Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/f3cf8162-892c-3743-b7e3-d9b8e0503be0.roa
File:                     f3cf8162-892c-3743-b7e3-d9b8e0503be0.roa (raw, json)
Hash identifier:          JYHFR1ugOl/NVWrntUVtRMTc9C6xdvBjr4BgayjNiv8=
Subject key identifier:   01:D7:83:19:EA:B5:60:DF:ED:F0:E1:04:2E:38:41:27:8C:6C:52:CD
Certificate issuer:       /CN=f8838580-1598-45e5-8353-b551ae78b110
Certificate serial:       010D0C9F432858457A48725071927AE0503A09C0
Authority key identifier: DE:86:FB:F2:FD:F0:F5:78:BE:83:FB:65:0F:14:BB:E7:FE:75:7C:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/f3cf8162-892c-3743-b7e3-d9b8e0503be0.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        2602:808:a000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/f8838580-1598-45e5-8353-b551ae78b110.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/f8838580-1598-45e5-8353-b551ae78b110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:72:50:71:92:7a:e0:50:3a:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8838580-1598-45e5-8353-b551ae78b110
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=a0e8e070-726f-459f-94d9-47b5c50d1eea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:68:d6:9f:bc:43:99:19:39:6b:72:eb:02:5d:
                    88:96:26:a2:d1:52:7b:30:02:36:4f:d5:1c:4a:2c:
                    18:b2:83:eb:50:6c:65:0d:e3:6f:ee:e3:b1:eb:e6:
                    79:7b:b1:53:c1:84:19:31:6d:4c:bf:a0:15:ab:a0:
                    8a:9e:a9:8b:b3:5f:22:82:fe:05:d6:0c:a0:db:23:
                    9c:8a:03:f5:c9:4b:92:4c:9a:d8:8b:c9:fd:d2:74:
                    24:db:19:7d:0b:6a:da:06:dc:3f:3c:4a:3a:45:d0:
                    56:ab:05:30:46:e8:e4:96:81:2a:51:22:7c:7c:7d:
                    f5:ac:d0:e3:c9:39:24:a5:32:6a:a2:f8:33:4d:b7:
                    6b:24:0f:7a:95:7e:e1:29:66:54:51:33:9f:60:9e:
                    88:a0:03:9b:a4:61:1f:80:eb:ef:07:57:5a:c7:56:
                    17:18:04:cf:31:79:b3:67:a1:ad:2a:4f:4b:b3:cb:
                    4d:2c:42:4f:db:5e:e4:3f:f6:98:60:ce:9d:ed:c0:
                    bb:1f:0d:8f:56:62:64:16:40:0b:66:cd:25:ab:46:
                    b0:56:42:37:74:b7:fe:20:5f:95:a7:a1:33:95:c5:
                    22:b4:9e:91:78:96:f1:5d:6d:bd:e3:df:1d:ca:a0:
                    84:ad:9e:e0:35:ae:68:0b:7b:7f:05:e7:45:1b:07:
                    a7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D7:83:19:EA:B5:60:DF:ED:F0:E1:04:2E:38:41:27:8C:6C:52:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/f3cf8162-892c-3743-b7e3-d9b8e0503be0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/f8838580-1598-45e5-8353-b551ae78b110.crl

            X509v3 Authority Key Identifier:
                keyid:DE:86:FB:F2:FD:F0:F5:78:BE:83:FB:65:0F:14:BB:E7:FE:75:7C:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:808:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:27:c6:4e:64:e9:cb:01:9e:bd:f9:e9:64:8d:4e:34:36:37:
         18:62:9a:ab:47:12:c4:9d:e9:c8:fd:b8:71:b0:d9:0d:07:41:
         db:aa:6f:1d:1e:b2:e0:4c:be:67:b9:c1:bc:e7:7b:bd:48:c3:
         3e:4e:8f:a5:d0:8e:32:9b:52:1b:fd:9e:67:79:2f:dc:e0:6b:
         6d:80:06:8d:2f:ad:9a:20:76:02:dc:58:c0:bf:dc:a8:99:50:
         c5:6e:58:1b:32:c7:6f:8e:1e:7e:7a:33:58:2c:fb:3b:99:02:
         c4:cd:75:b2:95:c7:61:21:85:8c:53:cf:0a:ff:62:5d:5c:7f:
         4b:95:e7:05:09:62:6f:8f:ae:fb:fe:eb:0d:c0:8f:f0:75:a7:
         18:55:52:1b:7b:ad:50:25:e8:16:2d:d4:3d:57:6c:fb:57:12:
         a5:96:3a:aa:dc:b9:a5:15:eb:0e:8e:d1:08:31:91:6b:9d:72:
         f6:55:2f:3a:39:d8:c0:73:10:fa:1b:60:5a:ee:ac:0e:ba:ee:
         d2:bf:e4:39:29:e9:f7:1d:42:ce:66:23:cb:c5:ad:bf:91:94:
         68:be:ca:87:09:7a:93:6a:e8:55:fb:54:95:3e:93:82:65:b4:
         a7:8f:0c:6b:7e:0d:c0:c7:80:17:1a:34:4c:ad:f3:e3:ae:f2:
         ee:69:4e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:03:32 2024 by rpki-client on console-fra.rpki-client.org