Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/16a75313-7215-3fb5-aca4-463a7894947b.roa
File:                     16a75313-7215-3fb5-aca4-463a7894947b.roa (raw, json)
Hash identifier:          Q6pp1B2cxUPInCpRIamxy9e66BKimrMl1OyEosuEUZM=
Subject key identifier:   CF:F1:85:6E:BD:7F:F6:FC:25:28:14:C6:7D:48:08:12:9E:A1:F7:2E
Certificate issuer:       /CN=1dc547da-42a0-43ba-8d2f-21375737b95b
Certificate serial:       010D0C9F432858452C1D3A9907D66BC28306F900
Authority key identifier: 3D:D1:56:24:51:80:75:49:07:1A:A3:C1:39:9B:01:4F:04:D1:CF:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/16a75313-7215-3fb5-aca4-463a7894947b.roa
Signing time:             Mon 11 Mar 2024 13:00:31 +0000
ROA not before:           Mon 11 Mar 2024 13:00:31 +0000
ROA not after:            Sun 09 Jun 2024 13:00:31 +0000
asID:                     150698
IP address blocks:        2602:f9ca:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/1dc547da-42a0-43ba-8d2f-21375737b95b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/1dc547da-42a0-43ba-8d2f-21375737b95b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:1d:3a:99:07:d6:6b:c2:83:06:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dc547da-42a0-43ba-8d2f-21375737b95b
        Validity
            Not Before: Mar 11 13:00:31 2024 GMT
            Not After : Jun  9 13:00:31 2024 GMT
        Subject: CN=8e1178ca-1b28-4c55-8a62-9d6029c57665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:82:24:d5:ad:e1:65:6d:19:2f:a1:69:ea:0e:
                    b1:c4:b3:af:4e:d9:47:66:7f:28:0e:01:99:0a:de:
                    28:e9:0d:82:e0:5a:24:36:92:23:73:4d:00:24:b3:
                    ba:6f:02:33:47:46:1e:56:f0:48:7a:b5:20:47:70:
                    87:b8:9b:3d:5e:54:20:d9:29:de:68:ee:a8:99:e8:
                    c8:82:3e:a7:bb:1a:45:78:62:54:57:ff:3c:1e:af:
                    59:30:f7:0d:08:fc:d1:e1:60:d2:e1:bc:da:32:5b:
                    46:6f:55:02:18:6f:84:b7:e4:bf:14:7a:c1:bf:ab:
                    61:b7:38:ea:ad:ce:65:f3:c9:f2:31:1c:2b:e1:9b:
                    f7:ef:cd:77:19:9f:2e:0c:1d:76:54:07:20:c7:40:
                    5d:6c:1e:3d:d6:83:39:be:1a:8c:00:1a:51:18:f1:
                    a9:cb:84:35:4d:94:2a:7d:80:b2:2e:d5:ab:aa:f1:
                    c0:87:2d:fc:2e:40:0d:cc:37:4c:8c:63:e9:21:7e:
                    70:bd:44:38:8a:d3:6e:84:43:d9:f1:31:65:26:51:
                    1a:dd:b3:73:2e:a0:b8:02:8f:45:09:12:c7:71:53:
                    1e:3a:c4:9b:0c:3f:79:93:17:63:38:59:96:de:2b:
                    86:45:55:03:b3:61:97:9e:93:8b:90:f1:8c:fb:60:
                    79:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F1:85:6E:BD:7F:F6:FC:25:28:14:C6:7D:48:08:12:9E:A1:F7:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/16a75313-7215-3fb5-aca4-463a7894947b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b/1dc547da-42a0-43ba-8d2f-21375737b95b.crl

            X509v3 Authority Key Identifier:
                keyid:3D:D1:56:24:51:80:75:49:07:1A:A3:C1:39:9B:01:4F:04:D1:CF:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dc547da-42a0-43ba-8d2f-21375737b95b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ca:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:bb:69:67:a2:58:5a:e4:3e:53:f2:f5:49:e0:3b:78:0f:a8:
         5a:d5:6c:7c:56:1f:30:ad:b5:99:1f:58:72:c6:60:1f:8e:a1:
         f5:ff:99:ca:dc:24:c4:a9:2e:e0:1a:e8:dc:a8:36:08:c5:4b:
         1e:79:06:80:3d:2e:cb:d1:53:de:7d:8c:45:b2:4d:32:8c:58:
         c2:30:20:fe:8a:ea:26:f8:8f:a9:c5:d7:00:aa:c0:76:34:e8:
         a6:29:1a:1f:96:73:18:d3:a7:a5:1d:f3:47:d5:a6:f5:73:05:
         46:e0:e3:49:e4:b1:9e:25:63:97:f3:f1:98:1c:b4:87:53:de:
         91:5f:e0:8d:86:49:a8:fc:bd:7a:82:b6:56:37:52:00:51:01:
         23:29:0f:6a:9f:41:e9:95:4f:db:14:aa:1a:f6:3b:87:5c:98:
         a7:ca:1a:e7:9b:f1:51:77:e9:e7:40:fe:fe:1f:f8:ae:8f:bc:
         87:bc:4f:32:7d:a8:69:57:8c:ed:b4:3b:ab:95:26:e8:5d:e5:
         12:77:47:15:36:d4:33:74:dd:60:25:34:59:10:87:45:9c:cf:
         8f:33:d8:c7:83:f0:db:f3:2b:1f:1b:2d:ba:76:b6:dd:e5:73:
         db:b6:c7:e7:d3:aa:9d:48:5e:fa:fa:d9:26:98:d1:77:9e:f8:
         ad:10:32:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 15:56:37 2024 by rpki-client on console-ams.rpki-client.org