Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/1d0ec1b5-ab7d-3cdd-b16c-fbaf52c6c834.roa
File:                     1d0ec1b5-ab7d-3cdd-b16c-fbaf52c6c834.roa (raw, json)
Hash identifier:          hEK9WR8ZO5GhjpTS4tWrD89IK94//jlRJCxBbAjs+3s=
Subject key identifier:   B1:85:47:B8:BA:B5:63:1C:91:A2:EF:8E:00:C1:39:03:00:08:2A:B6
Certificate issuer:       /CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd
Certificate serial:       010D0C9F43285845C873A8F2DA8A519632978000
Authority key identifier: F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/1d0ec1b5-ab7d-3cdd-b16c-fbaf52c6c834.roa
Signing time:             Mon 06 May 2024 13:00:34 +0000
ROA not before:           Mon 06 May 2024 13:00:34 +0000
ROA not after:            Sun 04 Aug 2024 13:00:34 +0000
asID:                     968
IP address blocks:        2602:809:3004::/48 maxlen: 48
                          2602:809:3005::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:73:a8:f2:da:8a:51:96:32:97:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd
        Validity
            Not Before: May  6 13:00:34 2024 GMT
            Not After : Aug  4 13:00:34 2024 GMT
        Subject: CN=78965eac-5f40-469b-9689-bdf217d60d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d6:1f:09:29:2b:68:60:a0:93:88:46:c7:3a:
                    ee:51:22:a1:b2:a1:9c:af:a9:4a:5a:5e:24:cf:9d:
                    d9:c6:aa:17:bf:9b:68:1c:b2:4a:7d:53:ef:e9:3e:
                    dc:a6:cd:9e:e4:ad:a6:03:e9:2a:19:f1:e5:75:30:
                    35:c4:80:d6:59:fa:be:95:ec:90:c2:a1:ff:e4:d0:
                    4e:59:94:6c:3a:70:8c:99:6d:fe:a2:1d:ac:f8:1b:
                    a4:40:19:2b:65:ef:f7:38:46:5c:cf:04:5a:2b:35:
                    a8:5f:4c:a9:46:21:10:6f:01:b6:bc:a1:a9:7e:cc:
                    71:c0:0e:a4:7d:12:52:37:30:e7:6d:41:fe:17:fa:
                    ed:23:06:29:68:f5:ec:9b:a8:20:49:1e:3e:ba:57:
                    b5:f6:77:0d:d3:d7:b6:5f:6a:d2:61:6f:f1:24:41:
                    a7:52:db:73:e9:d2:43:72:8b:98:a7:2e:4a:b1:61:
                    46:71:5f:a7:26:0c:cf:09:e1:80:a8:51:03:24:a2:
                    1f:3f:e8:ff:9b:6d:48:b0:ee:bc:e9:f7:57:5f:fe:
                    07:7c:5e:7a:7f:71:ea:a5:a4:d0:33:a0:d9:b2:f9:
                    e3:06:5e:e5:0b:3f:94:81:89:ba:82:e5:d3:ee:5e:
                    37:31:ca:03:c9:e4:2f:a4:df:3b:f7:8c:49:de:1d:
                    f8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:85:47:B8:BA:B5:63:1C:91:A2:EF:8E:00:C1:39:03:00:08:2A:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/1d0ec1b5-ab7d-3cdd-b16c-fbaf52c6c834.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.crl

            X509v3 Authority Key Identifier:
                keyid:F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:809:3004::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:4a:1a:b6:43:36:15:87:1e:4f:fe:8f:37:53:90:f7:64:71:
         a5:4b:37:fd:02:24:56:1d:84:56:f5:15:ea:57:36:c0:01:97:
         9c:b7:14:1a:e7:14:bc:0d:e9:09:3d:cd:5d:1b:fa:03:c1:05:
         b8:6a:35:44:5d:86:45:c0:a9:dd:93:cd:bf:90:92:3d:8b:ee:
         14:e9:46:8b:a4:ad:e7:b5:db:3b:0a:c4:30:90:5e:57:0d:a0:
         1d:34:0d:51:ca:e8:ba:8e:e0:ac:5a:79:0a:a1:8f:78:e8:ae:
         00:36:ed:08:71:4a:dc:71:15:54:40:24:c5:2e:e0:b5:d6:6f:
         75:25:49:e1:0e:9f:33:f8:e5:ad:7c:ab:63:36:87:80:cd:d9:
         55:26:76:07:4c:a2:65:87:db:72:d9:99:79:e6:0e:55:a9:5c:
         aa:fc:de:1d:ee:44:88:70:98:00:05:6a:9f:06:29:86:a7:61:
         48:65:03:0a:5c:57:03:ad:5f:59:30:54:8a:07:14:85:47:70:
         4b:2b:92:09:f8:8f:bf:bb:94:9c:e7:7a:b5:7b:49:9b:7a:48:
         31:30:67:33:06:5c:6a:b1:5b:dc:a1:17:33:48:d2:55:12:e4:
         5e:74:73:45:68:7a:5a:dc:b2:9a:5e:0c:27:c1:78:af:66:dc:
         00:a6:94:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:55:24 2024 by rpki-client on console-fra.rpki-client.org