Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/2b564fbb-5489-3a5e-a3a8-b51618764307.roa
File:                     2b564fbb-5489-3a5e-a3a8-b51618764307.roa (raw, json)
Hash identifier:          FxnSVunChJRdeATx4eNhXgcTdsI1PcBsxTZD0pDDgz4=
Subject key identifier:   28:3B:E2:8D:F3:B6:BE:5A:BB:D4:86:6A:53:57:9F:8F:BE:A3:33:9B
Certificate issuer:       /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
Certificate serial:       010D0C9F43285845D503CE048A9D029B2B0D7800
Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/2b564fbb-5489-3a5e-a3a8-b51618764307.roa
Signing time:             Sat 11 May 2024 01:00:27 +0000
ROA not before:           Sat 11 May 2024 01:00:27 +0000
ROA not after:            Fri 09 Aug 2024 01:00:27 +0000
asID:                     26904
IP address blocks:        2602:fc15:20::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d5:03:ce:04:8a:9d:02:9b:2b:0d:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
        Validity
            Not Before: May 11 01:00:27 2024 GMT
            Not After : Aug  9 01:00:27 2024 GMT
        Subject: CN=ea7c802e-b63d-4e12-aa64-f7d7749f5bd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a8:a0:57:ad:cc:42:a5:31:a2:bc:b3:b5:61:
                    51:1f:3a:81:b2:04:c0:bf:10:3a:e4:04:d5:e2:54:
                    b3:74:ab:70:dd:73:00:0d:bb:31:e0:80:9a:cf:15:
                    8b:1d:46:2a:64:ed:03:6a:14:89:79:02:d1:69:da:
                    f4:d3:3b:f9:c0:b5:4d:c0:3d:d0:f8:10:52:1d:f7:
                    59:a6:84:4c:70:09:52:ea:9f:b6:c4:50:77:36:29:
                    3b:7c:7d:46:30:b6:66:4a:c2:b2:51:26:df:af:88:
                    4f:15:34:12:6a:c1:da:9d:a7:99:d5:79:77:4b:70:
                    22:8c:7c:cc:63:8a:a3:3a:e2:fb:c0:0a:b3:35:09:
                    7c:b3:d4:1b:0e:69:84:98:41:0e:46:97:1d:ca:0e:
                    88:da:76:ed:24:4e:99:9a:22:2f:f8:58:e3:6c:37:
                    fe:dd:87:97:66:b0:2c:22:a0:df:0d:b0:c9:d0:e8:
                    f8:bd:f2:3d:8f:90:21:0c:58:5a:2e:f9:fd:ad:67:
                    61:1e:5a:30:66:52:b7:33:b8:b9:0e:52:70:14:a1:
                    b2:99:03:c8:04:cc:27:18:80:08:cc:9f:59:4e:6b:
                    86:7b:d4:5f:18:ed:ef:a9:ef:24:9c:86:89:82:96:
                    07:c0:ea:ad:7e:54:0a:1c:0f:9a:8c:25:71:15:f2:
                    51:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:3B:E2:8D:F3:B6:BE:5A:BB:D4:86:6A:53:57:9F:8F:BE:A3:33:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/2b564fbb-5489-3a5e-a3a8-b51618764307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl

            X509v3 Authority Key Identifier:
                keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc15:20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:9f:00:57:e8:fc:08:fa:29:b7:83:05:ff:2f:97:d8:fb:66:
         d9:68:a1:18:12:09:bd:33:23:a3:89:ca:15:05:16:f5:ba:16:
         70:1e:15:b1:aa:a5:70:3c:34:99:8c:d2:40:59:dd:78:76:dc:
         38:39:13:4f:94:0d:5a:44:8c:b2:b3:a6:30:8c:09:1d:92:fe:
         f8:4c:22:fe:63:b1:d0:d6:a9:4e:45:1e:7c:a5:79:ef:e6:09:
         0e:2b:35:66:de:04:60:07:51:b7:60:75:c6:f5:73:77:84:b6:
         61:d9:5a:42:72:55:5f:0f:37:be:35:6a:8d:04:a0:42:f0:ae:
         bb:f3:d4:ae:8e:98:01:c6:e9:9e:d6:8c:0c:9d:62:6f:f2:2b:
         8f:32:1c:b2:55:c0:a1:6a:ee:d9:72:5c:f6:4d:99:71:38:1a:
         9b:83:56:c4:fb:6a:5e:d1:83:db:ed:f5:05:87:79:d3:2a:41:
         7a:a3:6f:6e:7a:27:8d:5e:35:47:d1:7e:28:ce:ee:8a:d4:fe:
         05:05:be:74:47:c9:d6:33:42:44:97:f6:88:03:17:df:8f:af:
         51:58:9e:a8:86:4b:76:da:97:c4:46:d6:41:68:fa:73:8b:2b:
         b8:05:b5:c2:29:05:36:7e:bf:32:99:db:45:8f:5c:29:f0:29:
         b3:af:9c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 15:31:36 2024 by rpki-client on console-ams.rpki-client.org