Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/8dc7216f-3399-3b26-a916-b6d939f9e2d4.roa
File:                     8dc7216f-3399-3b26-a916-b6d939f9e2d4.roa (raw, json)
Hash identifier:          646TIuVbfxLaZBaF3ZxNqDWk1RHtYIBWG5rScDSsNKc=
Subject key identifier:   A1:CD:46:AD:1F:E2:8D:2A:31:FF:35:C8:43:25:48:0D:75:D6:D5:9F
Certificate issuer:       /CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
Certificate serial:       010D0C9F4328584391BAA17DE31AA2F39B0A4000
Authority key identifier: 17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/8dc7216f-3399-3b26-a916-b6d939f9e2d4.roa
Signing time:             Mon 16 Oct 2023 13:00:21 +0000
ROA not before:           Mon 16 Oct 2023 13:00:21 +0000
ROA not after:            Sun 14 Jan 2024 14:00:21 +0000
asID:                     398351
IP address blocks:        2602:80a:2014::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Oct 2023 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:91:ba:a1:7d:e3:1a:a2:f3:9b:0a:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
        Validity
            Not Before: Oct 16 13:00:21 2023 GMT
            Not After : Jan 14 14:00:21 2024 GMT
        Subject: CN=cff6dbb0-64c2-4bdd-9807-13c64cb87bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bc:ea:8d:cb:31:c2:4a:60:97:48:63:4e:7a:
                    d2:66:7c:18:ac:8b:6d:8f:eb:8e:0a:54:8d:c4:c1:
                    6e:57:04:10:62:54:a4:52:30:54:9d:d1:f7:cf:d4:
                    13:dc:6f:d4:7b:8e:d9:8f:72:dd:e2:29:7c:52:75:
                    c0:46:57:48:01:75:46:63:4f:94:69:01:6d:7f:2b:
                    17:e3:86:2f:26:db:3b:9e:9e:e1:2d:02:78:43:92:
                    af:04:b1:59:17:c5:38:4f:33:77:d7:b3:3f:da:09:
                    7e:e4:39:d5:1e:de:09:f5:6d:79:d1:f1:30:58:b8:
                    0d:77:8e:d8:aa:b7:e2:01:0b:83:11:0b:aa:5e:d1:
                    47:f0:f8:b2:15:fd:c1:af:12:55:8d:22:80:a3:e9:
                    7f:ea:7e:84:7c:01:e2:38:64:a6:40:a4:1f:7b:0d:
                    dc:b7:cf:41:33:9b:c6:01:7e:27:52:b8:ea:28:31:
                    6d:33:72:d4:08:bd:e5:1f:d1:6a:0a:78:e3:ae:3d:
                    1b:e2:33:94:ac:fe:ed:ff:3f:f7:fa:bb:31:f7:ff:
                    cb:e8:0f:05:4f:0d:06:89:a7:68:4c:33:47:26:28:
                    77:f9:25:ab:c2:0a:f6:25:3b:f2:75:ea:21:e8:b4:
                    70:74:03:1f:1f:24:4d:2e:d5:35:80:0f:2f:89:cf:
                    9d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CD:46:AD:1F:E2:8D:2A:31:FF:35:C8:43:25:48:0D:75:D6:D5:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/8dc7216f-3399-3b26-a916-b6d939f9e2d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.crl

            X509v3 Authority Key Identifier:
                keyid:17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80a:2014::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:3a:e7:4d:92:1e:22:63:f4:0d:59:97:23:75:9b:b3:b7:ee:
         a2:16:8e:2b:55:cd:de:7f:20:28:1b:11:b7:e5:47:1f:e6:c0:
         cc:6d:05:4e:90:84:a1:3d:99:e6:72:60:25:cd:71:6f:5b:69:
         06:ca:5b:24:a2:52:1d:87:fb:18:06:fd:23:24:5a:f0:06:9f:
         cf:b7:17:75:f0:5f:fa:1b:6f:62:b7:c0:4e:78:6c:16:b1:85:
         bb:aa:6d:cd:66:a7:bb:aa:28:90:d9:5e:13:e8:77:1c:ec:11:
         64:4f:df:26:93:06:b6:3a:7f:a7:d0:b8:06:fc:e2:2b:07:fd:
         d6:f9:33:bd:30:3b:94:1c:dc:2d:57:b4:31:60:0e:07:da:aa:
         38:b0:7f:f9:d9:55:38:ba:bc:46:67:8a:1c:b7:71:7d:96:c5:
         ee:0f:01:1a:f6:1b:e5:25:6f:69:f2:9c:ae:97:7c:b7:89:2b:
         40:2d:1a:5a:38:76:43:e1:be:40:70:de:59:e2:da:0d:70:43:
         d7:ee:66:3a:9f:7c:9e:60:b6:ed:b7:72:29:1f:23:ea:4f:da:
         dc:3b:5e:d4:09:22:0b:95:52:3f:c9:87:3e:27:31:0a:e0:e2:
         06:0f:ad:b5:03:a5:17:92:05:e6:68:3f:db:5b:1c:7b:a7:7c:
         a5:97:fc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 16 13:23:29 2023 by rpki-client on console-fra.rpki-client.org