Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/7a438846-02eb-3614-b230-c1844f37973a.roa
File:                     7a438846-02eb-3614-b230-c1844f37973a.roa (raw, json)
Hash identifier:          1yEd7MzHG7iXEYSzCOCXJfIWzBa4P/APPETC07Lo/BI=
Subject key identifier:   B3:C2:3E:A7:C0:B0:51:5D:E2:68:BD:44:B3:B1:1C:21:44:1B:F7:D3
Certificate issuer:       /CN=c7990a1d-1dec-4721-b9fc-a68ef45cb3c6
Certificate serial:       010D0C9F432858450E0B4AAA76F4B3470B44FA00
Authority key identifier: DD:02:37:57:A2:47:56:D3:27:16:ED:37:0E:C5:18:21:7E:F7:0E:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/7a438846-02eb-3614-b230-c1844f37973a.roa
Signing time:             Thu 29 Feb 2024 18:30:09 +0000
ROA not before:           Thu 29 Feb 2024 18:30:09 +0000
ROA not after:            Wed 29 May 2024 17:30:09 +0000
asID:                     31898
IP address blocks:        2602:f95b:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0e:0b:4a:aa:76:f4:b3:47:0b:44:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7990a1d-1dec-4721-b9fc-a68ef45cb3c6
        Validity
            Not Before: Feb 29 18:30:09 2024 GMT
            Not After : May 29 17:30:09 2024 GMT
        Subject: CN=2a0e43b2-e19b-4d10-bd37-88e04174f051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:31:2b:f1:e2:e2:46:ad:c1:e6:db:e4:f3:59:
                    ec:6a:c2:17:b1:8f:fd:18:db:98:bf:ea:f1:8a:93:
                    70:90:92:26:89:6e:92:82:9f:8f:ff:89:34:82:48:
                    a8:6f:d1:66:53:24:eb:a0:11:a7:c5:62:23:71:83:
                    d0:9e:7a:e4:74:0a:17:14:70:a8:00:09:14:3f:2a:
                    ac:fa:50:10:cc:89:f4:c5:8e:4e:26:4b:88:19:7f:
                    11:3c:e6:f7:20:07:62:88:99:f1:f0:ce:d8:f9:67:
                    a0:9b:3d:9a:2c:67:6b:4b:07:ca:29:1f:9c:2d:46:
                    61:f6:f1:2e:13:8f:15:06:4b:ef:fa:8a:8f:69:69:
                    85:59:23:cc:b0:66:32:b6:b1:a9:00:c8:21:29:e2:
                    2b:37:f9:f2:ab:69:52:ff:c8:45:97:c1:1b:73:ff:
                    2b:02:43:c4:45:62:52:d9:c1:6d:54:ee:09:bc:29:
                    af:f7:4c:e1:13:1b:ab:66:c6:de:19:6e:4d:69:27:
                    75:2c:23:55:e6:37:4d:f5:07:4c:b5:ac:79:a9:7f:
                    41:19:1c:80:be:a0:97:4e:f6:72:23:15:cb:c3:fa:
                    6f:24:1b:0d:0d:8c:7b:ba:bf:ce:78:df:90:8e:ae:
                    49:88:83:f3:08:f8:9b:ae:32:a5:3d:0a:1b:49:11:
                    e5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C2:3E:A7:C0:B0:51:5D:E2:68:BD:44:B3:B1:1C:21:44:1B:F7:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/7a438846-02eb-3614-b230-c1844f37973a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.crl

            X509v3 Authority Key Identifier:
                keyid:DD:02:37:57:A2:47:56:D3:27:16:ED:37:0E:C5:18:21:7E:F7:0E:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f95b:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:86:86:a8:b7:94:80:e9:3f:1d:74:7b:b7:46:12:1c:f4:21:
         6a:d7:ef:01:6b:53:d0:16:92:15:4e:ca:49:e9:f2:3c:79:86:
         01:ee:23:ad:f1:4c:4e:f7:4c:b0:9e:c6:b9:76:5c:d5:24:9a:
         d9:ed:dd:1c:fb:a7:92:1c:8e:d0:cb:ac:1f:0d:71:ed:9c:ce:
         fd:32:d0:9c:66:26:ce:65:77:48:87:3a:f4:fb:23:87:06:96:
         4f:ee:27:3d:a2:22:06:76:fc:a9:fb:09:43:0e:86:1b:b2:3d:
         65:87:12:e0:49:58:3f:dc:15:1c:f0:48:5e:84:86:c9:32:ae:
         97:c7:7e:77:18:c1:b7:ed:ae:0f:1b:80:1e:4b:f1:d0:43:26:
         fc:02:f5:cf:8f:6a:ec:1d:71:75:56:a4:2d:5a:b9:92:23:ec:
         f0:f7:f5:4e:25:c1:63:47:47:bb:39:84:88:b4:23:8e:44:1c:
         9e:c7:cb:d5:e0:9a:1d:d9:a0:66:44:52:14:2e:2d:d7:1b:bb:
         0e:d3:18:a5:1e:cb:a5:a6:1f:d5:2b:33:08:12:30:2b:86:5f:
         a0:4f:e1:8f:82:0e:38:87:36:f0:61:88:fc:3a:db:84:52:46:
         76:7e:8b:d1:eb:5e:eb:18:c2:b4:34:22:2b:23:af:65:45:92:
         13:53:46:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:50:37 2024 by rpki-client on console-ams.rpki-client.org