Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/222d45e8-d3ff-3dd9-b2c0-fcbc6a53b3d0.roa
File:                     222d45e8-d3ff-3dd9-b2c0-fcbc6a53b3d0.roa (raw, json)
Hash identifier:          9ZDpW1R7hkV+MKkIyGAYCWhgfgK2oM7T3xW2tLZ2wGM=
Subject key identifier:   B1:DF:8E:45:F6:AF:37:1E:89:BE:18:3F:D9:10:66:8A:C7:CC:3D:7E
Certificate issuer:       /CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0
Certificate serial:       010D0C9F432858459A6347729E35F82FE296BC00
Authority key identifier: 15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/222d45e8-d3ff-3dd9-b2c0-fcbc6a53b3d0.roa
Signing time:             Sat 20 Apr 2024 01:00:26 +0000
ROA not before:           Sat 20 Apr 2024 01:00:26 +0000
ROA not after:            Fri 19 Jul 2024 01:00:26 +0000
asID:                     57164
IP address blocks:        2602:fcff:10::/45 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9a:63:47:72:9e:35:f8:2f:e2:96:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0
        Validity
            Not Before: Apr 20 01:00:26 2024 GMT
            Not After : Jul 19 01:00:26 2024 GMT
        Subject: CN=192a9e5a-018e-41af-9f78-409402eac9f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:52:b4:8a:9b:04:97:e1:c7:33:9e:19:45:1d:
                    cf:7b:cf:3d:15:84:3c:63:97:f8:5d:6c:4d:cc:7a:
                    71:3f:94:b0:a5:e9:cd:da:aa:f2:76:f9:63:9f:b4:
                    13:85:f9:d4:27:4f:70:e4:1a:34:8a:61:d5:5f:81:
                    3f:52:65:ac:a2:e4:4b:01:68:82:27:1a:e3:bf:8c:
                    e1:72:db:65:5f:d1:95:71:a9:47:79:bd:49:55:02:
                    ef:e7:72:b8:4a:42:a2:71:99:46:d9:46:de:5e:f3:
                    eb:64:7d:5e:80:4b:c8:94:cd:a0:da:dd:2d:ac:a8:
                    d4:c2:4d:d2:e6:92:65:cd:c5:b1:94:13:eb:cd:33:
                    12:bc:02:65:14:e5:b3:47:94:8f:7a:82:ee:6e:3d:
                    6d:43:15:40:99:d8:77:38:91:f8:13:f9:e9:15:48:
                    bd:45:76:62:bd:b2:09:c2:a9:54:4e:3f:dd:33:18:
                    72:5a:43:d7:b9:28:2e:6f:e8:73:f2:f9:58:ae:95:
                    e2:d2:96:fa:a5:09:10:d1:b7:86:7b:88:3c:36:4d:
                    cd:0d:e3:4f:2b:f9:31:ca:9e:df:48:05:97:6d:15:
                    e5:8b:68:e2:b0:98:13:2b:16:f4:22:8a:05:db:1d:
                    45:92:d2:46:7f:d4:64:e3:8e:d1:5c:0b:a7:2b:3d:
                    d9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:DF:8E:45:F6:AF:37:1E:89:BE:18:3F:D9:10:66:8A:C7:CC:3D:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/222d45e8-d3ff-3dd9-b2c0-fcbc6a53b3d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.crl

            X509v3 Authority Key Identifier:
                keyid:15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcff:10::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:32:5e:2a:f8:f7:4b:97:e6:6f:aa:25:0f:f5:36:57:d0:0e:
         f3:12:cf:f4:11:0d:8b:23:c0:1e:90:16:81:c9:3e:52:3c:7d:
         71:21:c9:98:27:5e:15:64:cf:9b:0c:4d:b3:5f:87:bd:df:72:
         28:26:79:24:0f:aa:0e:d0:e1:3a:b3:4c:1c:67:82:51:27:b9:
         6e:91:28:c3:71:5b:b0:43:fc:6f:b3:40:e8:78:9d:f1:f0:ed:
         be:b1:b8:d7:e0:de:83:1b:da:b3:dd:2b:11:1c:38:ad:99:c4:
         86:18:ad:24:71:5d:21:d4:64:f2:31:e5:b0:7c:b7:d6:f1:12:
         6a:f9:88:bc:90:9a:84:c2:59:ec:e0:99:1b:e6:be:f2:c5:e7:
         99:a2:a8:ba:91:2c:3f:85:62:1c:56:18:47:ba:be:84:d9:f5:
         68:88:1a:f9:0b:bf:12:cf:db:c8:29:47:b7:b7:78:98:c5:bd:
         59:4d:79:4a:9c:c0:8a:97:73:23:dd:96:be:f2:f5:9a:5b:e5:
         61:35:00:3b:f0:11:d8:68:1b:31:de:b3:47:ff:cd:94:f0:50:
         23:92:05:16:06:de:dc:e3:e9:a7:52:c6:23:35:47:a3:5c:28:
         4f:de:4a:6a:60:f5:3c:f0:e4:2c:e5:3e:3e:a0:19:75:10:6f:
         42:a6:05:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:41:43 2024 by rpki-client on console-fra.rpki-client.org