Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/10e5814d-9913-3448-8ca3-cd262ab71cbe.roa
File:                     10e5814d-9913-3448-8ca3-cd262ab71cbe.roa (raw, json)
Hash identifier:          9JougjHh/NREoQK1PAAPjg1CYN8J2vSRov7yVX3niok=
Subject key identifier:   87:A1:3C:5B:58:3A:26:98:3B:A1:7C:3E:69:BC:36:42:E0:02:AC:67
Certificate issuer:       /CN=0edec576-87d0-4ec6-9e13-394230996e53
Certificate serial:       010D0C9F432858449414B489A2D751FD4D328E00
Authority key identifier: 55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/10e5814d-9913-3448-8ca3-cd262ab71cbe.roa
Signing time:             Wed 17 Jan 2024 02:00:24 +0000
ROA not before:           Wed 17 Jan 2024 02:00:24 +0000
ROA not after:            Tue 16 Apr 2024 01:00:24 +0000
asID:                     398493
IP address blocks:        2602:fd37:fff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:94:14:b4:89:a2:d7:51:fd:4d:32:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0edec576-87d0-4ec6-9e13-394230996e53
        Validity
            Not Before: Jan 17 02:00:24 2024 GMT
            Not After : Apr 16 01:00:24 2024 GMT
        Subject: CN=5de71033-1db1-447d-988f-f8afde0898a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:07:51:77:df:f2:52:94:d2:66:59:b1:d6:3a:
                    a8:69:e1:8e:d8:f5:03:03:9c:da:c4:68:86:a6:0f:
                    31:f5:0f:07:f4:7a:f2:70:22:ef:93:9e:5b:91:2e:
                    fb:67:dd:65:9f:85:09:bd:bf:3e:5e:b5:e4:d0:ab:
                    a1:36:55:8d:05:25:8b:28:f6:57:c5:21:37:d1:1d:
                    f0:5e:d7:ad:d3:74:2a:6b:46:ac:1a:00:75:cd:7e:
                    b1:6a:4b:ba:a3:c8:5b:29:a4:1b:8b:90:20:7e:2f:
                    15:24:94:e9:7e:75:5d:22:d2:cf:be:1c:0e:74:dd:
                    d5:de:f8:7b:63:65:69:70:ac:57:fb:cc:76:ec:88:
                    42:93:bd:f4:e3:b9:85:68:55:93:e4:cf:5f:bd:64:
                    49:35:9f:54:2f:d2:71:52:f0:a9:a5:12:02:91:1c:
                    b3:d8:96:6a:0f:46:56:d6:48:46:f4:60:eb:07:2e:
                    e3:d4:70:8b:4a:6d:93:32:2d:a8:b7:20:74:1f:a1:
                    89:e6:ab:6a:fa:93:ad:be:8e:ce:ef:dd:65:38:79:
                    ad:e5:b3:1f:5d:72:1e:5f:42:e2:2d:78:4b:9c:ae:
                    05:dd:99:9e:2d:da:43:2b:9b:2b:f1:be:41:da:cb:
                    5e:7a:68:3c:c8:bc:5f:82:c9:69:8a:4f:56:ad:5c:
                    b9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A1:3C:5B:58:3A:26:98:3B:A1:7C:3E:69:BC:36:42:E0:02:AC:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/10e5814d-9913-3448-8ca3-cd262ab71cbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl

            X509v3 Authority Key Identifier:
                keyid:55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd37:fff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:1c:39:08:48:7b:01:7f:48:da:7a:33:e5:47:b4:17:25:af:
         d2:92:9f:56:11:d8:c6:17:5a:95:8f:af:58:98:70:3e:69:a6:
         cb:b3:5c:56:db:a4:89:a6:82:54:73:e0:94:49:e0:46:54:04:
         36:a7:b8:0e:b2:59:14:2f:3d:65:54:4c:df:77:17:2b:fc:b9:
         0d:c7:a8:5e:c6:9b:2c:18:99:64:8e:32:d6:bc:83:4d:20:7a:
         1c:a5:fe:3c:13:8d:33:c5:f2:d2:4f:03:98:42:6d:76:2d:83:
         66:a9:44:56:79:ee:bb:ce:fd:df:de:cc:a9:0b:c5:a8:21:16:
         cc:0a:ec:fe:03:27:c3:46:a3:b5:ef:4c:4e:5b:49:1f:d0:36:
         a3:05:5a:5e:b0:d6:8d:ed:63:1c:ac:a0:8d:55:6d:3c:cd:66:
         cb:54:5f:c4:cd:00:d1:ee:27:6b:fd:05:58:87:55:a8:69:42:
         92:28:57:22:9a:0b:d9:38:6f:3c:23:b3:b5:5e:8e:57:28:47:
         fc:6a:ad:5a:d6:eb:9a:2b:b8:29:a9:fb:53:bf:ae:da:34:8b:
         61:3c:96:49:fe:60:3d:d8:6c:a5:14:7c:0c:da:46:39:bf:a2:
         bc:c4:88:08:f5:64:c6:de:2b:94:65:4c:c0:46:b6:41:fc:f8:
         57:2c:49:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:41:39 2024 by rpki-client on console-fra.rpki-client.org