Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/85012cde-de16-4e2c-88cc-fb082ace78b7/17d6aad3-952d-31f7-9131-7db20c37be3c.roa
File:                     17d6aad3-952d-31f7-9131-7db20c37be3c.roa (raw, json)
Hash identifier:          zE+xHb34A3S5PBr2eE1SQmIYc0croZwF8HNR1r6mKaI=
Subject key identifier:   C6:40:C7:8E:37:1D:21:9A:0B:9E:63:F5:B8:E9:2C:AB:68:E9:9F:2B
Certificate issuer:       /CN=85012cde-de16-4e2c-88cc-fb082ace78b7
Certificate serial:       010D0C9F432858459798862CCB36C50F56A99400
Authority key identifier: 32:4C:86:C1:0F:92:C6:F4:A8:A8:E0:01:43:1B:BA:65:C9:7E:96:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/85012cde-de16-4e2c-88cc-fb082ace78b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/85012cde-de16-4e2c-88cc-fb082ace78b7/17d6aad3-952d-31f7-9131-7db20c37be3c.roa
Signing time:             Fri 19 Apr 2024 01:00:25 +0000
ROA not before:           Fri 19 Apr 2024 01:00:25 +0000
ROA not after:            Thu 18 Jul 2024 01:00:25 +0000
asID:                     30654
IP address blocks:        2602:fa17::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/85012cde-de16-4e2c-88cc-fb082ace78b7/85012cde-de16-4e2c-88cc-fb082ace78b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/85012cde-de16-4e2c-88cc-fb082ace78b7/85012cde-de16-4e2c-88cc-fb082ace78b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/85012cde-de16-4e2c-88cc-fb082ace78b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:97:98:86:2c:cb:36:c5:0f:56:a9:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85012cde-de16-4e2c-88cc-fb082ace78b7
        Validity
            Not Before: Apr 19 01:00:25 2024 GMT
            Not After : Jul 18 01:00:25 2024 GMT
        Subject: CN=d3cae10a-23a2-487d-887d-8a5c31595406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e7:73:1f:78:77:c1:1a:5e:c2:f1:69:b4:a2:
                    dd:33:49:02:91:b0:48:88:82:9c:86:59:7a:ef:c2:
                    88:2f:83:ce:b9:14:21:15:21:ca:f9:cb:a2:db:b3:
                    aa:78:f4:fb:fd:ee:ef:a1:d1:33:57:4c:ad:1a:48:
                    68:0c:85:0d:73:b3:3d:f5:0b:3c:e3:01:0e:c6:cd:
                    c6:db:80:3c:19:fe:35:10:2a:29:eb:09:6f:5d:76:
                    80:1b:32:85:54:1d:ff:6e:c4:59:60:5a:7b:52:a4:
                    ed:76:5b:d2:68:b1:92:c0:50:c8:9d:53:59:55:3a:
                    1a:3e:0f:97:49:c2:39:b6:1b:51:cd:9f:b9:6e:84:
                    31:31:b0:29:52:58:fd:e7:c3:ee:2c:50:df:bb:4d:
                    15:0e:0e:51:0d:6e:e4:19:e9:34:33:62:a4:d3:ec:
                    03:2b:12:27:e2:4a:c2:52:3e:ce:a1:ce:8c:9e:ad:
                    cc:d3:0c:63:cb:a4:24:5a:88:ad:56:76:7f:5f:f1:
                    ea:c7:2e:b6:13:3b:44:f5:77:4e:88:52:80:b8:9e:
                    e9:01:77:08:6d:5a:ad:e2:fc:98:d3:88:91:f0:72:
                    cd:c0:65:ff:42:3d:97:33:1e:42:51:5b:0e:54:d1:
                    b6:13:66:93:7d:1e:95:38:c9:d7:5a:c6:ad:c8:4a:
                    c1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:40:C7:8E:37:1D:21:9A:0B:9E:63:F5:B8:E9:2C:AB:68:E9:9F:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/85012cde-de16-4e2c-88cc-fb082ace78b7/17d6aad3-952d-31f7-9131-7db20c37be3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/85012cde-de16-4e2c-88cc-fb082ace78b7/85012cde-de16-4e2c-88cc-fb082ace78b7.crl

            X509v3 Authority Key Identifier:
                keyid:32:4C:86:C1:0F:92:C6:F4:A8:A8:E0:01:43:1B:BA:65:C9:7E:96:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/85012cde-de16-4e2c-88cc-fb082ace78b7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa17::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:0c:88:b4:ae:b3:9e:06:14:b2:3f:ca:90:ce:2a:df:8f:87:
         ae:be:51:dd:be:51:d3:37:f2:6b:b2:d3:0d:05:ec:c7:a9:31:
         21:93:1f:36:da:4e:ec:df:bf:90:d4:cd:b7:0f:8f:53:98:66:
         bf:d7:c1:3e:4d:12:f6:8c:3c:56:97:5f:cf:42:38:0f:25:5e:
         1c:08:68:06:a2:f1:89:bc:58:24:fc:b6:d5:5e:26:b7:57:75:
         c5:01:64:ca:92:7c:f1:e5:6d:c6:2d:11:46:dc:12:26:ab:b3:
         59:91:11:01:64:8d:c5:6c:1d:06:55:a1:f9:4f:55:83:e2:60:
         48:a4:d5:d2:0f:8a:06:91:61:73:a8:85:02:58:aa:fb:75:ea:
         cf:ce:b1:68:e2:90:80:dd:02:68:13:a8:28:25:e0:b4:a9:3a:
         e6:d3:d7:82:c4:eb:6e:2a:73:d3:bc:d7:3a:cd:e1:39:57:3e:
         98:db:06:6f:7f:ae:93:2a:63:d7:1e:0d:6d:0a:d4:4d:a4:16:
         1b:7e:90:12:1f:41:1b:da:4b:5c:5d:c7:8b:6f:13:61:a9:c8:
         fd:32:46:81:18:b7:1e:56:fa:37:30:9b:f6:1d:ed:90:2d:8b:
         eb:c5:60:3d:e7:b6:70:59:1f:a9:aa:e0:ce:f8:07:f5:3e:06:
         49:30:b5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:55:24 2024 by rpki-client on console-ams.rpki-client.org