Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/ea9c383f-126b-3df7-ba3c-19fc5c239b09.roa
File:                     ea9c383f-126b-3df7-ba3c-19fc5c239b09.roa (raw, json)
Hash identifier:          vGRjw5YwclSkUpCeKfbHqZL07L4HvXnL4NK/cRnOzKM=
Subject key identifier:   4B:43:80:F7:E3:DA:B6:76:EF:DE:CE:4B:2E:27:13:7C:63:3D:85:9D
Certificate issuer:       /CN=d49742e8-8d0c-4209-b76f-403554b0e6b4
Certificate serial:       010D0C9F43285845CB3E498EC04DF06E680D1360
Authority key identifier: C9:74:C2:38:62:75:65:D4:F6:77:35:94:E6:36:CC:97:CE:F2:0B:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/ea9c383f-126b-3df7-ba3c-19fc5c239b09.roa
Signing time:             Tue 07 May 2024 13:00:35 +0000
ROA not before:           Tue 07 May 2024 13:00:35 +0000
ROA not after:            Mon 05 Aug 2024 13:00:35 +0000
asID:                     992
IP address blocks:        2602:810:5001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cb:3e:49:8e:c0:4d:f0:6e:68:0d:13:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d49742e8-8d0c-4209-b76f-403554b0e6b4
        Validity
            Not Before: May  7 13:00:35 2024 GMT
            Not After : Aug  5 13:00:35 2024 GMT
        Subject: CN=866a906e-0fac-49a2-ad4d-06649ce6cfcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b4:b0:64:0d:9c:b3:64:6a:69:1e:5b:77:83:
                    3f:bc:f0:82:65:50:65:fa:46:51:0f:5c:38:92:a0:
                    38:dd:a1:b9:c1:09:a3:62:f0:e1:51:e8:b8:60:c3:
                    f0:04:36:44:c1:c8:90:ae:9e:90:68:dd:7a:31:96:
                    3b:cb:f4:b5:2a:6c:c4:66:5a:8e:2e:d4:b5:1f:ad:
                    95:a6:a9:c4:83:02:6e:c9:c0:26:25:7d:0f:25:ae:
                    85:01:c9:25:33:d1:c0:93:c3:46:30:aa:42:c8:41:
                    02:42:35:8a:95:22:59:22:be:d7:81:e4:65:80:f9:
                    9e:aa:b3:ff:39:bc:6f:87:fa:ff:9c:e5:43:42:0f:
                    3a:2f:b0:dd:1e:4a:2e:c0:fb:96:16:af:a0:c6:af:
                    1a:aa:15:3e:4d:0f:6e:08:75:54:f3:70:c1:27:47:
                    4d:a2:2f:06:98:83:14:0e:bb:4f:d9:3d:57:3f:01:
                    7b:4b:02:e8:f3:b6:b4:28:54:27:ab:a0:d1:77:da:
                    6b:52:0f:b8:e4:02:3e:68:e4:d4:f0:86:3e:50:fd:
                    76:86:ff:ca:ed:76:6b:9e:e7:3e:7e:ee:7b:6e:67:
                    b5:8d:08:46:c9:5e:9e:91:74:d2:49:b9:a5:34:2a:
                    75:5a:37:37:51:b7:40:c4:9c:d9:17:2b:61:8c:cd:
                    8a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:43:80:F7:E3:DA:B6:76:EF:DE:CE:4B:2E:27:13:7C:63:3D:85:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/ea9c383f-126b-3df7-ba3c-19fc5c239b09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.crl

            X509v3 Authority Key Identifier:
                keyid:C9:74:C2:38:62:75:65:D4:F6:77:35:94:E6:36:CC:97:CE:F2:0B:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:810:5001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:23:d2:ce:9a:a2:08:bb:a3:b2:75:8c:1b:d0:27:28:70:4d:
         51:2d:4c:d3:d5:b6:5d:d8:39:56:02:ef:c9:40:c4:6d:cf:29:
         37:31:08:dc:51:be:50:9d:0f:6a:58:4c:73:6e:61:4f:6a:07:
         db:af:6e:78:01:40:2c:0a:69:c5:43:18:55:89:8d:03:ee:57:
         b8:7b:86:28:af:62:ed:49:dd:97:3d:74:a5:df:4c:96:34:35:
         f4:81:00:09:bd:5a:39:26:45:2e:f2:9c:31:40:1e:48:60:43:
         69:09:88:a3:9a:0b:21:aa:d2:84:c7:b5:2b:86:56:37:b1:bc:
         a8:91:ff:0c:29:1b:5f:4d:d4:85:14:fa:ea:1a:56:22:ed:b4:
         78:02:c0:58:d0:09:2e:c7:9a:27:7f:19:ce:fa:5a:25:67:59:
         db:9a:a0:44:fb:3d:65:ba:3b:0f:9f:8f:b5:13:a7:cd:7d:5e:
         9f:46:b4:46:0b:bc:ee:bb:46:7a:3d:d4:2b:0f:18:67:38:f5:
         eb:f9:d9:94:45:84:84:42:1a:c7:02:7e:8a:77:7e:9d:7d:4c:
         d6:36:1c:9f:65:fb:ec:e9:6f:c8:bb:58:32:ee:28:a8:eb:9a:
         0c:96:f9:00:21:f5:5b:15:d8:9f:14:07:29:43:73:22:a0:8d:
         c2:34:a3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:41:07 2024 by rpki-client on console-fra.rpki-client.org