Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/643dea32-ad94-36d9-a6c5-90366af478b2.roa
File:                     643dea32-ad94-36d9-a6c5-90366af478b2.roa (raw, json)
Hash identifier:          0kZyW1ddujxclZ4MhvKRGN48cRMh2G/tyhyVYfEpH6o=
Subject key identifier:   AC:57:6C:8D:7F:0D:D7:79:0C:A7:96:42:5E:56:C6:1D:EB:14:77:E8
Certificate issuer:       /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Certificate serial:       010D0C9F43285844F73006B70304707C52330000
Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/643dea32-ad94-36d9-a6c5-90366af478b2.roa
Signing time:             Wed 21 Feb 2024 14:00:32 +0000
ROA not before:           Wed 21 Feb 2024 14:00:32 +0000
ROA not after:            Tue 21 May 2024 13:00:32 +0000
asID:                     40249
IP address blocks:        2602:fb78:40::/44 maxlen: 48
                          2602:fb78:30::/44 maxlen: 48
                          2602:fb78:20::/44 maxlen: 48
                          2602:fb78:10::/44 maxlen: 48
                          2602:fb78:60::/44 maxlen: 48
                          2602:fb78:70::/44 maxlen: 48
                          2602:fb78:50::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f7:30:06:b7:03:04:70:7c:52:33:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
        Validity
            Not Before: Feb 21 14:00:32 2024 GMT
            Not After : May 21 13:00:32 2024 GMT
        Subject: CN=28038bdd-4565-4925-aca8-365144db5433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:41:f7:cf:cb:9b:14:b2:c4:f2:23:e2:84:30:
                    23:a5:9c:5a:5f:c7:7c:ab:8f:ba:91:f7:36:83:2d:
                    58:d6:b5:89:c6:9f:d9:00:3b:c7:b0:48:11:b8:9b:
                    88:23:28:0b:44:4d:2e:59:52:e0:df:a1:09:9d:83:
                    a6:e6:bc:3c:d2:f3:68:78:a4:5f:37:28:a1:ab:c2:
                    15:ec:1b:c5:1f:fb:5e:4f:37:6b:5e:de:b4:e7:61:
                    cc:a7:99:9e:f7:b4:a6:03:96:83:41:d1:40:1d:fa:
                    4b:1f:de:65:58:b9:5b:c6:84:92:09:09:84:39:f8:
                    1d:45:35:0e:67:a4:20:e8:73:26:d5:cd:9b:6b:26:
                    82:c7:e3:66:f5:99:df:b7:e7:24:a2:af:9b:bf:1a:
                    18:f5:89:b4:08:f8:20:a5:b0:e6:36:f1:e1:de:9e:
                    84:d4:a9:73:1b:33:d7:f3:e3:67:af:5a:1e:d9:53:
                    53:dc:26:81:67:de:e1:ac:2f:30:7e:45:35:d9:63:
                    7c:6b:6d:60:d5:8b:02:16:1f:e8:57:a9:90:8c:ab:
                    b6:e2:30:d2:f0:fc:61:07:89:80:05:7b:56:c8:dd:
                    32:59:48:86:57:57:de:a6:c7:5b:4a:df:5d:f4:6d:
                    9b:27:0e:dd:ce:b4:1b:0f:df:90:d8:9b:13:ca:3f:
                    05:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:57:6C:8D:7F:0D:D7:79:0C:A7:96:42:5E:56:C6:1D:EB:14:77:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/643dea32-ad94-36d9-a6c5-90366af478b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl

            X509v3 Authority Key Identifier:
                keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb78:10::-2602:fb78:7f:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:e0:d5:0c:1d:05:47:b7:50:8f:67:e1:f7:30:59:5f:b1:48:
         4c:9e:0e:bd:0c:e4:35:31:c2:69:a1:af:5b:1b:90:98:e7:b8:
         d9:94:8b:d0:e1:bb:c1:2f:f3:95:c8:79:fc:84:f4:f3:02:2f:
         e8:b1:9b:34:94:fc:df:9b:bb:ab:df:68:98:43:fb:26:63:a5:
         f2:18:09:9c:b5:d0:e1:c8:11:d8:c2:ef:25:2b:5f:6a:aa:9d:
         01:a0:96:ae:37:09:93:fc:d1:11:5b:3a:5a:5a:a5:a6:21:80:
         58:9b:b6:23:c9:3c:b8:ff:34:39:31:ff:58:34:be:ef:f3:5a:
         58:bc:62:d3:f8:13:39:37:64:bc:43:3b:be:ac:be:8d:6e:b9:
         d8:9f:2e:95:ce:54:de:e2:7a:94:44:2e:df:2c:6d:8e:57:e3:
         37:dc:99:67:54:a6:34:78:3e:81:f5:8f:db:b3:ed:d9:3d:69:
         11:8e:1a:27:ad:2b:ff:8f:16:33:c8:cd:70:f4:d1:b5:8f:8b:
         dd:5e:ba:11:7c:c3:22:93:2a:7f:ce:80:fd:09:7e:ed:55:ea:
         4d:4d:94:6f:ec:d2:04:fd:27:39:f6:9a:18:4d:19:5e:a2:79:
         3a:2b:08:a1:46:b6:c0:d5:a3:20:0e:79:f6:bd:c6:7a:20:c7:
         57:ca:cf:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:07:57 2024 by rpki-client on console-ams.rpki-client.org