Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/20a12472-5a8f-34f9-93fe-5929eccc24c9.roa
File:                     20a12472-5a8f-34f9-93fe-5929eccc24c9.roa (raw, json)
Hash identifier:          +l3N6EVuxMzGPva5kNTKFQvM+/iM46y4QYzeGPGacSw=
Subject key identifier:   D1:65:FE:6A:2B:2C:B0:57:80:30:57:64:8C:5C:DE:EE:61:3B:FA:70
Certificate issuer:       /CN=d06d1174-4bf4-465b-9f0b-1091633e6717
Certificate serial:       010D0C9F43285845068AC81F30CC365179563800
Authority key identifier: F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/20a12472-5a8f-34f9-93fe-5929eccc24c9.roa
Signing time:             Tue 27 Feb 2024 02:00:26 +0000
ROA not before:           Tue 27 Feb 2024 02:00:26 +0000
ROA not after:            Mon 27 May 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        2602:fb00:1::/48 maxlen: 48
                          2602:fb00:4::/48 maxlen: 48
                          2602:fb00:3::/48 maxlen: 48
                          2602:fb00:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:06:8a:c8:1f:30:cc:36:51:79:56:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d06d1174-4bf4-465b-9f0b-1091633e6717
        Validity
            Not Before: Feb 27 02:00:26 2024 GMT
            Not After : May 27 01:00:26 2024 GMT
        Subject: CN=7b11dc1b-badd-4db9-bd78-20d45bdb1b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5f:6a:c5:12:b3:4b:c3:05:25:1d:9c:4b:c7:
                    3c:2d:6e:ed:90:ed:18:2e:f0:f7:c7:24:fc:57:b9:
                    27:1e:ce:0f:6d:0f:44:b6:92:01:cd:c7:36:b7:80:
                    c4:5f:da:3c:e9:75:6f:94:55:76:97:3e:c5:18:91:
                    1f:63:0b:42:50:d6:d6:e0:e2:d5:0e:54:d1:77:57:
                    d9:b3:1b:7b:40:2a:2b:eb:3a:44:23:43:f7:dd:69:
                    4b:7e:a7:96:d8:cd:3a:bf:c9:aa:76:09:97:a0:34:
                    64:7b:7d:5b:ea:3a:87:55:eb:84:30:97:2c:2e:3e:
                    cc:f4:24:65:94:b1:ea:9e:3c:0f:18:70:9e:ee:50:
                    a0:4b:44:d2:ae:81:4d:fc:ae:1b:09:ba:b1:4a:d1:
                    98:8f:21:0e:28:81:c9:06:00:70:59:bd:81:03:ad:
                    8a:36:90:4c:68:e8:de:33:72:2b:d0:37:68:f2:11:
                    c2:cb:09:f0:9d:7e:fb:21:70:58:b5:bf:4c:2d:e2:
                    62:7b:74:24:74:a5:bd:a0:2c:3f:0e:a5:43:5c:48:
                    53:8b:f8:0b:47:e3:d1:da:75:31:a7:c9:32:5e:66:
                    21:52:98:ec:53:cc:c5:71:bd:85:3d:d4:7b:df:ce:
                    c5:77:30:22:4b:84:1b:ab:52:e9:7a:03:65:16:f3:
                    3c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:65:FE:6A:2B:2C:B0:57:80:30:57:64:8C:5C:DE:EE:61:3B:FA:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/20a12472-5a8f-34f9-93fe-5929eccc24c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl

            X509v3 Authority Key Identifier:
                keyid:F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb00:1::-2602:fb00:4:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:51:2a:f3:91:ff:5b:54:2d:9c:ba:72:8b:bb:1f:8e:55:4e:
         57:dc:cd:bf:63:b6:83:a0:11:6c:c5:9e:ab:ee:62:e2:de:41:
         6b:a9:b8:2a:1a:2f:51:90:6f:1d:aa:11:20:ad:e6:65:7a:99:
         00:fa:1b:64:f6:db:92:83:61:de:d6:ac:5a:0e:fc:a9:51:77:
         7d:4f:8c:3f:1e:8e:f8:6b:0f:a4:27:0d:a3:4c:28:50:83:c9:
         22:5e:a0:34:48:c3:fd:38:12:71:9f:86:d9:2a:5b:af:fa:49:
         48:ba:c9:3d:0b:38:b4:4b:cd:9e:e3:b9:a8:c4:94:59:14:f9:
         50:31:4e:33:74:53:c2:d3:96:00:b0:37:80:8d:d5:b2:62:ca:
         d6:4c:de:1d:26:03:dd:23:65:08:64:28:31:85:f5:ec:04:da:
         eb:8f:17:fc:15:d5:13:fe:9e:00:e6:46:49:0c:f4:32:d5:bc:
         e8:ba:4e:7c:80:46:ae:c3:f5:5b:00:4b:ef:e1:bd:02:9a:9f:
         4f:75:d1:0a:e6:59:20:1b:a7:2e:08:82:22:cd:a9:87:2d:a4:
         ca:4c:2b:19:6e:0d:f8:98:7e:e6:90:66:32:53:9c:bc:de:f0:
         1e:24:98:41:3b:bd:db:5b:6b:f6:fc:59:cd:7a:89:a3:a4:09:
         67:f6:a4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 08:29:06 2024 by rpki-client on console-ams.rpki-client.org