Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d/b1b07de3-9575-3a2a-8956-8c7bce646a94.roa
File:                     b1b07de3-9575-3a2a-8956-8c7bce646a94.roa (raw, json)
Hash identifier:          ozXY5Rv5H04T7HjvojzM7hfaecbB5lg0N3HCxpgoiLY=
Subject key identifier:   CB:20:5A:17:30:6D:4C:28:C7:C2:11:1E:BC:AA:22:94:3B:C3:F4:7A
Certificate issuer:       /CN=d84b0325-0327-4cbf-bc76-4e79de05793d
Certificate serial:       010D0C9F432858451A158C1AA96609238F1DD100
Authority key identifier: AE:BD:82:3F:DD:27:A9:91:64:E3:69:C5:34:1D:25:CB:60:90:A3:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d/b1b07de3-9575-3a2a-8956-8c7bce646a94.roa
Signing time:             Tue 05 Mar 2024 02:00:26 +0000
ROA not before:           Tue 05 Mar 2024 02:00:26 +0000
ROA not after:            Mon 03 Jun 2024 01:00:26 +0000
asID:                     395044
IP address blocks:        2602:fac4::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d/d84b0325-0327-4cbf-bc76-4e79de05793d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d/d84b0325-0327-4cbf-bc76-4e79de05793d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1a:15:8c:1a:a9:66:09:23:8f:1d:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d84b0325-0327-4cbf-bc76-4e79de05793d
        Validity
            Not Before: Mar  5 02:00:26 2024 GMT
            Not After : Jun  3 01:00:26 2024 GMT
        Subject: CN=3f25ddca-811b-4b63-8031-e463a301aed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:be:51:47:e7:c1:29:49:1b:80:7a:f8:b5:31:
                    b3:40:d6:58:9f:dd:14:51:72:1f:33:6e:9b:ef:b0:
                    e4:dd:fc:e6:1e:08:d3:5c:7f:fa:56:cd:70:db:cb:
                    73:e4:d3:4f:e5:56:85:15:72:ed:99:2d:d5:cb:2b:
                    9f:d1:4b:73:03:e3:0c:84:a8:03:b6:df:0f:ef:ba:
                    fe:94:d5:9b:f2:77:34:d8:2b:c4:92:97:eb:03:2b:
                    e2:95:62:d1:68:b5:9c:73:22:b5:15:53:0e:d2:29:
                    87:aa:df:e2:8c:83:0c:72:49:2f:b3:35:36:ba:76:
                    b8:6f:ff:10:40:dc:d8:ad:19:20:6e:e9:0a:a6:77:
                    11:23:e9:e3:ef:3b:e5:65:e1:1c:f1:6a:98:63:0c:
                    0a:3d:45:82:1d:ca:15:a5:07:0a:5b:fe:0c:1f:88:
                    0a:21:25:f2:97:b5:e4:4b:46:a3:5a:72:cc:90:61:
                    5c:38:5d:7f:8f:0b:94:91:e0:13:ab:10:de:a2:9c:
                    c3:16:21:87:22:27:05:19:bd:c6:ec:58:b9:d1:17:
                    d8:28:65:99:f3:8e:79:55:d1:4d:b2:57:e9:24:31:
                    44:5f:cb:da:12:6a:62:ea:e6:1e:48:e4:68:a9:ae:
                    64:2a:66:1d:bd:4c:68:a8:80:09:bb:93:d0:e0:dd:
                    96:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:20:5A:17:30:6D:4C:28:C7:C2:11:1E:BC:AA:22:94:3B:C3:F4:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d/b1b07de3-9575-3a2a-8956-8c7bce646a94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d/d84b0325-0327-4cbf-bc76-4e79de05793d.crl

            X509v3 Authority Key Identifier:
                keyid:AE:BD:82:3F:DD:27:A9:91:64:E3:69:C5:34:1D:25:CB:60:90:A3:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:5a:5c:a8:50:e5:f9:95:86:8d:16:41:59:ef:5c:df:3e:99:
         f2:48:a8:2c:26:f8:da:0a:a1:fe:8e:92:f2:c5:9c:14:ba:a7:
         44:58:03:da:5f:bb:3d:9c:a5:9b:72:dc:42:ae:da:c7:db:90:
         1f:ab:7a:ea:37:56:57:32:89:e4:ab:1a:2d:5f:81:87:ef:c3:
         9b:74:ee:c0:0d:d1:bb:03:e3:40:98:65:8f:a2:00:2b:64:ce:
         09:af:bc:93:7e:50:b4:66:48:d5:2c:6e:70:8a:53:85:39:e7:
         6e:d0:4a:f7:4b:d9:d1:b5:a2:f4:d4:9d:d8:4a:c0:82:32:f4:
         b8:4c:2f:4b:96:2b:cb:4c:0e:05:85:63:5d:96:71:e0:c0:9a:
         d4:65:6b:ff:d8:81:fd:81:80:07:30:cb:13:c7:ed:d8:fc:77:
         9d:b3:06:4f:33:6c:ed:bf:ea:a1:c7:38:07:2c:8a:4a:cb:18:
         4c:6c:38:74:b0:a7:35:63:0b:2d:b6:f8:e1:b7:72:dd:e0:35:
         6e:bf:09:02:2b:9b:60:df:59:39:dc:f7:8c:98:f8:6d:4d:34:
         f0:45:c9:45:e8:3b:5a:e7:14:f7:f0:96:27:95:98:e9:5b:f9:
         ec:ee:d2:2e:bc:cd:fb:24:f3:7d:89:f6:78:ea:b4:a3:c7:3f:
         9b:5e:51:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:25 2024 by rpki-client on console-fra.rpki-client.org