Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/a33e8454-ea13-3438-bf3a-1467f7f687ad.roa
File:                     a33e8454-ea13-3438-bf3a-1467f7f687ad.roa (raw, json)
Hash identifier:          SppBCcvF0y7PRbIiVqCZVl+eqf8v4j3iwjpQQ6xjiTs=
Subject key identifier:   97:27:11:03:12:FF:D0:72:39:A9:5E:A8:B5:5E:67:5D:B2:E6:DC:84
Certificate issuer:       /CN=daef5cc1-9697-4016-a7b1-84106520128a
Certificate serial:       010D0C9F4328584574B320C9E699372DC0E97600
Authority key identifier: 53:91:25:7C:64:0A:83:E7:94:79:F2:84:E6:CA:D3:67:4D:0A:25:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/a33e8454-ea13-3438-bf3a-1467f7f687ad.roa
Signing time:             Sat 06 Apr 2024 13:00:35 +0000
ROA not before:           Sat 06 Apr 2024 13:00:35 +0000
ROA not after:            Fri 05 Jul 2024 13:00:35 +0000
asID:                     36318
IP address blocks:        2602:815:9000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:74:b3:20:c9:e6:99:37:2d:c0:e9:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daef5cc1-9697-4016-a7b1-84106520128a
        Validity
            Not Before: Apr  6 13:00:35 2024 GMT
            Not After : Jul  5 13:00:35 2024 GMT
        Subject: CN=223315f8-2f8d-4a53-854f-db66dc8b5953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:14:58:d2:9e:f9:7a:e4:ea:ea:af:9a:96:8a:
                    45:61:72:1d:6f:5b:97:9e:cd:2c:86:7c:1e:f6:f3:
                    0d:24:91:6e:a2:ee:a9:b5:e9:39:65:56:d0:13:fa:
                    3a:af:43:77:af:a9:a9:a8:87:3f:83:71:36:6c:45:
                    a2:17:47:75:c9:85:71:e4:b9:bd:7b:c2:0e:44:0d:
                    9b:8e:2c:1e:ee:33:10:b8:23:c7:a2:02:5d:cf:52:
                    d2:e2:e1:2d:9b:5e:0a:58:64:24:a6:d6:80:50:6e:
                    cd:14:50:ee:60:0b:2c:ec:0b:ea:1d:1d:71:7a:58:
                    29:65:53:b7:d5:d5:f7:b6:ae:46:24:a1:d3:87:03:
                    42:d5:52:58:51:57:5e:b0:5b:44:c2:4f:e0:05:91:
                    81:44:02:99:a1:16:28:2a:57:dc:bf:2f:19:3c:b6:
                    cc:7e:8a:8b:fc:b5:e6:fa:fd:3d:7f:ff:1a:47:1f:
                    66:57:95:8e:da:74:5b:57:bc:ed:44:de:ce:1a:41:
                    24:71:6a:cc:42:d8:8e:6f:70:bc:ff:44:29:ee:0f:
                    60:8d:d0:76:a0:ea:09:4e:b7:8a:c4:ce:bc:f1:1d:
                    dd:a7:48:58:c9:83:2c:25:92:ac:a5:31:25:21:f9:
                    fc:28:91:3e:27:91:d3:4b:f1:ec:b8:17:3a:51:35:
                    d8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:27:11:03:12:FF:D0:72:39:A9:5E:A8:B5:5E:67:5D:B2:E6:DC:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/a33e8454-ea13-3438-bf3a-1467f7f687ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.crl

            X509v3 Authority Key Identifier:
                keyid:53:91:25:7C:64:0A:83:E7:94:79:F2:84:E6:CA:D3:67:4D:0A:25:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:815:9000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:bb:6b:4a:fc:bf:33:0c:f4:d6:dd:b1:e0:d0:58:51:9c:24:
         f0:db:04:28:50:51:aa:86:90:e7:b1:73:4d:12:4c:3e:18:71:
         3e:01:16:f5:00:c6:56:ee:3e:4b:25:4a:33:97:d1:d8:12:57:
         3c:3d:b7:22:34:77:30:45:99:84:83:67:dd:5b:79:55:fe:16:
         5c:2a:e6:d4:bc:65:be:e7:fa:39:62:99:af:f7:8e:2c:f9:df:
         3c:4f:fc:e1:1a:3e:c1:3d:50:28:df:2e:67:73:dc:8a:cd:0f:
         7e:12:b5:03:02:6d:b4:5c:fa:c9:74:c8:d6:b6:fa:8e:03:cd:
         4d:3c:b5:93:c3:0d:93:f9:58:24:d5:e1:d9:81:7f:2d:60:42:
         a6:5e:c8:be:8c:25:36:24:b0:f3:13:36:3c:3a:37:96:e5:44:
         75:f8:2b:82:d1:22:8c:c6:0d:54:0a:a5:ca:20:ad:96:38:3d:
         21:56:a7:27:7c:9e:ee:f6:89:73:26:aa:71:21:1c:3d:72:ed:
         2d:92:b4:70:0e:ef:d2:3c:7e:0d:c8:31:7b:3b:9d:f2:79:69:
         1f:c4:2d:46:80:2b:d8:c9:1c:b7:27:ca:7a:cb:3f:ac:46:da:
         f4:65:79:b8:d5:51:97:31:04:89:29:59:de:35:bd:68:ab:92:
         3a:27:f1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:48 2024 by rpki-client on console-fra.rpki-client.org