Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/c0fa5168-bee3-3b81-bf06-4c4ab7f5bcc9.roa
File:                     c0fa5168-bee3-3b81-bf06-4c4ab7f5bcc9.roa (raw, json)
Hash identifier:          SeEm8M//RpdKg0ftFzXJ0cmT8zbmnRxBgj1EppOILdA=
Subject key identifier:   EA:13:1A:68:26:02:4F:F9:0F:13:30:96:77:90:24:2C:54:01:95:1E
Certificate issuer:       /CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
Certificate serial:       010D0C9F43285844F5CAACD108CAA02684BEE0A0
Authority key identifier: 8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/c0fa5168-bee3-3b81-bf06-4c4ab7f5bcc9.roa
Signing time:             Wed 21 Feb 2024 02:00:25 +0000
ROA not before:           Wed 21 Feb 2024 02:00:25 +0000
ROA not after:            Tue 21 May 2024 01:00:25 +0000
asID:                     14618
IP address blocks:        2602:fa28:6a::/56 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f5:ca:ac:d1:08:ca:a0:26:84:be:e0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
        Validity
            Not Before: Feb 21 02:00:25 2024 GMT
            Not After : May 21 01:00:25 2024 GMT
        Subject: CN=455eb03b-9b38-4c0f-8e48-30627b9c0aa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fe:b8:12:51:41:f0:0c:9f:61:92:36:97:b9:
                    af:5e:6e:d3:6c:b1:f2:a1:98:6e:ce:24:ae:9b:a9:
                    46:96:03:7d:f5:9b:cd:82:bf:18:b0:6e:df:61:29:
                    51:50:e9:0c:3a:e9:4d:0b:c2:fa:bb:ec:ce:4d:1e:
                    69:41:90:92:b7:44:8a:68:b1:48:1a:50:20:90:5f:
                    da:73:d4:68:bc:cb:fb:39:f2:5e:7b:a0:3d:60:21:
                    11:e1:bf:8f:be:ee:96:93:a1:bb:19:f0:0d:1f:5e:
                    c4:71:5e:bb:a0:12:18:21:35:59:df:82:40:eb:a5:
                    4e:fb:c3:c5:84:97:3d:42:f0:ec:28:b9:37:7f:0c:
                    7c:25:7b:ad:34:c3:c0:77:37:b5:fa:48:c2:d9:b2:
                    ec:35:09:25:6b:2d:63:63:7b:ad:f4:58:82:1f:63:
                    30:b2:bc:c6:26:20:20:51:c2:4b:e9:2d:c2:9e:3d:
                    51:fb:79:b9:fb:61:ad:cd:1e:3b:50:ba:bf:2f:0b:
                    ab:f6:4f:e5:e2:93:b6:50:b9:6a:f9:b0:71:00:ed:
                    ba:1e:7c:1f:44:18:ee:4a:13:3e:63:c7:33:40:c6:
                    33:26:a9:b8:0b:60:fb:21:77:b5:1f:84:87:5f:d0:
                    2a:13:a0:63:f5:83:23:9b:e7:60:72:0c:41:4b:39:
                    d1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:13:1A:68:26:02:4F:F9:0F:13:30:96:77:90:24:2C:54:01:95:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/c0fa5168-bee3-3b81-bf06-4c4ab7f5bcc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa28:6a::/56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:47:77:81:9c:b0:8f:54:01:9f:04:6a:c4:68:1d:18:ef:c3:
         ae:7f:69:46:a4:8d:56:b0:78:3b:1e:ef:11:b8:5b:ae:94:89:
         45:b8:ce:bd:dd:f6:2b:15:f3:7b:6d:72:2e:14:2c:82:bc:0e:
         1e:27:8c:fb:d3:17:d6:63:89:13:83:14:0f:0f:cb:52:c7:9d:
         24:8d:34:93:86:60:c4:46:03:37:dd:d2:f3:be:51:31:e6:53:
         43:41:01:f3:1b:8e:d7:fc:c6:00:0a:eb:4a:10:3d:b7:eb:c1:
         2e:35:b7:a3:7c:3c:81:28:c5:0d:16:7e:ee:84:2e:57:26:4c:
         cd:0b:c5:44:24:f3:73:ec:78:dd:63:06:da:37:66:b5:73:4d:
         b1:f3:44:af:96:c0:03:df:f2:4e:f3:ef:24:b1:84:c7:b7:dd:
         d9:b6:22:87:8f:bd:3d:83:e5:47:e9:85:d6:73:d9:c9:f2:ff:
         9e:c4:3c:f3:ea:d7:cd:9e:89:04:0e:10:ce:d5:5a:8e:0f:1f:
         4f:43:4d:49:3e:25:36:fd:8a:5e:de:2a:98:06:c8:2d:a8:8b:
         a6:66:24:45:f4:47:b9:c8:68:97:4c:6f:ab:78:b7:81:bc:15:
         77:36:ff:64:04:b9:f4:e5:ae:97:fc:5d:81:a9:d1:82:4b:6b:
         01:00:b0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:02 2024 by rpki-client on console-fra.rpki-client.org