Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/170203ae-0978-3157-8ec4-a8b053a84694.roa
File:                     170203ae-0978-3157-8ec4-a8b053a84694.roa (raw, json)
Hash identifier:          WPH9o8r4LuXofcvo4KQwOi21UThWbRN3nFRBzillswc=
Subject key identifier:   F7:77:8E:D2:35:F2:01:10:16:E9:8F:B0:47:E6:3A:CE:43:5A:86:08
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285845B4E8CC9487A78DB09D90B8A0
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/170203ae-0978-3157-8ec4-a8b053a84694.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     399976
IP address blocks:        2602:80c:2050::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:cc:94:87:a7:8d:b0:9d:90:b8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=8062411f-f88e-416c-8532-396106c8b29e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1d:10:17:28:51:8d:c7:16:2f:40:76:88:01:
                    f0:d2:2e:c8:93:e5:52:ee:2c:28:13:70:36:dd:80:
                    a5:13:05:e2:2c:2c:b5:02:fa:0b:f3:17:26:bd:e8:
                    75:7f:99:aa:69:48:2b:28:9b:b4:3f:1d:1e:a3:f2:
                    72:b5:c6:b1:ad:ae:aa:0b:2e:14:62:03:b5:43:c8:
                    6e:3d:0a:cd:32:4e:3e:76:2b:2c:db:73:37:49:36:
                    f4:bb:8e:6c:05:a7:a7:30:19:c9:f0:53:b5:b3:1e:
                    4b:09:d3:53:2e:37:9e:60:b7:7b:66:2a:6e:91:5b:
                    04:37:ad:ef:6d:f4:9c:e2:02:55:25:0b:ff:9a:07:
                    0a:08:e8:c4:2c:4f:87:5a:bd:a4:30:ec:78:15:e4:
                    45:ef:a1:a4:ac:6c:97:6b:4b:61:d1:e9:34:24:6c:
                    ff:55:d8:91:5a:cc:a0:8c:08:58:88:a3:3d:28:49:
                    49:fe:dc:fa:33:59:7c:13:05:7a:08:a8:24:98:42:
                    8d:f1:9d:71:65:fa:a0:34:4a:49:7c:1f:ca:62:d8:
                    eb:68:de:ad:60:b3:f9:d4:7f:84:d7:40:31:d3:bd:
                    57:36:d7:ea:4f:76:40:22:17:fe:8e:1d:9f:84:cd:
                    32:63:be:13:39:c6:2e:89:2d:23:d5:d3:92:b3:d3:
                    62:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:77:8E:D2:35:F2:01:10:16:E9:8F:B0:47:E6:3A:CE:43:5A:86:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/170203ae-0978-3157-8ec4-a8b053a84694.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2050::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:3e:4e:26:b0:8f:9b:43:3d:f3:9d:cb:65:85:c1:cc:8a:e6:
         1e:50:e0:5e:ce:9e:1b:fe:6f:af:25:ac:07:76:8c:ee:02:a1:
         d8:2c:5d:e4:b3:02:9d:f1:07:5b:cb:68:76:55:dd:25:fa:f4:
         1b:29:14:3c:b6:e4:ec:09:c7:f9:e9:29:90:e7:c7:ec:9d:3a:
         59:12:5b:80:f8:6f:94:43:29:61:da:97:b5:d8:1d:92:05:96:
         72:93:e8:eb:4b:cf:e2:63:6b:78:38:e4:ae:e5:75:48:f7:ae:
         70:c2:64:32:8f:95:34:3a:1d:5e:b8:df:16:fc:d3:f3:24:b5:
         46:fd:27:1c:f8:14:7f:e3:1f:b8:62:2f:5b:95:36:a2:12:46:
         7a:d2:5e:68:9f:cd:13:a7:e9:5b:62:45:6d:3c:af:9e:7c:e7:
         d1:56:9d:7d:ea:ea:46:37:2e:9d:e1:f1:73:5f:ed:8d:62:43:
         91:55:a7:4b:50:5e:70:0a:69:f0:8b:28:a4:23:e8:8f:aa:94:
         9c:7f:7e:29:04:97:83:03:83:ee:2d:13:d6:1f:5d:44:78:2e:
         9c:ef:63:66:a4:49:7a:9f:fd:9a:74:7e:5e:9c:94:28:16:f4:
         ee:eb:95:72:30:44:1a:1c:09:82:0a:39:d6:64:cb:09:b2:97:
         94:85:36:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:33:39 2024 by rpki-client on console-fra.rpki-client.org