Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/293283ce-c8b2-3ca8-8fa3-ff57676a820d.roa
File:                     293283ce-c8b2-3ca8-8fa3-ff57676a820d.roa (raw, json)
Hash identifier:          7t+YlXyhcWUkTzGfALuqBWx2fTNWSu95Dlflyn/60+s=
Subject key identifier:   42:F4:70:FD:9E:A7:B5:94:2A:0F:41:E1:CC:4C:A3:33:00:93:C8:4D
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285845B4E8CB872254DA580B60E780
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/293283ce-c8b2-3ca8-8fa3-ff57676a820d.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     399976
IP address blocks:        2602:80c:2045::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:cb:87:22:54:da:58:0b:60:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=8aa94602-4b68-4da8-8653-63feeceebe9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f9:c4:d4:d0:b5:6b:f9:28:fe:6a:80:68:55:
                    49:75:36:68:d6:ad:ad:70:91:a2:6b:3f:6c:54:85:
                    a3:7d:f1:58:0a:2b:73:cf:a6:6f:d2:4c:04:8f:40:
                    6b:5e:dc:c2:c4:9f:39:5d:3c:2d:52:84:b9:7d:8b:
                    2a:07:8b:43:93:bb:85:7c:3e:45:53:e9:6f:5e:68:
                    bc:37:20:21:bc:26:c0:b1:ad:56:c8:72:df:ab:0f:
                    1b:70:83:45:10:43:8a:85:69:7e:64:9e:72:cd:b8:
                    75:8e:07:e6:ec:c7:2c:2d:f6:83:bd:9b:1c:79:f8:
                    08:11:33:64:a8:b1:08:98:61:90:d0:cc:4f:47:6c:
                    ed:55:3e:0b:57:61:08:26:79:18:ff:ea:26:c0:31:
                    31:3b:21:5e:e8:e1:79:fc:3a:43:b2:ac:91:89:ec:
                    12:7a:a3:07:1b:72:93:9d:a6:45:51:c7:cb:d5:df:
                    a5:c9:74:da:3e:2a:25:1f:9d:e5:97:17:b3:91:85:
                    a0:14:23:f3:96:3a:e9:a6:62:0c:ea:27:14:31:86:
                    8a:97:20:96:fe:20:60:53:4d:c6:0f:f5:3d:75:a6:
                    c3:1f:4a:1f:f4:2d:9b:0c:51:11:32:58:af:fa:46:
                    ae:d3:26:a1:84:18:77:23:a7:f4:f9:b5:e4:b9:cb:
                    b9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F4:70:FD:9E:A7:B5:94:2A:0F:41:E1:CC:4C:A3:33:00:93:C8:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/293283ce-c8b2-3ca8-8fa3-ff57676a820d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2045::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:65:ba:a7:64:4c:28:40:54:73:db:81:3d:c0:30:a9:dc:9b:
         33:21:b3:c0:4f:03:39:dc:6b:4d:fb:c5:e4:de:46:0d:ae:35:
         47:9c:42:b6:a8:c8:e0:98:d5:cc:a6:83:02:35:e9:6f:35:e2:
         85:69:15:39:7d:5c:f4:8e:72:cc:18:37:94:c2:d6:09:4b:80:
         86:a6:28:2b:f0:45:a9:ec:8c:69:19:b4:14:2c:38:16:15:fd:
         f5:50:7d:b8:fe:95:ae:11:c8:b1:64:63:0f:9b:26:4e:11:a6:
         3c:ba:ed:b6:8b:74:84:06:44:74:34:23:b1:5f:d6:c7:3c:ee:
         98:2a:ef:de:37:bd:e3:32:e6:71:e1:66:39:e3:27:ef:ba:e1:
         aa:fa:3c:85:aa:66:6c:27:75:c5:a8:5d:7c:6e:3b:b2:15:8d:
         b1:f1:2f:70:3c:59:e4:77:69:5f:42:b1:60:00:2b:c4:aa:fa:
         0f:f7:9d:bb:fc:ce:a0:3e:f2:62:c3:16:bd:1e:5a:37:5c:ac:
         92:2c:4a:dc:18:ad:42:c2:6c:3d:5c:87:8d:69:19:4c:b7:c7:
         24:f5:fb:f3:72:58:b7:75:ef:5d:d2:38:6a:a3:ce:dc:89:98:
         5c:20:2e:43:0e:4b:ea:51:78:42:7e:4f:38:2b:f2:af:be:98:
         32:d0:6d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:33:39 2024 by rpki-client on console-fra.rpki-client.org