Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/7ea1845e-735f-3299-8e6e-ffffcb0c3965.roa
File:                     7ea1845e-735f-3299-8e6e-ffffcb0c3965.roa (raw, json)
Hash identifier:          nvzq5C9YXDMcoOezcQDr/x9dFDnBwrnR9e9DNFTPMh8=
Subject key identifier:   7D:78:47:B9:DE:88:81:10:15:5F:90:D9:E0:F7:FD:19:D4:59:FA:61
Certificate issuer:       /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial:       010D0C9F43285844F2FFF7866E35D70B9797DE00
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/7ea1845e-735f-3299-8e6e-ffffcb0c3965.roa
Signing time:             Tue 20 Feb 2024 02:00:26 +0000
ROA not before:           Tue 20 Feb 2024 02:00:26 +0000
ROA not after:            Mon 20 May 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        2602:fdeb:38::/48 maxlen: 48
                          2602:fdeb:37::/48 maxlen: 48
                          2602:fdeb:23::/48 maxlen: 48
                          2602:fdeb:40::/48 maxlen: 48
                          2602:fdeb:39::/48 maxlen: 48
                          2602:fdeb:34::/48 maxlen: 48
                          2602:fdeb:36::/48 maxlen: 48
                          2602:fdeb:35::/48 maxlen: 48
                          2602:fdeb:21::/48 maxlen: 48
                          2602:fdeb:20::/48 maxlen: 48
                          2602:fdeb:24::/48 maxlen: 48
                          2602:fdeb:22::/48 maxlen: 48
                          2602:fdeb:30::/48 maxlen: 48
                          2602:fdeb:28::/48 maxlen: 48
                          2602:fdeb:27::/48 maxlen: 48
                          2602:fdeb:32::/48 maxlen: 48
                          2602:fdeb:25::/48 maxlen: 48
                          2602:fdeb:31::/48 maxlen: 48
                          2602:fdeb:29::/48 maxlen: 48
                          2602:fdeb:26::/48 maxlen: 48
                          2602:fdeb:33::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f2:ff:f7:86:6e:35:d7:0b:97:97:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
        Validity
            Not Before: Feb 20 02:00:26 2024 GMT
            Not After : May 20 01:00:26 2024 GMT
        Subject: CN=2d770952-b271-4b49-884d-0c3bb3faa1c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0a:fe:a7:63:e4:41:3c:0a:08:2d:96:4c:a4:
                    20:12:d5:06:82:4f:47:bf:91:f5:b7:cb:c7:63:77:
                    52:86:fa:53:98:3f:df:c1:ac:76:df:d5:3c:f2:06:
                    df:c9:dc:48:f5:20:82:8a:fc:b2:3a:e1:d7:ff:22:
                    af:af:43:50:b9:d2:4d:48:76:c7:56:8f:0e:7b:2f:
                    5e:b0:da:bd:33:88:18:b1:73:f4:ed:f7:c1:c4:b8:
                    8c:f1:6e:d9:3f:a4:91:ce:bd:49:b6:48:04:5a:24:
                    6d:80:7d:53:54:cb:95:cb:fa:5c:4f:e4:29:a8:51:
                    0d:c8:16:20:27:f1:a5:39:8d:67:f9:2d:4c:77:a1:
                    dd:0a:26:16:26:6e:19:47:14:71:58:cc:a5:50:c8:
                    8b:9e:b1:78:68:40:0c:8b:23:1d:b0:4b:c9:dc:31:
                    7d:a5:87:b7:6e:85:1f:2b:fe:4b:32:89:94:af:b7:
                    75:a3:7b:61:4c:a0:f5:2a:3a:bd:c6:f8:f8:e1:c7:
                    7e:1a:51:45:6b:c0:68:0e:59:ba:0f:5f:c5:9c:82:
                    4d:ed:28:5d:09:37:89:aa:c5:63:fe:70:67:fe:03:
                    c1:be:99:22:14:05:55:ed:cb:f6:ff:1c:0d:e3:d0:
                    1d:b3:99:50:e5:0b:d0:f7:cb:2e:fb:86:11:b7:88:
                    27:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:78:47:B9:DE:88:81:10:15:5F:90:D9:E0:F7:FD:19:D4:59:FA:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/7ea1845e-735f-3299-8e6e-ffffcb0c3965.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdeb:20::-2602:fdeb:29:ffff:ffff:ffff:ffff:ffff
                  2602:fdeb:30::-2602:fdeb:39:ffff:ffff:ffff:ffff:ffff
                  2602:fdeb:40::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:01:20:de:6b:1b:4f:18:5e:ba:86:43:8b:7e:98:b6:80:b9:
         9b:83:5c:d1:43:66:5f:92:82:c1:2d:a2:ef:21:e4:e3:04:bf:
         b2:0f:c5:22:2a:5e:49:4a:bc:22:86:bc:81:08:d4:b4:af:26:
         e5:a5:9d:9b:e4:c4:f4:fd:51:71:a5:6e:a4:2b:89:fd:71:f3:
         7c:07:f0:b6:3a:14:47:5b:4d:66:2f:22:07:b9:92:58:93:7e:
         4f:72:dd:ea:b8:18:43:56:40:be:5e:37:ec:c9:94:b8:47:0f:
         28:6e:8a:d2:9d:0d:0a:53:58:9e:80:fa:34:5e:0e:fd:e4:ee:
         a9:72:d6:e4:fc:c8:6c:12:18:a5:99:0c:ce:36:d2:12:a5:50:
         7c:34:a7:51:71:9b:a2:de:70:cf:b0:3f:94:3c:56:52:6f:58:
         1a:ba:b9:90:d3:c1:57:8c:f4:96:5e:e9:91:b2:29:48:5b:e1:
         52:19:26:94:58:ff:13:a9:b6:e8:5e:ae:26:1c:2d:65:d9:0e:
         6d:70:f3:3c:f8:5a:f5:a7:60:95:02:c5:5f:dd:50:8c:f9:73:
         30:27:81:54:94:2e:f1:9d:36:ee:ca:76:59:48:aa:31:a6:88:
         b0:05:8d:19:4e:7a:42:8d:6c:0d:f7:c5:6f:f8:cb:b7:b0:ce:
         24:80:40:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:35:48 2024 by rpki-client on console-fra.rpki-client.org