Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6/08ee47d2-b37e-3af6-8b02-286bce4dae50.roa
File:                     08ee47d2-b37e-3af6-8b02-286bce4dae50.roa (raw, json)
Hash identifier:          7k0atmUD67lhxkdlX4n1PptOWZF+eG/tVKOJYXQgWeM=
Subject key identifier:   74:40:7B:47:B1:70:75:16:0C:49:D7:B6:4C:09:19:21:65:66:02:5C
Certificate issuer:       /CN=960472d8-4288-45f7-a19c-aaf7b143c8b6
Certificate serial:       010D0C9F432858457D132CC0E13CBF4FC98A6FBE
Authority key identifier: 46:94:09:DA:5D:F6:BF:1C:AE:7D:1B:91:A2:A4:29:F3:4A:FB:9F:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6/08ee47d2-b37e-3af6-8b02-286bce4dae50.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     397095
IP address blocks:        2602:fe34::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6/960472d8-4288-45f7-a19c-aaf7b143c8b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6/960472d8-4288-45f7-a19c-aaf7b143c8b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:2c:c0:e1:3c:bf:4f:c9:8a:6f:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=960472d8-4288-45f7-a19c-aaf7b143c8b6
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=db5ecdc6-df97-4fbd-a009-fae3d8a581e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:17:1c:3a:10:6f:66:53:db:8e:44:de:08:55:
                    21:d6:51:8d:c6:60:6b:09:fc:d9:49:a8:c7:03:45:
                    49:a1:11:3e:81:dd:0a:8a:7c:9f:31:c2:e4:75:c8:
                    92:bd:ee:fd:7a:54:72:92:7e:71:be:5d:cb:e6:f4:
                    57:b2:96:dc:6d:46:43:9c:53:9e:c6:18:b3:93:90:
                    d7:41:58:35:a0:44:4a:ae:04:ed:eb:4f:93:22:b4:
                    a5:9b:28:4a:ca:1d:89:a0:97:77:b8:4e:5c:61:be:
                    9f:01:45:04:d3:4c:5f:3f:90:4e:77:3b:45:d7:8b:
                    7a:42:2a:bd:60:a6:f2:44:91:f6:11:47:08:6d:25:
                    34:69:14:b6:3b:84:ce:27:19:01:9c:22:a5:da:d7:
                    86:4e:2e:fd:f6:7e:04:d1:a0:a8:a8:dc:3f:f7:2b:
                    a3:f7:cf:a7:77:2d:d3:0a:37:07:72:d0:34:4c:a7:
                    53:cb:ee:b0:76:e8:51:34:2a:2a:e1:ce:e2:12:1c:
                    fd:86:a9:19:2d:b3:59:a0:2f:06:eb:77:d0:41:a3:
                    3c:96:1a:c0:b9:5f:83:ef:8f:eb:0d:ef:10:0b:f2:
                    da:75:b6:39:76:b9:b6:35:27:82:dd:02:94:f9:3b:
                    d0:1f:78:9b:e2:67:1f:ba:02:ef:33:01:b2:24:a8:
                    5d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:40:7B:47:B1:70:75:16:0C:49:D7:B6:4C:09:19:21:65:66:02:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6/08ee47d2-b37e-3af6-8b02-286bce4dae50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6/960472d8-4288-45f7-a19c-aaf7b143c8b6.crl

            X509v3 Authority Key Identifier:
                keyid:46:94:09:DA:5D:F6:BF:1C:AE:7D:1B:91:A2:A4:29:F3:4A:FB:9F:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe34::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:53:9f:ab:df:51:15:2d:5d:91:6f:20:be:29:7b:7b:1a:f7:
         d8:f4:b7:2c:b8:06:fc:aa:71:fa:02:73:ce:19:36:0e:27:08:
         27:67:75:d0:1b:0b:80:f5:f9:1c:6e:3f:9d:f4:4f:6c:a5:9f:
         3c:06:23:a7:10:cb:35:03:fa:0c:a8:84:ba:7b:ce:b1:9c:0d:
         c7:50:6e:f2:b3:24:90:1e:56:0e:74:3b:b4:c2:47:ce:4d:42:
         24:03:c4:23:21:21:61:b9:bf:83:56:6b:30:2a:44:ed:20:74:
         43:83:eb:f1:5e:f1:6c:47:5b:3a:a5:82:c8:ab:0c:ca:8f:b1:
         e1:ea:39:e0:2c:e0:fe:2f:82:65:11:bf:f6:8d:a0:ce:59:d0:
         a9:22:30:b7:9c:35:bd:d9:11:93:7b:06:e4:96:df:0e:ee:0c:
         1d:42:d8:9a:63:53:c2:47:00:39:65:35:50:ee:88:a5:17:98:
         24:3c:c7:b5:c6:d3:02:f5:c4:8f:8e:fd:72:f7:5b:5b:d1:1e:
         73:2b:c4:41:78:25:15:e1:65:c3:d1:5b:6b:64:56:43:69:8a:
         91:89:b8:1d:5a:40:b9:00:a9:99:c6:4c:0d:69:15:15:50:87:
         9c:ba:18:d5:13:31:d3:da:8e:54:5e:19:5c:2f:e2:54:63:7f:
         92:72:17:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:41:42 2024 by rpki-client on console-fra.rpki-client.org