Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d4a4ba4a-e9dc-3f10-b988-3fa6ecee18ff.roa
File:                     d4a4ba4a-e9dc-3f10-b988-3fa6ecee18ff.roa (raw, json)
Hash identifier:          72MKZ7HTum3ZTFHLHDMHYYjDjqnAhnU4QVW7zEP1XFU=
Subject key identifier:   0A:DF:11:70:5A:FF:1B:23:0C:FF:45:EE:E1:4B:A5:67:A6:77:13:87
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285845B64E0CB6BC73E9FFC32C3D40
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d4a4ba4a-e9dc-3f10-b988-3fa6ecee18ff.roa
Signing time:             Tue 30 Apr 2024 01:00:25 +0000
ROA not before:           Tue 30 Apr 2024 01:00:25 +0000
ROA not after:            Mon 29 Jul 2024 01:00:25 +0000
asID:                     399976
IP address blocks:        2602:80c:20c7::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b6:4e:0c:b6:bc:73:e9:ff:c3:2c:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Apr 30 01:00:25 2024 GMT
            Not After : Jul 29 01:00:25 2024 GMT
        Subject: CN=db6bf06b-2c6c-44d3-8e6b-235972bc0c20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f2:60:b8:48:45:8a:10:be:78:96:b2:77:73:
                    91:13:95:98:f6:40:87:36:46:40:b0:72:81:02:1f:
                    ed:02:19:79:5d:b6:b7:70:37:84:5c:d8:7a:ee:d7:
                    5e:98:ef:b7:87:cb:6a:41:46:0e:9c:88:1d:44:f0:
                    65:3f:18:1d:5b:5a:20:de:a9:10:0b:92:09:3b:bb:
                    ce:7d:a0:29:75:a7:a9:ed:4f:2c:14:4b:30:5e:fb:
                    6e:e8:54:b7:76:e9:f5:06:11:7f:c8:0a:b3:81:4c:
                    30:82:2d:dd:a3:45:08:e3:a6:52:07:a3:ae:f3:aa:
                    39:30:72:07:23:ec:a3:97:43:f8:a9:d0:e8:cd:5c:
                    cf:3f:52:f3:d1:7a:18:ed:8c:92:bf:97:12:be:fa:
                    13:11:fb:2b:5f:11:ff:50:3c:89:a1:c6:45:f6:7d:
                    cd:d3:61:7f:57:91:4b:8f:b8:c8:6c:69:00:91:86:
                    bf:69:75:f8:94:89:e5:8b:80:0f:d3:1a:94:24:6d:
                    d9:dd:62:70:61:54:30:dc:26:d6:f5:a6:1c:5e:77:
                    78:d4:ae:9a:94:34:b1:0a:3b:40:57:53:42:72:47:
                    7a:37:6b:53:f6:64:ce:bd:ba:07:73:36:de:c1:b5:
                    9d:e6:7f:19:7d:e9:fd:ce:b3:e4:12:80:dc:2e:ff:
                    ce:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DF:11:70:5A:FF:1B:23:0C:FF:45:EE:E1:4B:A5:67:A6:77:13:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d4a4ba4a-e9dc-3f10-b988-3fa6ecee18ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20c7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:3a:ea:e8:4a:96:a8:2f:ab:d7:e8:b8:40:b8:1b:e1:0f:cf:
         91:3c:ce:91:6c:46:fa:ef:40:32:ff:98:d4:1b:47:be:ad:7a:
         87:aa:4d:8a:83:ac:7d:d5:1d:93:9f:f6:23:ec:ba:84:6c:2b:
         c0:59:64:5a:bb:86:8e:16:3a:66:55:60:c8:7e:a8:7e:74:16:
         64:81:1f:7a:ed:80:1b:ed:15:05:92:58:77:d5:44:47:df:df:
         77:24:05:b6:10:b6:ba:e3:3a:10:ae:62:5d:fc:f8:c4:4c:6f:
         0d:66:36:22:e5:21:3e:b0:eb:8b:98:72:b4:1e:90:b1:2e:39:
         9d:db:c4:5b:40:ba:47:d2:30:ba:36:3f:bb:58:f6:60:6b:30:
         ba:d8:72:15:c0:ec:dd:b1:f6:bc:28:61:57:ac:bb:11:6d:04:
         07:d7:14:7d:f4:78:86:d6:5c:07:26:6e:e3:7a:ee:44:b5:6c:
         67:e5:0b:8b:d6:d8:be:48:2c:40:73:da:0d:a9:07:58:4a:1d:
         ad:7b:62:40:62:ba:c5:ec:98:44:a3:f2:8a:c7:90:1c:5a:35:
         fa:0f:e1:69:8e:4a:eb:ac:d1:31:22:80:09:5f:b4:a1:66:b7:
         69:3f:a8:14:37:f5:f7:5c:fa:e4:de:b0:9e:96:49:d7:e2:e8:
         5e:73:41:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 20:14:28 2024 by rpki-client on console-fra.rpki-client.org