Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/05ab02df-7968-3335-b43e-d613f908b631.roa
File:                     05ab02df-7968-3335-b43e-d613f908b631.roa (raw, json)
Hash identifier:          Y6EWU0TMh/s4t5M6y5bOj862KY7q7GsvucdFtDg+Z/0=
Subject key identifier:   BD:52:7C:F4:4E:12:DA:EE:32:92:B9:F6:EE:27:A8:54:A2:06:1C:C8
Certificate issuer:       /CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
Certificate serial:       010D0C9F43285844F5CAAF4102BD623866809880
Authority key identifier: 8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/05ab02df-7968-3335-b43e-d613f908b631.roa
Signing time:             Wed 21 Feb 2024 02:00:25 +0000
ROA not before:           Wed 21 Feb 2024 02:00:25 +0000
ROA not after:            Tue 21 May 2024 01:00:25 +0000
asID:                     14618
IP address blocks:        2602:fa28:6a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f5:ca:af:41:02:bd:62:38:66:80:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
        Validity
            Not Before: Feb 21 02:00:25 2024 GMT
            Not After : May 21 01:00:25 2024 GMT
        Subject: CN=3253969a-d95c-409b-9936-6566c51be478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:39:86:a0:d4:2d:5d:38:59:bd:12:3d:8e:1a:
                    35:d0:84:74:6f:75:72:0b:a8:5c:ee:16:2e:3b:40:
                    f5:ca:49:60:72:44:0f:11:12:01:e3:9d:aa:30:dd:
                    c6:a5:a6:5f:ec:00:26:05:39:32:14:43:33:02:55:
                    fe:2d:07:ac:bc:bc:3f:10:ac:15:d4:4a:d3:bf:ab:
                    8b:81:52:8b:db:ed:63:29:3b:5f:5b:73:57:23:4c:
                    0b:29:1a:63:29:02:75:48:97:0e:da:ad:3c:25:b4:
                    fe:cb:25:72:b5:a9:8e:ba:95:5d:10:85:06:e5:6c:
                    c8:78:9b:3b:b3:8a:83:c6:46:50:7d:e9:ed:b3:bc:
                    53:e4:7a:1c:f2:b2:e3:62:2c:b9:f4:9a:d0:d1:93:
                    b1:54:a2:04:6b:60:34:ee:56:41:f9:bf:1c:cf:4d:
                    80:8e:12:99:14:cb:3f:c8:38:e3:b8:23:7e:66:e4:
                    b0:52:7d:83:03:d8:77:0e:85:e1:33:1d:6c:c5:13:
                    17:bc:df:f9:c5:3f:4e:85:c2:9c:5d:e6:41:e5:63:
                    39:8a:5a:c0:18:78:d3:9f:33:63:9c:f3:5b:b4:50:
                    44:1e:af:e4:6a:60:6e:aa:76:28:22:fa:63:6e:9c:
                    16:f6:4c:05:c0:39:84:9e:ae:96:4a:c8:1d:92:82:
                    19:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:52:7C:F4:4E:12:DA:EE:32:92:B9:F6:EE:27:A8:54:A2:06:1C:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/05ab02df-7968-3335-b43e-d613f908b631.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa28:6a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:df:fc:be:d5:77:0d:3a:02:2f:6d:44:6b:fc:5a:39:90:99:
         e6:57:0d:f6:21:b0:44:71:13:6e:37:24:29:f1:81:80:95:7e:
         ce:ff:79:b3:25:e5:a4:f8:db:65:42:4a:8f:0d:47:9e:58:1d:
         06:d3:bd:3a:c5:dc:79:f1:7d:3e:9a:d8:db:84:01:f9:0b:be:
         a2:b0:d1:a6:6b:16:32:cf:44:5b:c5:51:93:87:f8:3f:82:df:
         f8:95:bd:93:e5:b8:95:be:f5:cc:7c:d5:f4:2a:3a:11:ee:84:
         0a:b7:13:39:ff:77:49:74:db:22:6f:d0:23:79:e9:eb:b2:71:
         49:99:4f:2a:99:b2:9d:d6:28:2a:35:3d:1d:0f:c4:d7:9b:74:
         76:1e:34:ce:b5:90:21:f1:9d:ac:ed:51:5a:b6:58:5b:f8:6b:
         2c:49:aa:c3:70:fe:40:c4:c9:1d:c9:14:ce:bc:ef:fd:ce:cd:
         1b:e0:54:92:2e:9e:1e:74:a5:e9:65:f3:aa:b9:60:fd:ae:3b:
         ec:51:04:0f:66:7f:6b:7f:de:e0:d5:6b:89:91:b9:c6:a3:90:
         19:96:1a:11:44:ab:36:5b:ae:28:55:94:98:2a:22:87:c9:5e:
         9c:fd:c2:f5:47:f4:ed:1d:9f:8a:03:67:9a:8f:76:78:bb:75:
         c4:e0:0d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:55:41 2024 by rpki-client on console-ams.rpki-client.org