Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/f9400004-48ae-3c7c-ac1b-3e38fa29b155.roa
File:                     f9400004-48ae-3c7c-ac1b-3e38fa29b155.roa (raw, json)
Hash identifier:          PPtsdn3MFXY00+1b5X68n7mHrDpFOoBAWeHwPkG1wHI=
Subject key identifier:   1C:BB:40:F7:52:D5:D6:B6:8D:0B:6E:C4:C3:A8:90:22:FC:54:FF:71
Certificate issuer:       /CN=de848e16-b429-4505-9234-f6d889fd1438
Certificate serial:       010D0C9F432858456C532246DBBB07598BE69180
Authority key identifier: 1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/f9400004-48ae-3c7c-ac1b-3e38fa29b155.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     23470
IP address blocks:        2602:fc2f:f01::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:22:46:db:bb:07:59:8b:e6:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de848e16-b429-4505-9234-f6d889fd1438
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=483a41ab-0352-47a8-897c-263e646d8c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c4:60:61:cc:e4:0b:08:f9:a4:7b:77:8b:0a:
                    7b:4e:d8:c7:c5:77:30:2d:dc:93:26:25:5e:96:71:
                    d7:4b:2b:b0:81:cd:a6:7d:e6:87:6c:ec:b4:1a:b9:
                    67:c2:90:8f:d6:93:b1:35:25:fa:e0:e8:cd:5a:19:
                    0c:31:00:40:b4:cb:8f:1b:72:3e:c7:aa:9d:eb:9a:
                    bf:4e:76:aa:7b:b4:77:67:15:7c:bf:c4:84:13:6d:
                    b5:1a:67:46:20:b3:bd:3d:d6:02:9e:14:b8:ca:ce:
                    7e:02:5a:62:b3:fe:80:4c:4c:fa:ca:1f:ae:c9:98:
                    4b:f2:c7:c7:32:12:70:6b:d8:b8:05:b3:02:99:f2:
                    83:dd:d1:0d:6e:80:54:5a:69:af:8e:12:7a:f0:49:
                    ef:4d:5f:1b:78:f5:5c:37:53:ab:d9:ff:09:b7:2a:
                    c9:7d:ec:6b:98:19:46:af:53:f3:aa:48:1a:49:c1:
                    cb:a9:79:a3:31:80:e0:36:74:14:3d:cb:3b:09:33:
                    86:72:06:38:35:d8:63:f5:19:93:f5:3c:0e:52:30:
                    ba:90:33:d3:2b:16:00:d3:db:1b:5a:b6:bc:ca:68:
                    2b:80:35:f5:d3:e5:f1:ce:58:c9:54:72:2c:14:67:
                    77:85:cf:34:13:ed:c2:bc:d4:9f:51:dc:e7:94:9e:
                    53:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:BB:40:F7:52:D5:D6:B6:8D:0B:6E:C4:C3:A8:90:22:FC:54:FF:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/f9400004-48ae-3c7c-ac1b-3e38fa29b155.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.crl

            X509v3 Authority Key Identifier:
                keyid:1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc2f:f01::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:18:ed:55:14:12:51:e9:86:5a:2e:55:f5:b0:58:29:4a:45:
         3c:28:01:8c:c3:43:29:67:24:bb:2e:9a:2d:b0:7b:59:07:c1:
         df:78:32:86:11:92:3a:d8:65:35:5f:d7:9d:03:7f:6e:66:70:
         6f:0c:8d:ab:f0:87:eb:f0:a6:36:85:6a:83:65:84:96:e0:92:
         d5:22:04:2b:6b:85:8b:15:13:70:b5:cb:90:73:69:55:49:b7:
         b0:0f:e3:01:b4:4e:41:6d:4b:2b:a2:0e:1f:6a:fd:26:12:f3:
         28:8f:da:69:64:52:43:b1:7a:c0:0e:6f:a5:99:12:fb:06:d5:
         ca:c2:56:52:5f:d9:c9:03:44:bf:e0:75:6b:49:cb:a1:1f:9f:
         ad:1e:7a:b4:ca:a8:e1:e6:88:c5:e2:77:2b:4a:92:ca:b5:b8:
         04:14:05:f4:28:0a:a5:a5:cc:18:88:5f:0d:b6:e7:8b:95:84:
         40:26:f9:38:1e:e1:8e:e8:a6:82:5a:b9:3b:72:2a:9a:15:1e:
         bb:14:90:45:90:c6:fa:57:97:f1:7f:ee:7f:46:1b:de:37:93:
         d2:39:d9:15:1c:89:c6:08:29:88:e3:d2:e7:9e:70:e5:83:5d:
         70:66:f4:9d:07:f7:7c:e6:94:58:0d:bf:7b:2f:1e:23:12:81:
         2c:40:88:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:55:27 2024 by rpki-client on console-ams.rpki-client.org