Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/56ae6aa5-42ec-366f-a57b-fd47dd864352.roa
File:                     56ae6aa5-42ec-366f-a57b-fd47dd864352.roa (raw, json)
Hash identifier:          fO2JL00VoIafBCYSE67IJAGJUY5AihmTyV7Y8xCXkN8=
Subject key identifier:   AC:BC:9C:C0:25:E8:33:D8:8C:B0:76:B2:C3:C6:2C:7F:C1:AD:58:A3
Certificate issuer:       /CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db
Certificate serial:       010D0C9F432858457A48671DD51F8C6A89AB9B00
Authority key identifier: 03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/56ae6aa5-42ec-366f-a57b-fd47dd864352.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        2602:808:4002::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:67:1d:d5:1f:8c:6a:89:ab:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=ef37b43f-7fde-4acc-8263-157c26faad08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e1:21:92:64:a9:2f:e3:82:96:7b:26:73:29:
                    cf:f4:24:ce:ba:b7:b3:9f:23:49:65:a3:bd:50:fe:
                    bd:a5:09:87:d4:14:38:86:c9:7e:42:96:47:d0:91:
                    b3:90:18:3c:75:99:0b:66:d1:88:ae:ab:1b:a7:44:
                    a2:ac:0e:92:a8:4f:04:c1:1a:e4:f2:49:ba:3d:08:
                    75:a8:b3:10:31:47:ea:6a:03:a5:e4:28:5f:f8:37:
                    6b:8a:ef:c6:bc:f4:1e:9b:ce:00:49:56:19:10:79:
                    f9:04:92:62:dd:0e:eb:e6:7f:37:f2:8c:2c:9e:0e:
                    97:ec:95:89:21:7e:1a:ce:c2:5b:56:b4:36:2d:7a:
                    ff:33:55:b7:2b:c7:6a:de:93:1b:9a:d9:09:f4:cd:
                    7f:85:2d:92:0a:e5:c3:0c:39:90:86:ba:78:22:75:
                    59:f2:e7:21:49:0e:f1:61:61:04:19:1c:4b:26:f1:
                    d2:b2:5b:2a:35:10:b8:b3:19:ed:e0:4c:93:4b:cf:
                    57:d0:fb:73:89:39:af:86:9b:97:53:08:7f:29:d1:
                    19:ab:45:ff:b5:6d:c8:2c:59:1f:7d:e2:00:ca:ad:
                    d9:c9:48:ee:8a:ea:95:e8:44:21:33:ec:f2:5c:95:
                    68:ea:68:44:93:a7:0b:35:cf:84:62:a6:e8:0b:ee:
                    6d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BC:9C:C0:25:E8:33:D8:8C:B0:76:B2:C3:C6:2C:7F:C1:AD:58:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/56ae6aa5-42ec-366f-a57b-fd47dd864352.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl

            X509v3 Authority Key Identifier:
                keyid:03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:808:4002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:be:80:63:e4:9c:18:15:43:6a:ca:a5:ef:82:1a:b6:de:57:
         86:6f:69:c3:0d:9f:a1:2b:2c:43:b8:53:69:b8:4d:59:a7:19:
         26:60:88:32:fb:59:36:cb:c0:f8:b6:60:4b:92:f0:c6:de:38:
         a3:3c:28:bd:f2:d1:07:e0:21:2e:a1:59:1b:c8:f6:6a:b3:7e:
         9c:63:78:75:0e:43:99:c5:9a:d3:e5:1c:59:af:a8:de:c8:e9:
         95:74:28:a4:63:11:9f:fd:3f:ed:11:42:4c:fb:df:f2:70:4a:
         73:25:3c:e7:4d:b7:1c:c5:d1:84:1e:a6:3f:33:84:9d:1b:45:
         f3:2a:18:ce:12:95:14:cb:15:10:9a:0d:2d:a2:89:3b:e0:41:
         dd:ae:ef:53:48:c6:f7:ef:c2:b2:3f:e6:86:26:35:5f:ba:49:
         be:28:62:e8:f3:50:de:0e:97:d8:34:b3:9a:84:2a:c6:ff:a6:
         e5:fc:eb:64:f5:f5:af:bd:53:29:ca:97:58:d1:8c:1e:dc:6f:
         06:3e:a3:85:fa:ac:41:d8:69:31:05:f5:67:ed:fd:09:db:96:
         2c:20:41:1d:f1:ac:20:b3:e4:e7:b1:ab:c2:c7:da:54:b6:71:
         4b:16:76:4c:13:2b:fe:9b:b5:99:88:0a:3d:c3:25:d1:0a:e2:
         52:21:37:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:03:59 2024 by rpki-client on console-fra.rpki-client.org