Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/a50faf7e-80ed-3540-8863-2e3533723c21.roa
File:                     a50faf7e-80ed-3540-8863-2e3533723c21.roa (raw, json)
Hash identifier:          VvgZO5s2SMhW8zIks43by7Pe6FNjKsubHRaVBPfKo9s=
Subject key identifier:   4F:2E:0C:79:D9:C2:B0:53:58:B3:04:E9:54:2D:B4:0C:FD:67:03:86
Certificate issuer:       /CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073
Certificate serial:       010D0C9F432858453CDD5F821EFD530937E096A0
Authority key identifier: 2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/a50faf7e-80ed-3540-8863-2e3533723c21.roa
Signing time:             Sun 17 Mar 2024 13:00:30 +0000
ROA not before:           Sun 17 Mar 2024 13:00:30 +0000
ROA not after:            Sat 15 Jun 2024 13:00:30 +0000
asID:                     3356
IP address blocks:        2602:814:b000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3c:dd:5f:82:1e:fd:53:09:37:e0:96:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073
        Validity
            Not Before: Mar 17 13:00:30 2024 GMT
            Not After : Jun 15 13:00:30 2024 GMT
        Subject: CN=ac182b8d-ee99-41ba-acea-e7111ba695b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:80:4c:b0:e3:c0:d5:24:04:0f:89:5d:4e:07:
                    9b:f4:fc:22:f9:a0:5e:ec:e4:d8:6f:a1:9e:16:6d:
                    dc:70:8f:7e:81:83:94:d5:9e:35:d4:dc:c0:7a:1f:
                    a3:ae:2f:ef:74:ff:80:81:47:b0:6d:3a:11:a1:3f:
                    1c:66:77:2c:cb:31:d6:30:20:80:da:90:e0:f1:e1:
                    61:7e:7c:ef:f4:de:63:65:9f:24:3b:d9:c3:a6:25:
                    d2:c2:9e:6c:9d:6f:8a:fe:3f:cb:51:33:53:b0:7f:
                    7e:8c:00:a6:91:12:73:0d:49:ed:7f:14:76:c7:20:
                    53:da:87:13:a0:31:fe:17:f8:03:d8:96:a5:42:92:
                    d1:10:56:6f:dd:b6:c4:22:2d:b8:78:c5:81:fc:c7:
                    d5:b1:11:c8:d5:00:18:0d:bc:68:ae:77:07:0a:55:
                    ab:38:2b:3c:3d:89:b4:34:45:9e:7c:e7:fc:b4:f7:
                    5d:83:88:8c:b1:48:84:cf:bc:09:6e:cf:0e:a4:ab:
                    ee:b4:9d:1e:e1:64:b4:d6:60:cf:11:ce:60:86:12:
                    03:94:6a:50:b4:35:90:7e:3b:7e:dc:ac:98:e0:b4:
                    73:d2:42:b2:a4:62:cc:b8:64:96:cd:6f:bc:bf:a1:
                    74:ef:83:f8:19:47:20:ef:6c:19:5b:69:07:57:1b:
                    e7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2E:0C:79:D9:C2:B0:53:58:B3:04:E9:54:2D:B4:0C:FD:67:03:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/a50faf7e-80ed-3540-8863-2e3533723c21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl

            X509v3 Authority Key Identifier:
                keyid:2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:814:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:cd:75:b1:b9:12:d1:93:96:5c:2c:f8:ee:d8:d4:6f:17:35:
         d8:56:d5:44:b5:59:e9:15:4e:e8:02:d8:ab:3c:17:72:41:e1:
         0e:c3:30:ce:91:73:39:d4:5b:94:24:dc:54:d7:60:50:73:a5:
         dc:c9:7a:5e:c7:c8:d8:59:a7:a1:b1:b3:9f:8a:8d:6e:81:29:
         6a:30:e2:a2:f1:ba:c7:7b:ac:c4:19:4d:bc:8c:88:50:7b:7d:
         f5:b9:c5:5d:57:5f:57:d1:8a:fe:8a:62:ba:e6:ff:44:c0:e9:
         43:a2:6a:72:73:50:43:a1:71:df:c8:2c:35:77:57:85:0e:9f:
         6e:80:9a:7f:c1:c3:39:98:c5:c0:8e:f9:18:ef:b4:25:d5:f4:
         f6:5f:17:e7:8a:c5:bf:7e:c6:21:4a:f9:38:b9:19:e7:fe:c5:
         59:92:7c:ef:92:d8:9f:42:af:f3:38:39:da:bd:98:88:91:cd:
         99:51:14:2b:97:12:f3:34:41:bf:36:0b:7f:a4:7b:a7:33:2e:
         f7:bd:59:96:db:dc:01:5f:96:4c:6e:bf:90:38:0f:f3:42:fd:
         84:21:73:7e:8d:a3:aa:3d:05:e6:19:64:ea:b8:5f:05:c3:0e:
         c3:68:93:84:c4:f7:46:53:b2:d5:36:05:dd:01:9b:4a:3a:55:
         88:2d:62:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:30:05 2024 by rpki-client on console-ams.rpki-client.org