Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/4cb1ad55-03b7-3181-b3cb-888516fb2f38.roa
File:                     4cb1ad55-03b7-3181-b3cb-888516fb2f38.roa (raw, json)
Hash identifier:          eYVaHbaoRIyyqrRZrHtUl0ktKrSEpmnAoEvQ9WumFxQ=
Subject key identifier:   AC:16:C9:4C:58:23:89:47:CD:95:11:99:6D:12:5C:B9:68:2B:90:BD
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285845B64E0BD9980D9CEAB38EE800
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/4cb1ad55-03b7-3181-b3cb-888516fb2f38.roa
Signing time:             Tue 30 Apr 2024 01:00:25 +0000
ROA not before:           Tue 30 Apr 2024 01:00:25 +0000
ROA not after:            Mon 29 Jul 2024 01:00:25 +0000
asID:                     399976
IP address blocks:        2602:80c:20bd::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b6:4e:0b:d9:98:0d:9c:ea:b3:8e:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Apr 30 01:00:25 2024 GMT
            Not After : Jul 29 01:00:25 2024 GMT
        Subject: CN=9f3628f3-c5ea-4cee-8f12-67701ef9861b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:bc:0c:f6:c4:c2:5a:f0:15:f8:3d:e6:f8:b8:
                    1c:b1:cb:f6:d4:60:0b:c0:15:17:06:15:ce:29:0f:
                    6a:75:a9:e9:83:68:de:94:c1:89:82:c3:98:95:d0:
                    b4:05:ab:5e:c7:71:02:4f:7d:68:12:35:8d:17:84:
                    29:60:e1:49:96:38:20:04:98:24:76:ea:49:a7:55:
                    d6:76:82:8c:60:16:d5:c3:11:c2:4a:d0:9e:73:f1:
                    cb:21:6e:fc:9b:93:7a:a3:74:42:91:3a:79:a1:71:
                    a6:a4:3a:be:40:f2:5d:b9:f4:e4:92:78:64:71:3e:
                    1c:43:aa:14:ad:6e:f3:d9:01:1f:f7:b6:e9:8b:e6:
                    03:b3:be:38:11:78:b9:1b:5c:16:74:29:15:a7:11:
                    5c:55:f9:fe:5b:c7:8a:28:03:11:f0:f9:bc:02:cd:
                    eb:cd:c1:64:7b:0c:bf:91:d8:c0:00:e9:2d:8d:64:
                    be:7b:16:ef:c7:80:f6:d7:4a:7d:f6:e0:80:26:42:
                    ec:5b:66:9c:91:6a:45:42:f0:d4:90:56:25:85:bc:
                    c0:31:9f:5c:30:4e:f2:43:c1:1a:c0:8c:ad:1b:31:
                    af:6c:5d:4f:3e:92:fc:9f:b2:bc:09:63:6f:19:67:
                    96:93:f2:c8:b3:c7:b2:88:ae:91:2e:51:03:39:13:
                    54:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:16:C9:4C:58:23:89:47:CD:95:11:99:6D:12:5C:B9:68:2B:90:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/4cb1ad55-03b7-3181-b3cb-888516fb2f38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:5a:ae:30:19:b7:5e:aa:85:6d:76:c9:73:40:75:10:99:75:
         94:5e:c5:25:19:f6:ed:f9:66:56:28:20:89:73:a7:bc:36:92:
         56:64:45:96:4d:73:07:08:f2:3a:80:7f:93:eb:fa:e3:66:bb:
         8a:4d:90:1c:18:fc:5c:07:85:dc:c8:3e:85:05:35:61:5d:40:
         92:8b:fb:4a:2b:d3:97:ba:b0:c0:a3:6a:c2:c3:51:ea:06:01:
         83:99:a8:aa:3c:b7:c6:70:17:d2:de:a6:d3:05:99:7c:da:42:
         84:3b:6d:b8:ad:01:a6:16:e4:34:f7:e8:4b:32:7d:e6:ed:e3:
         57:fd:20:48:24:dd:6f:11:aa:dc:52:88:31:04:c7:27:7d:e8:
         64:83:09:af:5c:79:5e:63:d3:7b:79:63:d8:38:70:3e:b6:a9:
         33:ab:67:ee:bf:c5:10:01:2f:4d:5c:70:25:fa:c4:0b:51:2d:
         5c:66:30:74:bf:68:bd:0a:8c:af:64:53:b6:a5:07:43:76:82:
         87:25:86:c6:74:b1:8f:14:97:c5:a5:8c:02:4a:f7:f8:3f:33:
         59:16:8c:b4:40:e4:52:b2:8f:30:e2:57:98:9d:e8:67:0a:58:
         42:aa:94:5c:8e:d8:7d:0b:cf:1a:88:21:c6:6b:e2:59:d6:6d:
         09:0a:fa:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:33:40 2024 by rpki-client on console-fra.rpki-client.org