Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/efb59abe-2c1c-35a3-9a19-c9a5be46b235.roa
File:                     efb59abe-2c1c-35a3-9a19-c9a5be46b235.roa (raw, json)
Hash identifier:          IW/JPDKBVRby/2EmpAKRpVDfjqllpA3dhiy/iJQNi/M=
Subject key identifier:   9A:B2:39:6B:8B:27:EB:B5:6A:28:A9:39:BE:F6:F7:26:38:85:F7:02
Certificate issuer:       /CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db
Certificate serial:       010D0C9F432858457A486EA46B3FEE8C1EA80E80
Authority key identifier: 03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/efb59abe-2c1c-35a3-9a19-c9a5be46b235.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        2602:808:4001::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:6e:a4:6b:3f:ee:8c:1e:a8:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=482e497b-c03f-45bd-9b22-a3f66f8cc862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ec:63:d8:84:fb:2c:25:b8:14:46:92:e9:18:
                    49:cf:c6:4b:66:c7:89:50:10:83:57:c7:c2:65:33:
                    5d:d5:24:c9:b1:b9:20:75:ff:7c:ec:a3:01:0c:9f:
                    f3:dd:d5:50:c7:bb:a3:6e:57:28:55:a3:bd:d0:85:
                    c3:0e:2b:0f:b2:b8:0d:a0:df:3b:22:f0:39:a1:1d:
                    1d:ae:c1:13:2b:ac:2c:ac:82:04:df:e0:65:64:d7:
                    5d:27:8f:7e:d9:4f:a4:23:80:0e:e5:ec:5c:9e:38:
                    12:78:94:45:24:f2:e2:ae:98:b2:bc:1a:2f:cc:14:
                    bc:a8:cd:c0:34:ea:46:6a:b1:50:52:fc:b2:85:9a:
                    2d:1f:c2:94:4c:77:fa:59:ac:d8:ae:9f:d2:e0:da:
                    23:08:21:e2:9b:61:61:52:35:9a:2f:ac:c1:2f:5f:
                    0f:f4:2c:22:51:36:6c:cf:79:74:65:9e:6d:5a:4c:
                    45:f5:2d:b6:cf:e9:3b:d0:73:76:95:81:c8:ef:ab:
                    69:59:d2:d2:48:eb:2b:1d:9e:75:f2:5f:56:98:e5:
                    38:34:b2:e2:ee:b5:94:a4:83:ed:5b:80:08:10:88:
                    9c:82:64:a1:cd:ae:51:6b:c3:5c:15:b0:38:cd:7f:
                    86:71:c6:ce:56:0c:eb:b9:d6:8b:69:67:98:40:3f:
                    e6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B2:39:6B:8B:27:EB:B5:6A:28:A9:39:BE:F6:F7:26:38:85:F7:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/efb59abe-2c1c-35a3-9a19-c9a5be46b235.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl

            X509v3 Authority Key Identifier:
                keyid:03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:808:4001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:7b:de:bb:31:b0:bf:d4:14:40:e8:2a:b7:02:af:39:6d:9b:
         57:4a:07:67:ef:30:05:0e:9f:c7:cb:60:b3:cc:94:7b:6b:eb:
         fc:8f:ed:02:05:d8:24:f3:f0:e8:61:49:fb:c7:45:94:9d:d4:
         cb:88:51:cd:c8:bf:59:b9:2b:8a:bf:13:da:47:de:09:5a:48:
         fb:97:77:63:a2:72:11:0c:5a:e4:f5:3a:85:41:b9:01:b3:8e:
         f8:cd:ba:09:f1:33:cb:e3:fa:3b:92:59:fc:b3:35:0e:9f:60:
         12:69:d2:b5:56:d8:83:86:a1:83:a5:9c:63:b2:84:94:12:cf:
         c7:9f:62:29:a7:f0:e5:6c:09:e6:4a:94:2d:e9:1d:e2:ca:c1:
         2d:d8:23:58:38:8b:40:74:54:e8:86:49:ed:d8:a2:44:ac:d0:
         26:f7:4f:00:56:2f:20:6c:d0:58:94:cb:d5:77:0c:65:0d:fb:
         81:93:8b:c5:c2:cc:23:fa:4e:a6:e9:7c:dd:bd:6d:fd:7c:a0:
         34:96:f7:6e:0a:01:20:d0:c5:3a:4d:90:7f:e4:3a:87:be:32:
         db:fe:1b:5e:2f:5a:b3:e1:28:c0:79:46:22:bb:cf:c1:99:3f:
         70:6d:e0:00:b4:86:d0:92:43:69:a4:28:b8:e0:7b:f1:e5:31:
         e8:45:66:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:21:51 2024 by rpki-client on console-ams.rpki-client.org