Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/df255fab-6f93-351b-ac9e-f84de68f0831.roa
File:                     df255fab-6f93-351b-ac9e-f84de68f0831.roa (raw, json)
Hash identifier:          1s6LVbHOyxFFnjW3M2DX5G5A9FuNMVDCnFbK38GzwS8=
Subject key identifier:   52:AD:5C:D7:0E:0D:26:35:8F:A6:2D:2F:8C:FD:48:2A:9D:C6:AE:07
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285845B4E8CB095F5D61963AF1C000
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/df255fab-6f93-351b-ac9e-f84de68f0831.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     399976
IP address blocks:        2602:80c:2040::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:cb:09:5f:5d:61:96:3a:f1:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=ab0cb654-3fc7-48a1-95c1-c9413deef36f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1b:c8:17:cf:89:b8:42:9e:1d:d6:36:d6:b8:
                    93:c6:44:b7:07:01:37:10:d2:a5:82:af:1b:4b:dc:
                    9c:e5:26:8f:a1:c9:5d:de:62:f4:2c:89:68:f3:88:
                    4a:fa:de:6d:be:b1:1d:7e:6d:56:02:9b:bc:00:29:
                    da:0a:1c:2d:cd:fb:63:03:b6:03:46:4a:7b:1b:34:
                    ce:12:a4:ef:19:08:0a:31:4b:28:9e:d5:8c:8a:f3:
                    b5:38:c1:96:4d:26:df:3a:46:40:57:53:b1:fb:3c:
                    73:b9:e5:39:9f:64:98:b9:98:c6:b4:e3:4f:c8:d8:
                    00:8b:4c:ce:d3:93:a4:ad:ee:b4:56:38:a9:a6:b3:
                    15:b6:94:8f:fa:62:fc:10:2a:af:a8:d5:b0:21:1e:
                    bb:90:9c:1a:fd:77:80:72:1a:61:e7:78:3e:53:6f:
                    11:4c:26:38:c1:11:7d:e0:b9:8f:51:b4:e6:a9:1b:
                    40:2e:80:cc:a7:ff:2d:73:cf:dc:a9:ea:9e:19:6c:
                    43:01:8d:ce:35:54:b7:20:cb:69:f8:71:b7:5c:37:
                    a0:c2:ad:c9:06:07:c5:d8:3d:74:73:64:b0:2b:7d:
                    cb:e0:c9:ce:7d:8f:a3:ed:e9:7c:d7:a8:79:ce:ff:
                    42:6e:41:0f:e8:6d:c7:35:86:62:0d:4e:3f:82:3a:
                    f6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AD:5C:D7:0E:0D:26:35:8F:A6:2D:2F:8C:FD:48:2A:9D:C6:AE:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/df255fab-6f93-351b-ac9e-f84de68f0831.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2040::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:45:6b:10:74:e5:f9:14:31:aa:80:11:e5:59:7b:39:17:a3:
         43:dd:c0:21:b4:a9:3b:75:5a:6e:32:78:3b:6f:26:ed:c5:81:
         41:39:2f:bd:ea:f3:90:84:29:77:19:58:ae:7c:7d:9a:b7:f0:
         aa:b4:37:7d:04:11:6a:ab:d8:03:01:b9:50:d2:8e:20:aa:9e:
         ae:26:56:e0:af:59:56:f0:f0:04:d3:5e:da:ad:2b:e0:30:92:
         fb:99:27:98:61:bb:b1:58:b8:46:ae:9b:25:32:f2:33:4f:39:
         ce:09:fc:8c:ea:d9:ee:26:b8:9b:3a:cf:48:e2:a7:56:cc:6b:
         e3:9b:92:1b:09:5d:8e:ca:b7:42:95:fe:ae:bd:0b:cf:d2:54:
         8d:d9:41:70:e0:45:d2:95:7b:36:fa:04:65:75:b9:a5:5f:ec:
         d5:0a:ec:77:98:a1:73:a1:4b:ec:b7:63:72:0e:44:fc:ab:9f:
         b7:8e:07:23:b4:bc:60:d8:e6:22:a3:c3:75:12:ae:2e:7d:6e:
         56:ae:76:5d:71:23:51:74:36:54:bd:3a:7f:42:30:8a:96:a7:
         a1:4d:15:f4:6d:05:88:6f:32:09:93:47:ca:ca:60:17:96:a5:
         74:e7:c6:d5:2a:c7:0f:a9:e0:4e:66:7f:97:3c:82:8d:a7:f6:
         d8:3b:35:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:03:06 2024 by rpki-client on console-ams.rpki-client.org