08:1e:ed:3b:ce:6f:94:5a:e8:f8:bb:1f:21:65:b6:
         e6:22:82:09:42:cc:71:af:3c:66:c4:9b:84:38:2a:d2:06:a1:
         ea:48:52:20:8c:43:30:52:08:a2:9f:32:f1:d3:3e:02:f7:a8:
         6c:01:98:2e:99:68:95:ef:eb:5b:89:0a:61:a7:83:4d:70:e5:
         6f:d8:16:57:d6:e1:ca:68:82:26:64:db:47:47:c0:17:fd:35:
         92:37:22:48:b9:5c:35:1e:52:11:4c:6a:38:eb:fa:e5:fc:1c:
         3e:db:79:c5:93:7b:e2:2d:f7:b5:58:60:7c:db:13:8f:7b:85:
         df:88:e1:64:d8:22:58:7d:46:0b:30:bf:4d:9f:60:6b:18:f1:
         93:19:13:0d:66:08:a5:bd:3b:fd:0d:5f:51:c5:e4:48:03:af:
         bf:58:23:30:91:85:e0:b0:b0:78:db:a0:e5:73:4f:86:13:af:
         48:70:f7:ea:72:10:56:00:77:28:cb:e6:9e:b9:ef:53:23:f8:
         2d:68:11:d4:0b:b8:94:d5:40:5c:de:3f:8a:1b:a2:22:4a:24:
         86:bf:14:73:ec:43:c8:3b:28:30:72:53:70:83:62:0e:9b:08:
         2d:bb:f9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:40:42 2024 by rpki-client on console-ams.rpki-client.org