Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/69a66203-b255-3857-a2e6-be2e1bc67dae.roa
File:                     69a66203-b255-3857-a2e6-be2e1bc67dae.roa (raw, json)
Hash identifier:          q2seDLI2FRAEZMEBaU/1TnSTdopsxtXJH9z+fRYyFIY=
Subject key identifier:   00:1A:69:28:E3:8A:BC:D7:44:6B:21:1D:60:DF:73:F2:F1:2C:FA:AD
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285844FC2645322C3244E7C6022800
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/69a66203-b255-3857-a2e6-be2e1bc67dae.roa
Signing time:             Fri 23 Feb 2024 08:39:57 +0000
ROA not before:           Fri 23 Feb 2024 08:39:57 +0000
ROA not after:            Thu 23 May 2024 07:39:57 +0000
asID:                     399976
IP address blocks:        2602:80c:20e0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fc:26:45:32:2c:32:44:e7:c6:02:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Feb 23 08:39:57 2024 GMT
            Not After : May 23 07:39:57 2024 GMT
        Subject: CN=8e72dfc0-6718-4de3-8918-31503bd1f8da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ae:11:d2:89:94:16:b2:08:a7:c7:9b:f3:1b:
                    ed:8b:0a:ef:96:0c:fb:c9:7f:d1:73:b1:eb:63:d1:
                    59:95:4e:ad:8b:52:9d:03:ac:a5:7e:1c:1d:69:01:
                    c4:7e:87:72:2b:f4:2c:82:7c:5e:30:d0:ef:9d:71:
                    2a:09:84:03:a2:28:f4:0a:64:87:e0:3e:78:72:52:
                    46:6a:18:eb:92:ab:9b:f1:5f:1e:c8:86:8a:98:d3:
                    f4:dc:19:cb:b7:26:11:22:bb:57:7d:4b:4d:c6:d3:
                    73:ed:53:ac:7d:d6:3c:93:be:23:11:67:f4:94:a8:
                    d3:57:a8:e2:1a:92:b5:63:fe:83:4c:c2:ab:4a:f9:
                    2b:16:ef:bd:28:b8:2e:cf:4c:af:1f:7f:a4:ab:57:
                    7e:a9:f5:e0:32:fa:1f:52:9f:bb:f3:3d:8c:4c:35:
                    30:f5:76:c0:90:59:05:d2:8a:28:12:9a:44:12:71:
                    6d:73:c8:fd:58:64:95:3d:8d:8e:ad:2d:cd:70:1c:
                    64:3f:de:80:e1:bb:d4:ad:2b:8c:c4:1b:4c:15:00:
                    2e:47:8e:3b:f8:14:f0:9c:b5:ee:4b:06:ef:89:dc:
                    ff:47:51:66:92:48:a3:4b:23:e2:57:af:3a:f9:95:
                    87:ed:0a:ab:0e:0d:be:a8:ec:d7:59:9f:5d:72:1e:
                    9e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1A:69:28:E3:8A:BC:D7:44:6B:21:1D:60:DF:73:F2:F1:2C:FA:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/69a66203-b255-3857-a2e6-be2e1bc67dae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:fa:61:4e:d3:8d:40:4e:15:f7:b1:e7:4b:69:a1:73:12:b8:
         4c:3a:db:41:26:a5:9d:31:5e:19:cf:97:eb:79:df:fa:47:e3:
         43:f7:db:8d:e6:87:05:53:57:59:f9:14:48:3f:47:53:94:83:
         66:b1:cd:43:51:54:05:9c:6d:4e:44:9b:1d:38:72:84:4a:48:
         5b:e0:87:17:a9:37:5c:9e:9e:06:a8:36:af:e5:3c:33:38:0f:
         7f:e7:a7:d5:aa:1a:f3:7a:ad:f6:33:66:67:09:0a:44:52:c9:
         90:18:48:07:3f:f5:78:0b:2c:94:f0:cb:84:f5:eb:2b:05:cd:
         e4:d1:68:4c:5d:f6:26:37:5a:9a:c6:5d:e7:a0:62:ea:08:91:
         e6:5a:32:aa:7e:cd:49:54:85:01:69:72:3d:65:44:0d:ec:4d:
         8a:57:27:65:99:02:29:8c:0b:7e:4b:88:99:30:13:6f:ad:25:
         3d:eb:ca:b9:00:23:5c:76:5a:fd:30:a7:b0:a1:80:54:34:fd:
         64:ed:47:85:37:d6:9a:95:30:ed:90:07:9a:72:d4:ba:20:18:
         b3:3a:61:d2:ea:11:52:86:60:33:2b:be:e2:82:a2:f3:3e:ad:
         fb:cf:eb:57:7c:6c:ee:42:c0:5f:e9:3f:45:ad:3a:3f:78:94:
         5b:de:4b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:49:30 2024 by rpki-client on console-fra.rpki-client.org