Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b398d648-0ea3-4f7b-b160-eeb674498067/b520508b-4b94-3c8f-b301-36af03884dce.roa
File:                     b520508b-4b94-3c8f-b301-36af03884dce.roa (raw, json)
Hash identifier:          iKOWfN8C/RbTSAnKLCavICICOcpi+uEQs02bHXtqxDs=
Subject key identifier:   D9:1D:DD:4B:62:33:8D:00:88:AC:11:EA:E7:19:A3:EE:3D:F7:1B:2B
Certificate issuer:       /CN=b398d648-0ea3-4f7b-b160-eeb674498067
Certificate serial:       010D0C9F43285844FF901992915FC07BB6A2F180
Authority key identifier: 8F:87:33:9D:95:8B:5E:03:C2:1B:43:A8:12:1D:1A:F8:2A:CC:DB:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b398d648-0ea3-4f7b-b160-eeb674498067.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b398d648-0ea3-4f7b-b160-eeb674498067/b520508b-4b94-3c8f-b301-36af03884dce.roa
Signing time:             Sat 24 Feb 2024 14:00:31 +0000
ROA not before:           Sat 24 Feb 2024 14:00:31 +0000
ROA not after:            Fri 24 May 2024 13:00:31 +0000
asID:                     400642
IP address blocks:        2602:fb1a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b398d648-0ea3-4f7b-b160-eeb674498067/b398d648-0ea3-4f7b-b160-eeb674498067.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b398d648-0ea3-4f7b-b160-eeb674498067/b398d648-0ea3-4f7b-b160-eeb674498067.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b398d648-0ea3-4f7b-b160-eeb674498067.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ff:90:19:92:91:5f:c0:7b:b6:a2:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b398d648-0ea3-4f7b-b160-eeb674498067
        Validity
            Not Before: Feb 24 14:00:31 2024 GMT
            Not After : May 24 13:00:31 2024 GMT
        Subject: CN=a48bef86-016d-4d99-8bc7-ea64716317d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:31:4b:5a:12:55:cf:27:49:87:f7:81:f1:a3:
                    b2:01:46:95:ab:ac:4d:9c:97:ee:5e:ef:3d:e8:de:
                    75:09:43:58:cc:a9:aa:87:7f:20:13:19:35:61:63:
                    75:0d:41:1b:4b:cd:69:e2:79:04:b2:82:01:f5:73:
                    73:d3:c3:77:ee:f0:fe:23:c5:8f:0f:dd:63:0d:3c:
                    c5:4c:12:70:81:86:db:5d:73:17:fb:42:a2:2c:ac:
                    15:45:f6:7e:4c:00:62:4f:bb:c7:d7:95:c2:d1:21:
                    db:fb:da:3e:ec:7d:93:c6:23:35:e1:57:f5:76:08:
                    b1:9c:12:f0:ba:57:48:31:d7:13:38:1d:2a:46:f3:
                    ba:df:77:61:66:1e:9c:65:18:d7:2d:00:93:8d:f2:
                    6a:a4:1f:65:4d:43:ac:ab:6c:22:be:6b:54:dc:12:
                    23:15:eb:b0:bb:f1:cb:4b:4b:d8:b1:ad:a1:46:f4:
                    bf:20:27:af:bc:08:6c:e1:08:d6:43:80:ff:1c:7c:
                    af:7b:9b:c9:8e:58:6a:4a:db:67:45:57:6b:e2:01:
                    32:1d:9e:fa:b5:9f:d3:7b:67:a1:0b:dc:a9:8b:2e:
                    a9:70:9e:84:20:56:8b:59:c6:49:0e:c9:9f:fc:7a:
                    fa:ec:a7:6e:8e:ce:ea:94:65:7d:ec:cc:4e:ca:ab:
                    63:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:1D:DD:4B:62:33:8D:00:88:AC:11:EA:E7:19:A3:EE:3D:F7:1B:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b398d648-0ea3-4f7b-b160-eeb674498067/b520508b-4b94-3c8f-b301-36af03884dce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b398d648-0ea3-4f7b-b160-eeb674498067/b398d648-0ea3-4f7b-b160-eeb674498067.crl

            X509v3 Authority Key Identifier:
                keyid:8F:87:33:9D:95:8B:5E:03:C2:1B:43:A8:12:1D:1A:F8:2A:CC:DB:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b398d648-0ea3-4f7b-b160-eeb674498067.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb1a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:34:d9:26:c5:ef:22:04:2a:65:9c:6a:53:9e:c2:8c:91:36:
         38:18:5b:d4:ab:b8:e2:31:91:8f:9f:19:2a:20:9a:f3:b1:8e:
         3e:1e:32:c3:ca:26:58:c3:cc:6b:42:f3:e0:fa:a5:7c:fa:40:
         ff:43:37:95:92:28:6b:86:6a:0e:b0:c2:c6:71:2b:12:a4:94:
         7d:a6:1d:60:75:79:fa:5b:95:9b:39:d5:02:0e:d9:92:b0:de:
         de:6c:a7:41:ea:ae:b3:d5:d3:d6:af:09:6f:19:42:23:c7:bf:
         00:3c:f8:43:6a:f9:61:1d:be:d6:27:f3:5e:5b:58:95:19:af:
         a0:b0:d4:8f:97:c6:71:0a:21:92:14:f7:8e:12:c9:54:db:42:
         a4:c6:91:75:e6:72:43:55:38:f6:ba:8a:5e:d0:80:e5:cd:c0:
         81:ec:2d:ee:47:1e:67:6d:1d:b0:01:1c:17:27:4a:de:31:f5:
         c0:36:c6:f3:85:fb:65:d4:ab:9d:a0:3d:1a:24:74:7d:db:f9:
         95:e2:e5:76:97:75:3b:23:c8:3b:d6:c8:04:4a:4d:b9:65:df:
         f3:c9:a0:ee:68:1f:e1:fa:8a:e5:50:49:1b:53:a0:56:3d:75:
         93:40:cb:98:fa:24:47:c0:13:4f:ea:12:64:9c:36:64:9b:d8:
         5d:35:77:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 02:21:09 2024 by rpki-client on console-ams.rpki-client.org