Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/85f2ea3c-4e52-3222-94c6-afd6e810592b.roa
File:                     85f2ea3c-4e52-3222-94c6-afd6e810592b.roa (raw, json)
Hash identifier:          WCxiWSsAmhXjt1q1lZ9spvkpu9E/4GuRUcGOWq5JDdE=
Subject key identifier:   68:F9:12:E0:40:52:E1:36:D8:05:8E:48:1D:17:88:0A:25:DB:D7:10
Certificate issuer:       /CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
Certificate serial:       010D0C9F43285844F2FFFB607E9C8F0015CBED20
Authority key identifier: 8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/85f2ea3c-4e52-3222-94c6-afd6e810592b.roa
Signing time:             Tue 20 Feb 2024 02:00:26 +0000
ROA not before:           Tue 20 Feb 2024 02:00:26 +0000
ROA not after:            Mon 20 May 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        2602:fa28::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f2:ff:fb:60:7e:9c:8f:00:15:cb:ed:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
        Validity
            Not Before: Feb 20 02:00:26 2024 GMT
            Not After : May 20 01:00:26 2024 GMT
        Subject: CN=ac801aa7-ea5b-4773-9b9f-0fe344645c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:90:b8:06:46:22:26:20:a0:01:bd:5a:4d:bb:
                    78:8d:3f:8c:11:67:5e:19:57:75:d1:f8:d2:35:14:
                    7a:9c:0f:d4:e6:49:51:63:0e:dd:1b:37:3d:e4:a0:
                    09:ba:3f:5e:71:05:6f:d2:7d:e2:fd:1b:89:cf:44:
                    b4:4d:7f:89:7c:fc:0c:41:05:ae:fe:4f:96:0f:6c:
                    9e:81:c6:87:f5:0a:df:79:72:0a:ec:3e:29:2a:ab:
                    39:3a:0b:ae:f3:6a:6f:12:b1:e8:0c:72:b1:65:66:
                    10:75:16:9b:6c:43:3f:5c:67:d9:dd:da:c7:00:81:
                    ed:7c:70:91:9a:15:f2:d3:cf:9f:56:ec:af:da:b4:
                    4e:26:d8:df:34:82:7f:01:89:73:fc:ba:48:b7:e1:
                    18:78:09:80:cd:8b:a8:27:fc:c0:94:a2:c4:a1:79:
                    14:43:35:27:72:5c:5d:1d:a5:16:0a:cc:e6:e7:1b:
                    0c:e6:a8:72:91:c1:3d:2a:62:3c:61:89:e6:30:b7:
                    33:e7:ce:77:a3:5b:59:44:c1:11:61:ae:5f:ad:ef:
                    b3:79:f1:a6:d2:96:00:5e:7e:e5:86:bd:89:92:70:
                    8f:f5:95:bd:9b:d7:38:76:c4:14:0f:f8:c8:f8:ae:
                    65:7d:8a:c3:7d:f4:4a:dd:96:be:55:78:c4:8e:93:
                    18:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F9:12:E0:40:52:E1:36:D8:05:8E:48:1D:17:88:0A:25:DB:D7:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/85f2ea3c-4e52-3222-94c6-afd6e810592b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa28::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:f2:b3:88:61:06:c9:43:8a:ee:3b:65:b9:87:b8:a2:da:cf:
         e9:56:93:d1:6f:99:c8:12:2b:47:7e:f1:1e:79:93:f0:1a:50:
         f8:1a:3f:34:7a:79:f0:8a:f0:af:f9:04:40:94:ce:a6:89:d4:
         31:b6:68:60:a4:3d:6d:e7:b0:9f:03:e7:3b:37:3a:8a:61:37:
         e1:98:aa:96:6d:6c:5b:19:4b:7a:c0:6b:4e:29:ad:12:43:a7:
         2f:00:a9:5c:f1:24:dd:3b:e5:3f:b5:54:cd:7e:09:bb:6f:3a:
         d5:35:bd:e5:de:2c:8c:40:b6:08:e2:38:26:41:1e:f4:e9:de:
         51:a6:c9:fd:53:9b:71:28:68:8f:5b:2f:6a:2c:3e:25:ac:0f:
         39:bc:94:22:7f:ef:f1:80:ee:ef:24:7c:48:fb:5a:1d:8c:7f:
         e4:db:45:c1:67:43:58:d4:82:96:04:dd:2b:22:ee:63:77:ff:
         2c:59:77:e0:f1:34:68:1d:86:7b:98:16:2a:e7:21:bb:23:5c:
         2e:bb:1a:ea:80:e7:ba:e8:7f:0b:e3:ea:d7:2c:2c:9e:c6:51:
         39:c6:49:70:e1:ed:97:d1:53:de:96:1f:ec:71:98:31:c0:f0:
         b1:02:c4:ca:d6:57:f4:49:ed:57:c8:ba:63:d9:69:b2:02:46:
         c7:91:54:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:07 2024 by rpki-client on console-ams.rpki-client.org