Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/ca868e76-7e6e-3c1a-addd-82e56c8b3c5a.roa
File:                     ca868e76-7e6e-3c1a-addd-82e56c8b3c5a.roa (raw, json)
Hash identifier:          2LHmEMIBbPW/rkNAkOm/jMrKM9s9/baqB0kWm1W0KaY=
Subject key identifier:   4C:8E:03:11:0A:9E:4A:CE:20:D1:E3:54:1D:79:60:1D:33:EF:2A:01
Certificate issuer:       /CN=eaefdd80-35cf-47b1-945a-5fab92c9da95
Certificate serial:       010D0C9F43285845A7C5E727F631B1EFC9102400
Authority key identifier: FC:17:CF:86:90:FB:23:FB:E6:01:ED:E5:0A:04:0D:AC:15:BB:45:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/ca868e76-7e6e-3c1a-addd-82e56c8b3c5a.roa
Signing time:             Wed 24 Apr 2024 20:04:49 +0000
ROA not before:           Wed 24 Apr 2024 20:04:49 +0000
ROA not after:            Tue 23 Jul 2024 20:04:49 +0000
asID:                     215207
IP address blocks:        2602:fbcf:d0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a7:c5:e7:27:f6:31:b1:ef:c9:10:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaefdd80-35cf-47b1-945a-5fab92c9da95
        Validity
            Not Before: Apr 24 20:04:49 2024 GMT
            Not After : Jul 23 20:04:49 2024 GMT
        Subject: CN=e8cf3af7-bb3c-45dd-99a9-253d5aae434f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:24:01:98:15:0e:3e:48:02:dc:b6:c0:27:85:
                    8b:f4:cb:59:29:4c:1e:d2:54:8a:20:40:99:7e:9c:
                    74:71:75:78:58:c5:c1:fe:dc:33:69:64:01:65:8e:
                    1c:84:b9:6a:24:2e:89:68:b0:b7:a0:a0:98:20:e8:
                    89:44:fb:25:7f:c9:16:44:66:6f:d2:ca:ec:87:77:
                    61:ed:12:7f:34:a2:ad:d7:50:75:8c:25:c6:da:df:
                    5e:c7:69:06:9a:c5:5f:3f:d1:6f:2b:d6:58:7b:6d:
                    23:d7:fb:34:d1:e6:2f:2e:d0:99:5d:d5:f1:eb:d4:
                    b6:0b:41:c1:18:81:06:cc:4a:f6:9b:bb:63:3f:4c:
                    3c:cc:d0:20:29:bd:45:72:97:55:6c:b2:bc:ad:d3:
                    e5:52:d1:52:3b:92:aa:7d:67:9e:d7:a5:99:23:80:
                    54:7a:bc:28:08:b1:5e:b7:25:26:80:54:7a:a0:3b:
                    7b:1c:64:18:87:1f:98:5b:87:69:23:ec:3e:ff:47:
                    46:34:31:61:89:ce:8a:3e:12:c2:c2:c5:e4:00:3f:
                    e8:1a:eb:69:92:2a:b4:ff:f7:7f:dc:63:26:8d:cf:
                    11:0d:f0:7c:70:c7:7a:56:3c:28:45:0f:86:e1:e2:
                    95:7f:f3:88:67:5e:10:2f:ff:b3:98:57:d1:95:ba:
                    8c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8E:03:11:0A:9E:4A:CE:20:D1:E3:54:1D:79:60:1D:33:EF:2A:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/ca868e76-7e6e-3c1a-addd-82e56c8b3c5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.crl

            X509v3 Authority Key Identifier:
                keyid:FC:17:CF:86:90:FB:23:FB:E6:01:ED:E5:0A:04:0D:AC:15:BB:45:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbcf:d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:b5:b2:d9:eb:9f:9c:a8:93:56:be:26:f0:23:5e:fb:a3:4b:
         35:3d:d8:a5:a4:7a:c1:fb:5b:b9:6b:88:19:ee:81:21:fc:54:
         52:f6:42:df:c7:ef:33:bc:34:94:f4:52:17:32:40:24:68:2b:
         08:4c:fd:d0:0d:63:fa:aa:f1:90:bb:2b:92:17:04:02:65:c8:
         94:2e:74:67:7f:ac:b9:a9:5d:e4:62:d9:98:98:b6:09:e1:08:
         70:a6:a8:d0:6a:d1:b0:6f:c4:23:1c:4b:1c:4f:92:8f:7c:25:
         d7:c4:74:8f:32:e1:5f:11:04:29:d7:2d:9f:26:26:d0:49:81:
         b2:8c:d7:31:67:00:e2:c7:35:70:31:bf:20:31:07:c4:e9:f3:
         78:7a:01:5b:b4:60:ce:1b:ce:33:74:92:c9:15:86:de:90:aa:
         e5:38:11:ba:ab:35:28:4a:cb:dd:3a:2d:43:69:0e:c8:9a:fb:
         b0:8f:3f:22:7d:99:b2:98:da:22:16:d1:47:cd:61:2f:ad:b2:
         a0:bf:5c:50:c7:12:4f:ca:99:22:2a:0f:27:f1:20:12:72:10:
         bc:f2:fd:17:ea:f8:cf:4c:af:96:1e:c5:e2:4e:f5:b8:21:23:
         46:b2:90:c0:3d:d0:66:7d:12:ab:24:01:25:d9:ea:fa:11:01:
         32:3a:ef:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:35:21 2024 by rpki-client on console-ams.rpki-client.org