Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/3d7daaee-632b-306e-bcb0-783ea2fb4061.roa
File:                     3d7daaee-632b-306e-bcb0-783ea2fb4061.roa (raw, json)
Hash identifier:          WXAwHgHEI1UoUxw+Sd6/sfu0MXP5JryBf7NFqBKvfUY=
Subject key identifier:   94:9E:2E:EC:EF:3B:F8:DE:92:9C:63:E3:A5:50:12:2A:34:3E:C2:00
Certificate issuer:       /CN=ab3f3ae8-1db7-413e-9713-ab05c3fa5d75
Certificate serial:       010D0C9F43285845F51E970C0DEC627106387620
Authority key identifier: 10:C3:83:01:E1:40:17:0E:14:D9:BF:C7:7D:C7:8B:B3:D8:1B:74:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/3d7daaee-632b-306e-bcb0-783ea2fb4061.roa
Signing time:             Wed 22 May 2024 13:00:33 +0000
ROA not before:           Wed 22 May 2024 13:00:33 +0000
ROA not after:            Tue 20 Aug 2024 13:00:33 +0000
asID:                     23368
IP address blocks:        2602:fa60::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f5:1e:97:0c:0d:ec:62:71:06:38:76:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab3f3ae8-1db7-413e-9713-ab05c3fa5d75
        Validity
            Not Before: May 22 13:00:33 2024 GMT
            Not After : Aug 20 13:00:33 2024 GMT
        Subject: CN=bc5ae295-dd82-4cf2-b8dd-b10f7a4cde87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ce:75:33:5f:93:93:01:11:4f:e1:5d:db:9f:
                    19:f0:02:f8:46:d2:4f:c2:be:95:a3:72:4c:5f:07:
                    26:52:4a:79:78:cb:fd:46:ba:a1:b4:7d:0d:e0:6d:
                    55:cc:86:28:39:56:f8:d5:b7:fc:42:3d:fc:86:39:
                    db:78:7f:bf:13:e0:68:85:8d:f6:db:2e:05:8d:22:
                    61:41:59:c6:9e:aa:7e:3f:ca:71:b5:fa:c3:30:de:
                    a5:d8:06:d9:eb:da:ff:e3:ba:e7:95:ff:da:b1:82:
                    3a:9b:d0:61:3e:f3:75:b1:fa:71:35:fc:41:51:79:
                    ca:4d:b3:16:5f:30:32:fa:98:ad:ac:ca:d2:a5:c0:
                    72:19:e8:ca:c0:29:34:45:6e:e6:2e:1b:93:ac:4f:
                    ed:55:64:bb:b9:c8:91:29:cc:89:cb:cb:8c:29:53:
                    c1:ba:98:d2:63:7c:52:76:c9:e7:7a:bd:9b:a0:47:
                    c1:8f:fa:d8:0d:5c:33:1e:f4:20:b6:36:b5:fc:bb:
                    08:fe:ee:10:d9:a6:56:75:c2:26:7f:ec:65:bf:e3:
                    71:76:80:d8:a1:36:be:3c:f0:33:e7:8d:d1:2a:a2:
                    52:f1:f6:92:06:16:cf:fb:64:be:01:5a:ab:e6:6c:
                    f4:42:37:69:27:7d:66:4c:28:00:57:77:56:23:69:
                    e9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:9E:2E:EC:EF:3B:F8:DE:92:9C:63:E3:A5:50:12:2A:34:3E:C2:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/3d7daaee-632b-306e-bcb0-783ea2fb4061.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.crl

            X509v3 Authority Key Identifier:
                keyid:10:C3:83:01:E1:40:17:0E:14:D9:BF:C7:7D:C7:8B:B3:D8:1B:74:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa60::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:3f:cc:4e:d1:15:b4:ef:98:88:ff:1e:6f:ea:b8:ce:7c:90:
         14:90:05:14:0d:3f:e7:d6:f7:b2:f6:70:8b:e1:80:46:64:d5:
         00:1b:12:3d:c5:d1:41:bf:c2:45:7d:cf:ba:c8:af:16:d0:fe:
         1a:80:0e:4f:51:e2:7f:e7:c6:0a:5e:d8:91:92:a6:35:db:8d:
         a9:fd:95:5b:25:27:dd:3d:ba:83:a7:d6:f8:08:4c:4e:3f:eb:
         f6:6b:8f:86:65:f7:ce:6e:4f:8c:ca:ee:ca:0f:b4:72:97:b8:
         f3:58:98:44:1d:fd:72:83:74:a8:29:75:fa:f1:b0:96:2c:ac:
         ee:61:36:8a:e7:3f:62:c0:9a:88:7e:30:31:bb:7a:ac:9e:26:
         a8:d2:aa:9c:7b:94:b7:02:9d:92:49:4a:a5:e2:57:cd:e6:f2:
         3d:0c:97:3c:1f:15:00:fa:0f:11:74:12:e0:c7:07:62:c7:ea:
         00:69:3d:3c:8b:45:36:9b:83:4d:14:8d:f5:63:3d:e9:23:ba:
         64:a6:3b:77:82:63:f7:93:5c:5e:3b:d1:08:d5:33:b9:46:02:
         5a:54:57:3e:14:32:07:c8:f0:73:04:68:b5:ff:fa:f2:58:27:
         f5:f7:4e:cb:1e:b1:9f:b8:48:7a:92:fb:a5:24:4b:01:b3:22:
         65:85:22:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 21:00:17 2024 by rpki-client on console-fra.rpki-client.org