Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/dd609ba8-3c7d-3678-85e2-6a61566dffc7.roa
File:                     dd609ba8-3c7d-3678-85e2-6a61566dffc7.roa (raw, json)
Hash identifier:          svzahGH4OrTRejtL9hWD1i8X0VIAvJJbmqdT/gk3pbk=
Subject key identifier:   32:27:1F:D6:5B:7F:92:B6:5B:28:4F:CF:A0:CF:D2:0C:89:9E:36:93
Certificate issuer:       /CN=b118eb4a-df16-4ce5-adf1-adaaea128c50
Certificate serial:       010D0C9F43285845C5A8F5677C0A4543F7AC1500
Authority key identifier: AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/dd609ba8-3c7d-3678-85e2-6a61566dffc7.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     833
IP address blocks:        2602:fc19::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:f5:67:7c:0a:45:43:f7:ac:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b118eb4a-df16-4ce5-adf1-adaaea128c50
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=70d4ed90-d185-467b-8a24-6fb9b8327951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b9:3b:9b:82:18:94:cf:96:26:7f:03:c0:e9:
                    33:ef:75:47:db:70:b0:22:a8:98:e0:48:b4:58:d8:
                    60:9d:e3:3a:5a:43:bb:ea:d1:b6:66:02:7b:c2:07:
                    12:45:25:dd:a2:82:42:55:f9:99:b7:bb:5a:e0:5c:
                    14:bd:9c:f8:74:b6:51:db:ee:92:9c:ec:cd:4d:98:
                    5c:95:4e:82:9d:84:0d:d8:88:57:50:b1:68:82:a8:
                    9f:45:4f:af:c0:3b:33:53:a7:eb:c4:e6:b9:75:82:
                    67:41:09:e9:8a:b8:05:aa:ac:2b:c3:23:fd:7c:4f:
                    2d:84:46:53:a8:a5:73:66:2f:9a:a4:8f:b2:35:e3:
                    fd:d0:fd:bc:22:0f:0a:4f:ec:a0:fe:60:37:8f:7a:
                    2f:25:6d:9a:4c:e4:4a:f7:8a:6c:71:86:0a:fe:95:
                    4d:23:39:16:2f:a2:b9:97:a5:fc:14:8f:3a:83:2d:
                    dd:bc:29:65:7f:5e:9a:5b:fa:16:00:af:c6:0a:7e:
                    45:63:89:4a:95:c0:5d:1f:b4:67:52:56:bf:46:44:
                    22:d1:58:22:f6:e5:c2:cb:a7:36:d0:b6:dc:7c:28:
                    1f:bd:e5:65:85:5a:3c:ba:fb:1e:27:b6:54:d9:28:
                    c2:e0:bb:01:4e:00:f6:c7:11:65:fa:e6:db:52:1b:
                    10:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:27:1F:D6:5B:7F:92:B6:5B:28:4F:CF:A0:CF:D2:0C:89:9E:36:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/dd609ba8-3c7d-3678-85e2-6a61566dffc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.crl

            X509v3 Authority Key Identifier:
                keyid:AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc19::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:54:95:7a:01:04:b3:ea:7e:78:4f:ae:13:08:b2:84:a5:99:
         08:ad:d6:c8:5b:81:76:7a:e1:56:1f:5d:66:f2:6c:1d:0e:cf:
         09:09:52:23:85:9a:6f:f6:a2:6f:d9:95:39:fb:9b:8e:2b:b4:
         f2:6b:7c:bb:b5:80:34:5c:43:98:8b:53:f7:c8:5f:55:ee:6e:
         3c:b3:1d:01:0e:de:6b:60:80:20:e8:17:d6:33:df:8c:f7:9c:
         75:7a:41:56:fc:25:59:a2:31:df:66:3c:45:ae:10:a4:90:7e:
         30:08:cd:cf:d8:ca:6d:96:10:b2:7d:4e:5d:43:45:82:f3:73:
         54:fa:db:29:b9:0d:bb:ea:f6:bf:82:bc:54:0a:c1:70:0c:85:
         f4:bf:2f:b2:64:f7:3d:3c:d2:b4:f0:42:7d:6a:a4:0a:15:2b:
         8d:a7:a9:fc:e0:f5:3b:f5:69:05:09:38:a7:bd:64:cc:aa:2b:
         e0:99:2d:a4:2d:2e:12:16:b7:04:05:29:22:dd:d1:cc:f9:94:
         5f:22:7f:23:4d:05:24:e3:21:5d:51:3b:8a:06:e9:d8:8d:96:
         4e:19:5e:35:7f:b6:9e:78:cd:06:ce:ce:58:fb:d2:e5:23:1f:
         96:da:27:d3:54:38:44:23:75:bf:fc:77:33:08:8d:10:88:d6:
         8b:a3:43:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:21:19 2024 by rpki-client on console-ams.rpki-client.org