Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/0ebc0ba8-d251-3f18-a70e-1b6a0d6df8ec.roa
File:                     0ebc0ba8-d251-3f18-a70e-1b6a0d6df8ec.roa (raw, json)
Hash identifier:          YpbIDdOfsb10Aq3Q+vb17hBbdG5CFbIRNue1qGf6HVg=
Subject key identifier:   AC:82:08:F7:8C:01:BB:42:91:65:77:01:E5:FD:6E:04:0F:91:BC:1E
Certificate issuer:       /CN=a49381a3-9c6f-47d6-9c52-9fa07d2bf188
Certificate serial:       010D0C9F4328584518B04674DBAFF4D8A5AD3900
Authority key identifier: 62:52:61:E7:73:FA:00:DB:15:7A:A8:D5:BC:7A:72:B2:D4:80:7C:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/0ebc0ba8-d251-3f18-a70e-1b6a0d6df8ec.roa
Signing time:             Mon 04 Mar 2024 14:00:33 +0000
ROA not before:           Mon 04 Mar 2024 14:00:33 +0000
ROA not after:            Sun 02 Jun 2024 13:00:33 +0000
asID:                     32604
IP address blocks:        2602:fa9c:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:18:b0:46:74:db:af:f4:d8:a5:ad:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a49381a3-9c6f-47d6-9c52-9fa07d2bf188
        Validity
            Not Before: Mar  4 14:00:33 2024 GMT
            Not After : Jun  2 13:00:33 2024 GMT
        Subject: CN=ea5cff39-3bc4-4581-b941-59743da11e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:dd:8f:99:59:19:6b:ad:4c:aa:61:b8:2d:ad:
                    7b:f2:42:6d:5b:52:c6:43:c3:ed:e4:cf:e5:69:78:
                    f9:bb:82:41:32:92:ad:0e:b5:43:fc:22:61:15:b4:
                    14:17:e6:6b:08:3e:24:6e:5a:62:fa:fb:d5:29:76:
                    0c:6d:c3:5b:f8:df:c8:cb:64:a6:1c:11:e7:cf:31:
                    07:26:4b:ed:0a:7a:cf:ef:ec:97:82:4d:bc:5a:1e:
                    69:3f:13:f9:82:90:dc:a3:26:7b:0d:26:b4:b6:ff:
                    16:40:38:f7:d7:f4:a3:8b:03:44:c3:11:ad:46:93:
                    88:67:04:23:62:c9:c4:ef:ad:a8:32:89:72:41:b6:
                    2f:07:12:1c:06:5b:60:68:55:f2:7e:3e:9e:f0:11:
                    9c:4e:5c:d9:87:4b:24:81:d5:a4:ce:64:94:b8:19:
                    1e:13:c2:ed:a5:86:c3:ec:ba:40:36:45:99:7e:37:
                    f6:de:72:90:97:b2:de:b3:18:55:59:e9:80:f0:2b:
                    fb:6d:8b:bc:10:3f:05:63:ed:f3:7f:a6:3d:fd:94:
                    41:09:e2:21:45:8a:33:bf:e0:2d:da:ea:47:5b:99:
                    3e:8e:ad:ed:3c:76:e6:c4:76:9a:45:b0:ac:66:0a:
                    97:2d:d7:6d:2e:83:0a:cc:0d:b1:bf:71:44:1e:71:
                    f8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:82:08:F7:8C:01:BB:42:91:65:77:01:E5:FD:6E:04:0F:91:BC:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/0ebc0ba8-d251-3f18-a70e-1b6a0d6df8ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.crl

            X509v3 Authority Key Identifier:
                keyid:62:52:61:E7:73:FA:00:DB:15:7A:A8:D5:BC:7A:72:B2:D4:80:7C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9c:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:96:ed:1e:70:07:ba:1e:6c:7c:59:62:ce:64:85:57:28:54:
         7a:d0:7d:68:c0:69:5b:29:97:97:75:2a:7f:f3:36:d5:49:c3:
         3b:5e:7c:de:7d:30:2a:67:21:88:2b:ac:43:24:29:e2:65:b7:
         ca:94:79:83:a8:34:ab:78:07:f8:1b:c9:f1:dc:d6:10:cf:30:
         1c:e7:f2:de:11:6e:69:38:c9:4f:77:6d:aa:bc:53:ea:de:15:
         ca:48:84:2e:ed:7b:1e:13:d9:e3:d6:93:67:01:7e:98:56:dd:
         3a:a5:26:f0:90:2d:03:83:72:67:35:95:b5:17:ef:ef:82:82:
         e6:62:03:c7:cc:4f:6b:57:d8:e1:24:4b:fb:05:90:3e:ac:5d:
         a7:73:37:29:2e:f3:39:21:e0:db:5a:3b:57:c8:f3:ed:51:6e:
         a0:1f:b7:60:7d:99:1c:27:a8:88:42:0d:c6:bf:71:8d:68:62:
         6c:98:3f:4c:85:eb:c8:99:40:5f:70:1a:b8:a0:34:96:2e:e9:
         5d:7f:49:9c:cb:80:d5:b0:61:da:b2:39:01:46:0b:d4:72:95:
         39:c5:5d:67:af:bd:06:37:75:e9:c8:91:ee:27:8e:3c:48:b8:
         44:e6:eb:94:4d:7f:41:4f:c1:5e:5f:90:c4:70:b2:3c:57:67:
         f5:2a:da:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 18:14:37 2024 by rpki-client on console-fra.rpki-client.org