Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/1120f28a-f819-38ee-94b2-70a3a857d7b0.roa
File:                     1120f28a-f819-38ee-94b2-70a3a857d7b0.roa (raw, json)
Hash identifier:          UqD5qKuCxbwt5FvuPQeumf+t+3F+OTbAZD3nLrTS174=
Subject key identifier:   51:DF:10:53:FD:02:75:AA:BE:C4:BD:6A:4A:05:62:ED:1E:20:DD:6D
Certificate issuer:       /CN=206290f3-53e1-4d17-8678-29dace17c006
Certificate serial:       010D0C9F43285845471F129B9EEAE74730F43600
Authority key identifier: B0:75:75:D3:B9:68:A2:49:EF:B9:77:E1:92:46:A5:46:97:EC:1B:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/1120f28a-f819-38ee-94b2-70a3a857d7b0.roa
Signing time:             Thu 21 Mar 2024 05:11:04 +0000
ROA not before:           Thu 21 Mar 2024 05:11:04 +0000
ROA not after:            Wed 19 Jun 2024 05:11:04 +0000
asID:                     33179
IP address blocks:        2602:fa21:10::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:47:1f:12:9b:9e:ea:e7:47:30:f4:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206290f3-53e1-4d17-8678-29dace17c006
        Validity
            Not Before: Mar 21 05:11:04 2024 GMT
            Not After : Jun 19 05:11:04 2024 GMT
        Subject: CN=e0af6de4-8621-4826-aaf5-8d04e57c8b75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:21:e3:db:3c:cd:c7:aa:1d:94:9e:65:59:4f:
                    0e:8c:7c:9f:9f:ad:40:fd:4c:57:68:70:78:de:b0:
                    e7:f1:86:bb:d9:01:a3:d4:77:2b:c4:a4:63:4b:93:
                    06:0e:59:9b:a8:a3:9d:28:6b:b3:36:92:ea:5c:af:
                    8f:3d:f6:c0:2a:ae:c9:b4:22:36:4a:52:b7:93:24:
                    de:83:0a:a7:18:ab:73:cc:38:34:88:e4:2f:28:f8:
                    99:0d:3b:7a:8b:dd:b8:c4:e0:4b:23:89:26:0e:8e:
                    54:21:5e:0b:7e:fb:51:a2:95:c8:47:b4:e4:e3:35:
                    7e:5e:b8:ef:c4:fd:90:3d:d1:4f:dc:3c:f6:f5:d8:
                    e1:a4:57:36:b1:7e:be:ce:25:7d:bb:0c:9d:b0:56:
                    2e:6d:fe:84:dd:39:f2:0a:b0:dd:c7:99:97:8d:6a:
                    f5:e2:e3:28:3e:4f:c9:bf:3f:49:53:dc:1f:73:02:
                    ad:f1:9d:fc:71:55:d0:31:ae:d0:46:cc:d5:3d:98:
                    f7:91:c2:4a:86:d6:53:91:fe:99:09:31:32:45:3a:
                    37:f4:e6:52:2d:5c:f4:d6:93:92:c7:34:c1:a2:86:
                    ae:1e:2a:f8:94:22:2f:06:7f:68:2e:d0:70:65:9c:
                    67:9c:89:55:8b:07:30:8a:fa:37:8b:4e:8c:d6:66:
                    ca:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DF:10:53:FD:02:75:AA:BE:C4:BD:6A:4A:05:62:ED:1E:20:DD:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/1120f28a-f819-38ee-94b2-70a3a857d7b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.crl

            X509v3 Authority Key Identifier:
                keyid:B0:75:75:D3:B9:68:A2:49:EF:B9:77:E1:92:46:A5:46:97:EC:1B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa21:10::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:18:41:ca:28:c4:1a:30:a1:cd:d5:c6:4b:4e:cc:d9:8d:2a:
         63:8c:a8:7c:73:44:b3:cb:fd:23:ea:b6:f9:ef:9b:0c:61:dc:
         7d:f3:6b:80:7d:b1:67:4d:ff:b0:16:12:e6:ad:4f:bb:52:61:
         7a:ca:65:42:28:f2:9a:b5:99:e3:72:5e:29:59:7c:34:1e:44:
         8d:02:ba:99:c3:b8:9d:fe:7f:90:71:eb:ad:71:66:9a:3f:0f:
         90:61:e9:27:55:9c:f8:51:b7:aa:0b:84:00:60:49:89:f0:16:
         ef:1f:b5:5e:cc:8d:4f:22:6d:ec:59:41:1a:7d:17:64:a2:0a:
         2f:c7:5c:da:a2:83:39:25:bc:85:1b:26:09:b3:d7:62:21:3f:
         2c:c5:3e:2f:1d:af:ac:74:4d:fe:c3:28:87:43:97:48:b7:70:
         93:47:db:a7:c0:8e:67:b6:ce:8f:b5:4c:ef:41:f4:ed:95:bd:
         af:7d:ed:53:3c:78:f9:d0:9e:fc:4f:2c:be:fb:2f:7e:fc:6e:
         fa:ad:b4:b4:37:d2:ef:4b:c2:a8:6a:1e:84:7e:4a:88:57:75:
         b2:3d:e0:de:f4:aa:6d:d1:1a:6a:b7:9c:75:96:3e:45:90:29:
         dc:b5:35:62:c5:2f:c2:f1:b4:d2:24:80:1b:a8:30:a3:7a:fb:
         0f:ba:d1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:10:35 2024 by rpki-client on console-fra.rpki-client.org