Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cad5f01e-99f4-43e5-a86b-ce2f2de6b347/1bafd282-165e-34a7-80bb-36b9e4ee27d9.roa
File:                     1bafd282-165e-34a7-80bb-36b9e4ee27d9.roa (raw, json)
Hash identifier:          Fm0xMQXhC1U/sio3m8CV1N92pSmbCCX8UXlpZz3Jmgk=
Subject key identifier:   39:03:81:FB:20:B8:EA:55:37:05:1A:05:E7:CB:99:47:90:B3:68:1A
Certificate issuer:       /CN=cad5f01e-99f4-43e5-a86b-ce2f2de6b347
Certificate serial:       010D0C9F432858458E570A94E1E85E08392C3180
Authority key identifier: 1D:1C:F4:6A:E4:8E:19:70:B2:6C:0C:6B:A2:83:27:71:BC:22:E1:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cad5f01e-99f4-43e5-a86b-ce2f2de6b347.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cad5f01e-99f4-43e5-a86b-ce2f2de6b347/1bafd282-165e-34a7-80bb-36b9e4ee27d9.roa
Signing time:             Mon 15 Apr 2024 17:26:14 +0000
ROA not before:           Mon 15 Apr 2024 17:26:14 +0000
ROA not after:            Sun 14 Jul 2024 17:26:14 +0000
asID:                     62564
IP address blocks:        2602:f953::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cad5f01e-99f4-43e5-a86b-ce2f2de6b347/cad5f01e-99f4-43e5-a86b-ce2f2de6b347.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cad5f01e-99f4-43e5-a86b-ce2f2de6b347/cad5f01e-99f4-43e5-a86b-ce2f2de6b347.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cad5f01e-99f4-43e5-a86b-ce2f2de6b347.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8e:57:0a:94:e1:e8:5e:08:39:2c:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cad5f01e-99f4-43e5-a86b-ce2f2de6b347
        Validity
            Not Before: Apr 15 17:26:14 2024 GMT
            Not After : Jul 14 17:26:14 2024 GMT
        Subject: CN=005bbe1c-8d49-4f92-baa7-ef7868ea5ba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a4:5c:d8:c0:53:e3:2b:35:61:e9:f4:6c:85:
                    19:4d:84:21:71:f5:6e:d3:4c:2e:6b:49:ac:69:d6:
                    8c:a3:c9:87:f8:29:a4:63:a3:07:33:eb:db:2f:3f:
                    f3:d2:3d:c0:3d:d6:29:09:77:93:25:52:30:64:ec:
                    03:bb:2b:54:b1:44:39:5b:a4:93:0d:b2:e3:b2:de:
                    02:35:9c:43:e8:03:61:62:54:52:e9:73:f1:a7:31:
                    0c:1e:1d:b4:5c:18:32:fc:cc:58:aa:42:e1:3c:7c:
                    e7:31:d9:ca:0f:fe:5c:1c:e4:39:48:03:ac:18:98:
                    21:ee:25:b1:8f:70:6d:de:26:16:ef:7a:75:9d:f7:
                    d7:66:56:eb:d1:b9:ca:28:b0:81:5a:8b:50:3c:2c:
                    23:56:19:14:d8:09:7d:7e:bb:6a:b5:8b:60:ef:45:
                    64:c0:1d:80:6a:80:2c:29:d9:83:09:3f:11:7d:a8:
                    c4:0d:f8:4e:7b:0f:43:e5:6a:3a:96:f3:e0:e1:16:
                    63:93:d3:fb:fc:98:a4:67:5e:5a:84:02:5d:14:0d:
                    75:2b:21:ea:4a:3b:38:05:a1:a0:82:fa:ad:83:14:
                    e8:59:4a:ca:93:67:e4:98:d8:96:ff:6c:17:7c:e9:
                    79:2e:81:46:b3:7c:c7:b9:99:aa:f2:14:74:c0:2c:
                    33:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:03:81:FB:20:B8:EA:55:37:05:1A:05:E7:CB:99:47:90:B3:68:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cad5f01e-99f4-43e5-a86b-ce2f2de6b347/1bafd282-165e-34a7-80bb-36b9e4ee27d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cad5f01e-99f4-43e5-a86b-ce2f2de6b347/cad5f01e-99f4-43e5-a86b-ce2f2de6b347.crl

            X509v3 Authority Key Identifier:
                keyid:1D:1C:F4:6A:E4:8E:19:70:B2:6C:0C:6B:A2:83:27:71:BC:22:E1:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cad5f01e-99f4-43e5-a86b-ce2f2de6b347.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f953::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:14:6f:3d:f8:3a:2f:33:a0:2f:30:05:da:79:cc:41:a1:11:
         1b:2b:67:06:2f:6f:e8:37:07:85:41:dd:28:ba:70:2a:f7:09:
         88:48:15:fa:c6:90:fd:10:cd:6f:7b:09:f9:36:60:f1:01:8a:
         1d:76:cb:9a:21:03:b4:8b:3d:9f:22:d3:9c:cd:7c:e3:e5:1d:
         46:6f:10:93:22:f9:d0:29:1e:21:45:08:cf:97:e8:2f:52:5d:
         3b:c3:8d:cf:a1:1f:f2:26:8d:be:7a:f8:8c:7d:e0:2f:12:1b:
         80:d2:28:aa:32:90:ff:7b:35:69:70:c3:cd:32:84:99:67:cf:
         1e:f2:de:e9:f3:1f:6a:f1:0a:56:34:02:41:9d:bc:03:1c:ca:
         66:34:15:5c:97:16:b4:3b:3f:fd:5d:d8:df:69:a3:87:d4:6e:
         82:10:06:06:19:0b:13:08:d7:47:36:d3:9e:98:81:b8:25:17:
         22:e5:6d:fe:f7:0c:01:a6:fe:e4:56:65:9c:17:e8:a3:02:a3:
         d6:55:b5:3f:48:9e:76:ca:1b:d6:15:67:5b:af:7c:1c:e0:03:
         8e:1c:2c:2c:31:7a:17:d3:54:b1:e2:be:2c:77:72:c0:06:8a:
         64:1c:33:80:2a:e4:f9:49:38:8c:49:3b:05:d7:60:41:fd:a3:
         69:e1:19:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:43:45 2024 by rpki-client on console-fra.rpki-client.org