Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/168a62fb-6f1e-34bb-a531-a6c0ac28f6ad.roa
File:                     168a62fb-6f1e-34bb-a531-a6c0ac28f6ad.roa (raw, json)
Hash identifier:          FHiQQYtSGFx6tHTVlT7h12VC94amdyvpfIcTMGg2HJs=
Subject key identifier:   16:BA:49:BA:38:93:54:7A:B4:31:2E:B9:7E:72:59:34:27:9F:80:3A
Certificate issuer:       /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
Certificate serial:       010D0C9F43285845D238E18789BD23C3BDA36B00
Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/168a62fb-6f1e-34bb-a531-a6c0ac28f6ad.roa
Signing time:             Fri 10 May 2024 01:00:25 +0000
ROA not before:           Fri 10 May 2024 01:00:25 +0000
ROA not after:            Thu 08 Aug 2024 01:00:25 +0000
asID:                     53727
IP address blocks:        2602:f982:102::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d2:38:e1:87:89:bd:23:c3:bd:a3:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
        Validity
            Not Before: May 10 01:00:25 2024 GMT
            Not After : Aug  8 01:00:25 2024 GMT
        Subject: CN=a228b650-31e2-443e-8189-ba927bac1a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:57:e2:77:5b:06:56:09:e7:04:0a:9c:82:48:
                    30:d0:2e:02:57:f9:43:d2:83:ea:73:5a:c8:79:12:
                    3a:40:65:2a:ab:3f:44:11:54:61:32:ce:76:d2:f2:
                    37:40:48:6b:d9:b1:ba:c3:2f:ac:12:df:24:32:24:
                    c2:b3:12:c4:4f:0a:40:a7:f9:dd:3d:91:a1:8c:78:
                    c2:42:f8:21:59:87:c4:47:84:89:21:13:d1:52:49:
                    ed:83:5c:53:ed:74:1b:09:3d:9f:a5:ac:e8:4b:14:
                    c6:fd:6c:e3:15:df:dc:c5:36:e6:7a:d3:1e:2b:76:
                    68:a9:93:55:dd:28:40:42:60:6f:95:8d:85:ad:09:
                    30:fe:5a:7e:01:84:59:f2:24:c8:c4:64:d7:d2:1b:
                    f9:f6:f7:f2:65:e9:29:90:17:15:a6:f2:9b:ab:30:
                    56:9e:f5:34:7d:62:69:fa:b6:d6:28:ef:1b:5c:7a:
                    23:c6:d8:60:21:b2:40:82:c7:72:c7:48:5b:44:29:
                    c7:32:b3:34:12:87:97:71:0a:28:93:2c:55:53:54:
                    45:1b:d8:d2:17:76:89:9b:16:67:99:07:b4:ea:68:
                    cc:1d:ca:9b:f2:46:9f:a2:3e:85:2b:f6:eb:3e:74:
                    c8:3e:a4:ea:70:18:8c:cc:fb:eb:ad:d4:70:12:8c:
                    72:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BA:49:BA:38:93:54:7A:B4:31:2E:B9:7E:72:59:34:27:9F:80:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/168a62fb-6f1e-34bb-a531-a6c0ac28f6ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f982:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:5a:fc:c6:eb:5c:64:94:a9:da:e7:5b:82:5b:f3:dd:07:28:
         eb:14:82:5c:0e:5a:52:47:69:c7:46:e5:62:9b:90:ce:2d:f5:
         8b:57:50:82:2e:bc:05:24:ed:a5:54:68:2c:3b:47:d5:15:47:
         6d:8d:15:d6:e0:06:14:11:ab:68:b2:e9:ff:0d:88:01:70:50:
         1b:db:3f:bb:a4:9c:13:71:80:03:d1:34:cb:78:6a:3b:a3:42:
         36:fb:23:47:7e:18:02:7a:f9:2b:83:56:4b:c9:5d:c6:2b:08:
         1a:4e:44:12:f3:ca:88:e2:75:bb:60:f7:f7:e5:69:cb:9b:2f:
         80:5d:c6:2a:3c:92:ac:ee:0a:17:10:a0:a6:ee:83:94:33:7b:
         95:3b:ba:d3:bc:10:e5:b1:30:94:0d:b5:61:01:03:7d:43:c8:
         fc:b7:a6:14:9a:3d:12:c8:b7:7a:5e:b9:92:ba:5a:85:d1:77:
         b1:0b:dc:44:ce:3d:6e:66:6d:be:3d:36:3f:6a:8a:fd:af:8f:
         b4:ba:77:d4:36:db:b2:19:aa:fa:f6:32:fd:fd:2b:0b:07:a2:
         32:da:28:98:99:6b:96:e4:e8:e9:20:ec:8e:5d:e3:b8:e4:4f:
         4f:44:13:dc:c5:b5:7d:ea:c8:fb:38:4e:79:a0:14:bc:66:38:
         6d:05:81:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 23:39:25 2024 by rpki-client on console-fra.rpki-client.org