Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/8c677012-77d5-3579-a76a-b2ec649d5fec.roa
File:                     8c677012-77d5-3579-a76a-b2ec649d5fec.roa (raw, json)
Hash identifier:          6hWIUR3Obegrd3JmF1d2/fOn4fePl1lp5VZclca1nTk=
Subject key identifier:   7F:46:DB:6C:5B:48:91:F0:41:EA:89:78:C3:8D:21:71:35:30:CE:62
Certificate issuer:       /CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
Certificate serial:       010D0C9F43285844F5CAAF137DFCF19E72921800
Authority key identifier: 8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/8c677012-77d5-3579-a76a-b2ec649d5fec.roa
Signing time:             Wed 21 Feb 2024 02:00:25 +0000
ROA not before:           Wed 21 Feb 2024 02:00:25 +0000
ROA not after:            Tue 21 May 2024 01:00:25 +0000
asID:                     14618
IP address blocks:        2602:fa28:3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f5:ca:af:13:7d:fc:f1:9e:72:92:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
        Validity
            Not Before: Feb 21 02:00:25 2024 GMT
            Not After : May 21 01:00:25 2024 GMT
        Subject: CN=470f504d-b5d9-4186-b9af-8be96bf27d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:11:66:82:60:a7:ff:95:30:1f:94:2d:7e:4a:
                    6f:28:59:c5:95:75:cd:b6:89:f4:23:36:0b:18:33:
                    45:06:5d:e9:8b:a3:b3:31:6b:31:ad:f1:4e:f9:e3:
                    71:6a:a1:75:51:1c:9e:ae:37:5b:e1:6c:0e:6d:14:
                    3d:71:8f:f5:8b:8c:0e:5e:c7:45:ea:8e:a3:4e:03:
                    09:60:fc:de:89:0c:43:78:96:48:d3:7a:aa:1e:93:
                    12:02:3f:4a:56:ce:05:cc:09:92:c5:f3:0f:26:b0:
                    d1:5c:99:97:58:bd:2c:02:7a:24:91:6e:31:93:30:
                    6c:31:54:86:16:22:2b:ef:52:47:05:44:6b:53:f7:
                    97:d8:2e:67:75:a1:26:87:64:bc:71:cf:18:74:c7:
                    d5:de:fc:e5:75:cf:bc:d4:0e:c0:fa:37:bf:56:de:
                    a9:a1:81:9c:e9:79:7f:5a:e5:20:e3:a4:75:8d:fc:
                    7c:9d:15:9b:02:68:f5:5e:92:d4:f5:61:84:99:fc:
                    2e:d4:cb:16:4d:15:b4:0d:ef:f2:97:d4:23:94:ba:
                    b9:a1:3c:e1:33:78:6c:45:23:e9:a6:0b:40:90:ee:
                    22:2b:67:40:0b:0e:be:4b:8b:bd:2a:b3:a0:15:5f:
                    da:df:07:65:4e:76:bc:4e:76:06:ab:cd:df:78:8d:
                    ac:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:46:DB:6C:5B:48:91:F0:41:EA:89:78:C3:8D:21:71:35:30:CE:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/8c677012-77d5-3579-a76a-b2ec649d5fec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa28:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:b0:a8:9d:29:b4:ae:6a:ae:e4:df:05:c4:34:ea:ce:08:95:
         f7:09:aa:13:30:3b:db:48:4c:9c:18:34:b5:cf:7c:98:d0:bc:
         e5:86:7f:cb:e3:6f:e5:ee:e9:3d:be:97:49:7c:ca:34:eb:20:
         7f:77:93:7e:d3:52:cc:90:a3:a2:aa:db:d5:7f:42:16:92:19:
         48:e9:82:d4:8f:03:01:24:ad:0a:97:ab:19:6b:b5:61:a6:b3:
         f4:32:b7:08:b3:32:34:c0:b5:cb:03:ab:51:7b:d9:b4:20:c5:
         7c:9a:3e:1c:58:e6:9f:ac:f2:4e:42:7c:6b:fd:2c:b3:88:55:
         02:5b:70:7e:c1:c9:7b:ef:56:85:04:62:75:55:b3:0f:7f:48:
         35:1f:79:ee:1c:21:80:74:fd:c0:b7:8c:17:35:21:49:00:82:
         a8:6a:d7:cf:7b:3a:60:1d:12:88:7d:e7:c6:8c:af:90:6b:0f:
         8d:05:ea:a2:f6:34:b0:20:cf:48:99:39:bd:65:0a:53:fa:4b:
         46:f1:09:45:b6:34:0d:27:27:3c:aa:73:f9:1c:2d:70:90:a9:
         28:b7:67:41:28:ab:d3:eb:22:9e:54:50:07:c5:2c:67:9f:c1:
         34:2e:94:24:df:65:41:1b:30:30:28:91:e2:63:9f:92:42:ee:
         95:c3:9d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:02 2024 by rpki-client on console-fra.rpki-client.org