Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/ea48664e-7f29-35b5-bcf7-47161f22fb58.roa
File:                     ea48664e-7f29-35b5-bcf7-47161f22fb58.roa (raw, json)
Hash identifier:          tMiEsLwYiBt3VJ4dqsHweICxolo8iOCgpeDHR5d7Dts=
Subject key identifier:   95:77:4E:A3:B2:83:34:34:30:0C:39:30:5B:4A:16:F4:8F:15:F4:13
Certificate issuer:       /CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
Certificate serial:       010D0C9F43285845374801362C91CCB32004F340
Authority key identifier: E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/ea48664e-7f29-35b5-bcf7-47161f22fb58.roa
Signing time:             Fri 15 Mar 2024 13:00:32 +0000
ROA not before:           Fri 15 Mar 2024 13:00:32 +0000
ROA not after:            Thu 13 Jun 2024 13:00:32 +0000
asID:                     57974
IP address blocks:        2602:2d4::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:37:48:01:36:2c:91:cc:b3:20:04:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
        Validity
            Not Before: Mar 15 13:00:32 2024 GMT
            Not After : Jun 13 13:00:32 2024 GMT
        Subject: CN=b452735a-e279-46ca-bfac-5a00856003db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:02:31:d0:9f:78:72:56:32:b6:71:9a:1d:72:
                    05:5d:b7:b5:e4:07:6f:8d:ca:cd:94:1d:e6:95:b2:
                    2a:ce:a1:80:82:ec:a5:4b:9d:ac:59:6f:32:9f:81:
                    11:cc:1d:8c:c4:f9:30:a8:e0:d7:92:e9:de:8e:bb:
                    f8:3d:c7:22:ea:57:8d:5d:f7:17:2f:6a:a4:c5:7a:
                    8c:b6:f5:8a:a9:6a:c4:af:fa:cf:bf:8c:5a:3a:a9:
                    54:c5:4f:60:bc:2f:04:0f:b8:59:47:16:98:64:21:
                    c9:ce:e0:b1:2c:66:ac:85:16:9a:c2:73:fc:fb:5f:
                    95:1f:b3:a6:a7:31:27:e9:46:43:04:eb:4e:c7:a0:
                    9e:9f:a9:b8:02:65:1d:e9:48:d9:4b:06:25:4d:92:
                    31:ce:d7:cb:68:bd:e5:bb:e2:2a:05:15:37:2d:21:
                    80:cf:0a:8e:cb:de:4e:14:fd:eb:e4:84:d6:31:22:
                    b5:95:67:86:d8:dd:57:8c:b2:ec:6c:44:62:42:6d:
                    9a:24:81:b1:2f:74:c4:3e:0c:24:eb:30:85:2e:35:
                    a0:95:0e:f7:40:71:6a:e5:67:cc:35:03:b9:82:ba:
                    90:29:6a:e4:d2:0b:e8:3a:4e:98:87:82:9c:15:7a:
                    11:11:7e:40:47:05:b8:3f:28:e3:4b:63:92:ee:c5:
                    56:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:77:4E:A3:B2:83:34:34:30:0C:39:30:5B:4A:16:F4:8F:15:F4:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/ea48664e-7f29-35b5-bcf7-47161f22fb58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2d4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:4d:89:02:4a:58:37:3d:e6:f9:51:32:b8:8d:ba:70:48:06:
         28:4a:ba:f4:0d:f9:a4:04:e0:84:54:52:30:c8:62:10:66:95:
         58:dd:00:d3:01:0f:81:dd:b0:c9:de:f8:df:42:48:8f:cd:56:
         6d:4c:3e:e9:c9:e8:40:6f:0f:69:a0:df:f0:2b:93:3e:29:65:
         fb:de:08:01:de:24:19:5b:cc:ae:c0:aa:20:d8:6f:71:df:d9:
         b4:4a:d2:09:dc:fc:4f:38:81:2d:65:69:54:36:57:02:f4:1c:
         50:b3:ec:cb:90:0d:a5:01:75:55:83:ef:6b:45:4f:a3:29:c7:
         87:d0:95:1b:b2:30:14:40:17:59:52:53:9e:5a:fa:fa:58:46:
         14:ff:37:65:56:a5:51:6b:5b:6d:41:c7:86:8a:5f:5d:17:88:
         da:31:e1:ce:d3:22:39:ce:68:0e:03:ca:95:54:4e:e3:db:f7:
         25:28:92:c6:1a:29:50:be:fc:a3:ae:da:c5:fd:b4:bf:4c:b0:
         fe:4b:b2:24:d7:dc:5c:d1:16:d0:a2:75:15:b9:6c:08:3a:23:
         9e:f3:20:37:c3:0d:74:00:1d:45:79:c9:42:4f:a2:d7:7b:09:
         e5:e6:79:05:e5:58:73:c1:6f:76:90:27:d2:63:c9:ed:21:9b:
         32:11:3a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:55:24 2024 by rpki-client on console-ams.rpki-client.org