Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/fbaa8415-b645-34e4-b7a1-72624bb1db64.roa
File:                     fbaa8415-b645-34e4-b7a1-72624bb1db64.roa (raw, json)
Hash identifier:          UXGGEHYjNwIVhS8vf4J3FKkHfxvCpReHcc0jjtFRcpc=
Subject key identifier:   A3:5F:34:2F:DA:6F:BE:42:F3:9A:43:67:5D:1D:58:42:9C:82:B1:85
Certificate issuer:       /CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
Certificate serial:       010D0C9F43285845A428B42AE150C44B310FEF10
Authority key identifier: 17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/fbaa8415-b645-34e4-b7a1-72624bb1db64.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        2602:80a:2018::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:b4:2a:e1:50:c4:4b:31:0f:ef:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=2329ac17-f1be-43c5-8a81-91702f8cad92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c3:74:b6:a8:e9:79:43:45:68:ad:a7:11:78:
                    19:d1:6a:54:54:b4:84:cd:9a:d7:a1:c4:c2:f0:52:
                    cd:95:42:85:c4:a6:1e:c7:9c:3a:d1:96:cc:71:3e:
                    d0:57:1e:34:f8:6c:b6:4b:bb:57:b2:eb:09:19:8d:
                    10:32:a7:f0:3c:da:88:c0:20:63:27:d0:34:3a:4c:
                    6f:1a:f2:fa:6c:b8:66:0d:8a:ff:76:e1:a6:f7:bb:
                    13:92:f2:59:b4:4e:32:9c:06:7a:ca:31:9c:95:c0:
                    be:3b:fb:80:3f:25:c6:b4:9e:1b:11:7b:32:71:0a:
                    86:24:84:f6:e5:4b:a4:7d:fe:f0:c1:69:02:0a:f7:
                    4d:cd:d6:fc:76:3f:3f:d5:62:df:ec:75:a5:54:e6:
                    f4:5a:d7:e7:10:66:40:32:55:d0:61:42:15:7b:56:
                    e4:69:3d:8b:61:99:2f:53:13:12:6e:e8:aa:52:b2:
                    21:8b:f1:28:0d:16:ed:6d:67:26:0d:e4:90:e2:18:
                    7f:5f:35:f4:57:35:ce:29:6d:60:0e:47:c8:ba:96:
                    0c:c1:97:5c:1e:96:b7:7d:8a:5a:79:96:e4:a0:d6:
                    8d:3f:75:04:ea:fa:8e:24:70:f7:aa:69:d4:98:fd:
                    12:70:d1:b5:46:a1:ce:7b:93:1b:5c:5f:13:79:ec:
                    52:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:5F:34:2F:DA:6F:BE:42:F3:9A:43:67:5D:1D:58:42:9C:82:B1:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/fbaa8415-b645-34e4-b7a1-72624bb1db64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.crl

            X509v3 Authority Key Identifier:
                keyid:17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80a:2018::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:c4:30:75:c1:be:68:5d:c4:b5:78:14:65:91:54:c2:7c:f2:
         cd:64:50:3a:b0:51:24:3a:8d:d2:fa:61:1f:54:f4:eb:87:a9:
         79:af:c4:0e:04:2f:2a:7e:b7:c1:ca:fd:a0:e4:39:96:e2:4b:
         4e:e0:9c:93:2e:ab:57:98:23:cd:1c:80:da:61:93:b1:f1:8f:
         e4:8a:ed:15:da:6d:64:26:6d:07:73:0d:ab:4f:53:d9:72:f7:
         39:97:0a:32:e8:3c:21:f9:90:53:d5:c1:0c:96:30:93:b6:9d:
         d5:64:13:d1:77:fd:09:f1:ba:a5:9a:50:c7:b9:95:63:97:3c:
         c2:dd:72:0c:53:58:6b:ce:83:64:ab:c9:f0:7c:7d:ef:e3:a3:
         ad:94:63:b3:01:8f:61:ec:0c:6d:d0:4b:3c:1c:6c:cc:ed:5e:
         e3:2b:0f:87:92:37:66:1b:7d:07:ad:b2:aa:87:91:b6:e0:2e:
         ca:38:1a:92:ec:ae:35:ab:43:70:21:11:b8:7b:b1:8b:d6:fb:
         e0:67:d0:39:18:ec:ad:ec:36:85:d8:dc:b6:88:89:34:6c:f8:
         eb:c4:1c:34:e0:23:40:96:c1:52:f1:03:98:8c:e3:37:37:4d:
         aa:5a:29:11:0e:42:6f:ee:2a:1c:f4:ce:27:84:04:ed:54:93:
         7f:b8:7a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:33:41 2024 by rpki-client on console-ams.rpki-client.org