Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/51db6d6f-70a1-3d89-ab6e-e556a5af1c06.roa
File:                     51db6d6f-70a1-3d89-ab6e-e556a5af1c06.roa (raw, json)
Hash identifier:          ZzM4Vt+YVIlmwsxihyY40s8kp5lS6w/OSm4x/n7HGks=
Subject key identifier:   FB:FE:C6:6A:CD:F8:2F:65:D1:3B:24:A3:30:42:8B:68:30:51:6F:1E
Certificate issuer:       /CN=d3a00337-0fdf-42e1-9343-424fd474da93
Certificate serial:       010D0C9F4328584561285BB96C282D86DC346D80
Authority key identifier: CB:37:3A:06:D0:D6:61:3B:C1:2E:E7:33:9E:8A:11:DA:AE:C9:55:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/51db6d6f-70a1-3d89-ab6e-e556a5af1c06.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     27398
IP address blocks:        2602:fed5::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/d3a00337-0fdf-42e1-9343-424fd474da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/d3a00337-0fdf-42e1-9343-424fd474da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:5b:b9:6c:28:2d:86:dc:34:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3a00337-0fdf-42e1-9343-424fd474da93
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=500a2e51-1e40-4a83-950e-aee7090f6cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b5:6e:29:91:62:d4:07:46:47:f5:29:16:3d:
                    19:94:91:f7:49:c5:6b:aa:69:e0:ab:0d:76:67:e4:
                    21:7a:ab:3f:74:d0:00:21:12:e0:4b:dd:10:ce:50:
                    6b:64:06:3e:a9:be:50:78:16:34:07:be:b4:c1:22:
                    fb:dd:f3:0f:fb:ec:e1:51:5f:cc:de:65:06:3d:fc:
                    0b:5a:1a:98:f7:ae:8c:d9:9c:ec:54:76:01:00:2a:
                    93:5f:f5:f9:20:20:0e:58:9e:da:e8:70:b3:dc:94:
                    01:fd:9a:b2:7e:3c:36:3c:aa:3e:fd:be:cb:f2:ee:
                    ae:23:2a:58:b4:eb:6c:79:b2:8a:63:c4:da:6b:a2:
                    79:86:cc:f5:bf:51:15:ee:a1:ef:85:64:99:1f:37:
                    a5:63:04:8c:d3:17:66:61:f5:42:a9:2b:63:4e:1f:
                    cf:b8:e0:56:ef:cf:48:9a:a6:c9:a3:ee:7c:83:d4:
                    44:2c:5d:bd:c6:67:df:19:67:4e:f4:fa:35:2a:ed:
                    0c:28:9f:eb:76:64:f4:60:9c:54:92:bf:bf:6b:a4:
                    1a:a3:23:29:a7:dd:60:b3:98:11:70:a2:bb:50:f3:
                    ee:01:aa:e4:4e:03:2c:d9:0e:83:6e:91:84:95:0a:
                    45:fb:c9:70:5e:93:fa:ba:b1:16:c4:e9:23:cb:cc:
                    53:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:FE:C6:6A:CD:F8:2F:65:D1:3B:24:A3:30:42:8B:68:30:51:6F:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/51db6d6f-70a1-3d89-ab6e-e556a5af1c06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/d3a00337-0fdf-42e1-9343-424fd474da93.crl

            X509v3 Authority Key Identifier:
                keyid:CB:37:3A:06:D0:D6:61:3B:C1:2E:E7:33:9E:8A:11:DA:AE:C9:55:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed5::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:37:d8:34:7e:60:1e:1f:9b:89:b0:b5:6d:63:40:28:c0:b9:
         f0:a7:f0:40:06:aa:e3:eb:f6:43:96:78:75:02:35:52:89:33:
         b0:e6:83:f2:d6:83:67:32:b0:b9:f1:e7:88:d3:ec:01:b2:1c:
         5c:6d:0b:91:93:09:a6:94:bd:01:dd:b8:8b:cb:b7:15:cc:1d:
         32:28:ac:28:21:7d:48:4b:81:d8:bf:6e:b3:9f:fa:78:79:47:
         01:85:87:ed:61:8e:d7:36:c9:37:ed:ef:f6:a5:13:9a:dd:a0:
         29:01:98:c6:1d:2d:70:0a:c9:53:c2:8a:cb:46:dc:2d:27:1c:
         79:8b:83:a0:93:8c:b2:8a:e4:a3:a3:d5:2e:a0:b7:6a:48:8a:
         81:3b:70:50:ef:1a:14:a2:8f:43:9d:95:d7:40:1a:84:55:7a:
         4c:83:93:fa:4c:bf:ac:25:27:87:8e:14:21:49:40:5c:0d:7d:
         6e:20:47:db:33:19:20:5e:4a:c8:78:20:1d:6e:d0:ed:55:77:
         7e:ad:d2:ed:4d:f5:b2:0d:4e:9a:3c:6a:30:60:e7:6b:cf:41:
         6f:ac:2a:21:84:3f:9f:05:c4:f8:55:5e:99:17:1b:26:41:da:
         45:5c:b8:9b:4f:5c:60:7e:1a:a5:2c:1e:76:ea:f1:30:dd:84:
         ff:c9:e3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 15:53:26 2024 by rpki-client on console-fra.rpki-client.org