Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4e0c28eb-c1fc-43af-a023-404fb2afe4bc/2e7598c0-8adf-3844-b011-6ef0da77f405.roa
File:                     2e7598c0-8adf-3844-b011-6ef0da77f405.roa (raw, json)
Hash identifier:          5BeYTwfUAo4yShF0JDWq015i5mP/NM9PBwhAScShYAA=
Subject key identifier:   E1:2C:1C:3F:23:82:E3:CF:5C:2E:F2:9D:19:8D:D8:F9:E5:27:B6:A0
Certificate issuer:       /CN=4e0c28eb-c1fc-43af-a023-404fb2afe4bc
Certificate serial:       010D0C9F432858454272B8389A11AA4A9C1B4680
Authority key identifier: 0F:01:54:65:9A:B8:5B:70:F6:CC:00:94:F3:24:38:E6:F2:58:50:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4e0c28eb-c1fc-43af-a023-404fb2afe4bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4e0c28eb-c1fc-43af-a023-404fb2afe4bc/2e7598c0-8adf-3844-b011-6ef0da77f405.roa
Signing time:             Tue 19 Mar 2024 13:00:34 +0000
ROA not before:           Tue 19 Mar 2024 13:00:34 +0000
ROA not after:            Mon 17 Jun 2024 13:00:34 +0000
asID:                     398567
IP address blocks:        2602:fd2d::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4e0c28eb-c1fc-43af-a023-404fb2afe4bc/4e0c28eb-c1fc-43af-a023-404fb2afe4bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4e0c28eb-c1fc-43af-a023-404fb2afe4bc/4e0c28eb-c1fc-43af-a023-404fb2afe4bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4e0c28eb-c1fc-43af-a023-404fb2afe4bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:42:72:b8:38:9a:11:aa:4a:9c:1b:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e0c28eb-c1fc-43af-a023-404fb2afe4bc
        Validity
            Not Before: Mar 19 13:00:34 2024 GMT
            Not After : Jun 17 13:00:34 2024 GMT
        Subject: CN=24b17386-974b-4f25-9867-69e30833a8bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:53:e9:71:0c:bd:68:19:0e:be:9a:63:7a:23:
                    fc:40:ce:8c:5f:2d:4f:78:41:e9:31:4c:6c:d5:d1:
                    b8:d7:18:91:63:e2:95:82:52:2c:7b:6a:72:4c:7c:
                    70:6a:7c:79:82:7b:38:21:4e:8f:61:da:b5:60:be:
                    b1:a1:fb:72:1e:b7:12:cd:fa:d7:a3:a2:7d:95:12:
                    f0:d6:cb:b3:dc:bd:9e:ad:a1:97:32:5f:2f:80:a9:
                    b9:e5:a7:e5:64:f7:8e:a3:27:81:1e:58:4c:7a:bd:
                    a1:5c:42:6f:e1:90:1e:72:56:72:35:2f:eb:4a:2f:
                    5f:10:d3:13:b3:ac:f8:34:89:45:f8:7f:cf:ac:8b:
                    e7:c5:b4:fb:e6:f0:30:70:f2:cd:06:97:6d:23:d6:
                    73:51:0a:d7:b1:6b:3d:fc:6e:65:14:b0:6f:90:df:
                    68:1c:c2:fa:fb:a0:de:13:d0:0a:d1:c2:37:b8:76:
                    9f:cd:8e:96:8c:ef:1a:5c:1c:40:e9:06:64:6f:9f:
                    af:82:f2:e9:66:ae:5d:1f:b7:78:5d:e0:85:57:8f:
                    61:bb:75:39:b6:80:76:39:29:8a:e4:81:29:4f:63:
                    2f:52:bd:c8:40:11:39:9f:74:fe:4d:97:f5:ee:fa:
                    f9:55:a2:51:6e:32:ea:64:c6:8e:fe:55:7f:2a:2c:
                    97:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:2C:1C:3F:23:82:E3:CF:5C:2E:F2:9D:19:8D:D8:F9:E5:27:B6:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4e0c28eb-c1fc-43af-a023-404fb2afe4bc/2e7598c0-8adf-3844-b011-6ef0da77f405.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4e0c28eb-c1fc-43af-a023-404fb2afe4bc/4e0c28eb-c1fc-43af-a023-404fb2afe4bc.crl

            X509v3 Authority Key Identifier:
                keyid:0F:01:54:65:9A:B8:5B:70:F6:CC:00:94:F3:24:38:E6:F2:58:50:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4e0c28eb-c1fc-43af-a023-404fb2afe4bc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd2d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:5a:20:ba:54:01:02:86:85:b0:0a:59:3e:26:3c:e3:dc:75:
         92:d9:d9:4c:88:6f:36:3f:dc:48:ab:0c:8d:ca:e6:6f:a8:20:
         c2:85:9f:70:23:39:b0:a1:e4:fd:34:39:f4:6c:c8:31:a3:9d:
         f6:f8:89:39:04:cf:6f:43:86:ae:c2:f0:dc:47:f3:61:77:d7:
         42:dd:c0:ca:eb:a8:ca:14:4f:8e:78:de:02:45:07:41:a6:43:
         21:7f:bd:55:8f:ca:ee:3a:3a:d4:0d:e6:25:ea:49:de:be:bb:
         00:8b:2c:43:7a:63:e8:ed:4b:a8:61:01:5e:09:d6:70:f2:da:
         40:ff:d5:de:b2:25:24:ce:c9:cd:46:e5:32:4f:97:1e:23:03:
         62:df:9f:e2:79:7b:44:8f:20:85:52:68:33:a3:50:5a:8d:f8:
         c6:f7:63:8f:14:90:69:b9:d6:cc:a9:94:11:92:a9:fe:e9:ed:
         d4:ad:6b:ee:9f:07:df:10:5b:01:8e:0f:11:e2:c8:46:5e:cb:
         fe:3b:93:b5:fe:d4:99:ce:74:dd:18:2b:55:af:da:77:91:b5:
         9a:76:a7:80:1a:2f:53:03:fc:e9:e4:0c:94:fc:91:bb:1a:c2:
         c1:fa:cd:31:ec:01:70:8b:e3:42:14:d4:3b:ce:1d:ba:3b:97:
         a5:b3:52:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:55:47 2024 by rpki-client on console-fra.rpki-client.org