Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/2178ac25-e308-3810-99cc-10f24135d13d.roa
File:                     2178ac25-e308-3810-99cc-10f24135d13d.roa (raw, json)
Hash identifier:          0XR+v1yfUNJ5XUfcNmKbCNactGccb6Nn4niApI8HM74=
Subject key identifier:   01:95:D4:B0:5D:9E:5A:BB:89:50:B8:0F:A5:77:40:4D:0C:34:B5:51
Certificate issuer:       /CN=e66a6121-7784-4ce4-af34-0e56530ce3c1
Certificate serial:       010D0C9F43285845A9BE07DDA1E0F3F1075C9760
Authority key identifier: 3A:2F:CF:39:C8:82:0B:07:83:25:65:3A:5A:10:56:03:74:07:FF:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/2178ac25-e308-3810-99cc-10f24135d13d.roa
Signing time:             Thu 25 Apr 2024 13:00:33 +0000
ROA not before:           Thu 25 Apr 2024 13:00:33 +0000
ROA not after:            Wed 24 Jul 2024 13:00:33 +0000
asID:                     16970
IP address blocks:        2602:800:1000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:be:07:dd:a1:e0:f3:f1:07:5c:97:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e66a6121-7784-4ce4-af34-0e56530ce3c1
        Validity
            Not Before: Apr 25 13:00:33 2024 GMT
            Not After : Jul 24 13:00:33 2024 GMT
        Subject: CN=e02b1db4-cd18-4862-962a-139ec7ebec02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:43:f2:98:9a:67:21:20:32:11:48:da:fb:c8:
                    92:f4:0d:e3:e8:e4:45:5e:94:f1:8c:6f:90:9b:9a:
                    02:c3:45:38:8f:6f:23:49:16:cf:33:a4:12:56:96:
                    7d:45:70:b8:74:64:46:df:31:d3:9a:b2:f5:9d:9f:
                    85:50:c0:3a:e3:7a:b8:d2:39:17:8e:ec:a7:cc:2c:
                    cb:27:2f:be:a7:c2:a0:45:f3:58:1e:0f:1a:4c:e0:
                    d3:a1:91:c7:e9:ad:01:f8:e5:b8:e0:39:73:db:b9:
                    a9:49:b7:1f:34:d6:ab:08:0f:47:51:fd:5e:38:91:
                    47:9d:2c:66:59:e7:d5:40:d1:c8:5f:f3:6f:d8:10:
                    fe:55:9b:86:fc:ec:9f:8a:45:97:72:ac:72:59:c1:
                    ab:14:a1:f6:17:c2:76:c1:31:c1:f2:bf:82:b3:e1:
                    2c:15:d4:88:cd:63:17:d7:f2:e9:21:71:69:af:c5:
                    55:d9:e9:9e:21:50:1d:d4:26:4b:6b:86:fb:f7:2b:
                    0b:10:26:47:f4:54:37:3e:f9:c7:14:5c:92:06:22:
                    1d:22:f3:07:09:bf:96:ef:b7:eb:3a:ff:5a:7d:8e:
                    ee:2d:8e:b8:9d:eb:35:5f:98:e1:5c:cd:42:2e:e9:
                    62:eb:df:01:f3:54:44:2e:e0:6a:70:e0:8c:8b:03:
                    49:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:95:D4:B0:5D:9E:5A:BB:89:50:B8:0F:A5:77:40:4D:0C:34:B5:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/2178ac25-e308-3810-99cc-10f24135d13d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.crl

            X509v3 Authority Key Identifier:
                keyid:3A:2F:CF:39:C8:82:0B:07:83:25:65:3A:5A:10:56:03:74:07:FF:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:800:1000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:fa:e3:89:0d:de:33:a8:d2:7e:c5:b8:cf:4a:ab:41:36:43:
         6b:27:06:db:b1:79:bd:aa:ba:ad:6c:ea:3b:73:66:5b:51:b0:
         0c:ee:9e:4e:67:2b:ca:8e:e8:25:6b:58:2b:11:33:36:c4:c7:
         6f:1d:57:c7:7a:92:e7:bc:e8:5a:ef:c8:b2:2f:98:e9:b2:86:
         8d:4d:fe:36:c5:fc:ec:16:26:40:89:8b:25:4b:30:15:21:8e:
         f1:a2:0f:90:87:89:68:30:75:2b:98:32:05:2b:60:6b:8c:c3:
         1a:64:6b:67:22:c7:92:3d:98:23:57:96:65:79:28:de:f3:ee:
         49:33:ee:e3:a3:43:e8:4d:b7:01:57:ba:ef:bc:6f:2c:dc:10:
         7a:74:df:52:0c:f5:c8:59:b6:30:7d:88:5d:14:16:6c:c2:7b:
         11:72:84:e2:0c:d4:61:25:3d:74:a4:98:46:4a:14:32:b4:c7:
         04:7d:d3:a1:d7:ae:51:5a:21:d7:4d:5c:7f:4d:07:e1:54:7b:
         3b:ea:d6:c9:5a:57:01:70:7f:a4:4d:43:47:98:c2:e0:ff:eb:
         32:88:57:98:ba:03:f6:f1:63:16:c9:47:c0:ca:f4:71:17:64:
         dd:5d:0b:3c:2a:02:25:9e:b4:06:db:5f:33:cc:d6:27:84:c6:
         37:4a:83:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:25:43 2024 by rpki-client on console-ams.rpki-client.org