Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/3593ca76-417d-3e1b-ad15-3dd09ebe96e6.roa
File:                     3593ca76-417d-3e1b-ad15-3dd09ebe96e6.roa (raw, json)
Hash identifier:          AHrRlxa+6BitjOVp3ZAxyb/qJ8D5NyieYJ9sjxCe5uc=
Subject key identifier:   1F:12:9F:4B:F5:9A:5B:67:F1:A5:22:65:70:42:D0:72:18:3E:9A:F9
Certificate issuer:       /CN=5ef79eb4-544e-4504-9a6f-d1ddff5bcd45
Certificate serial:       010D0C9F43285845777DB61214BA33B212CC83D8
Authority key identifier: 75:B2:7A:F3:34:66:D4:62:06:FA:3F:26:9A:08:A2:A4:20:7D:D5:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/3593ca76-417d-3e1b-ad15-3dd09ebe96e6.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     0
IP address blocks:        2602:fd10:600::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:b6:12:14:ba:33:b2:12:cc:83:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ef79eb4-544e-4504-9a6f-d1ddff5bcd45
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=4926d523-ba28-4b94-9d18-8825b4bee7c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e5:e5:f0:d5:8f:f5:fd:ca:53:11:1a:93:ed:
                    ed:c9:75:aa:8f:4a:a8:4e:59:f4:03:52:75:75:d5:
                    b3:65:eb:64:8e:ea:32:3a:72:e2:ae:9f:e4:0d:a2:
                    c2:6a:7e:eb:e0:62:78:cd:a1:c6:91:f2:66:dc:56:
                    3c:7a:ee:0e:af:be:a0:59:36:c8:7d:10:c4:6b:5b:
                    e1:74:42:96:8c:32:f1:d8:ae:df:bd:28:1f:b3:52:
                    38:49:3b:3a:7e:ef:7c:b9:1f:9d:06:58:97:6f:56:
                    35:60:68:b1:78:2c:f1:ef:d8:fd:fd:23:a9:3f:d9:
                    33:01:21:46:3a:5b:f2:cf:19:8e:2c:19:52:f5:13:
                    c9:b6:69:d7:28:ff:46:41:45:a0:c3:1f:48:79:10:
                    53:4a:70:cd:40:58:ce:5f:f9:7f:c9:ca:ed:3d:5c:
                    b8:ca:7b:8d:dc:49:fd:85:f8:51:32:d1:3c:b1:8e:
                    7a:22:50:14:77:db:45:b5:91:98:71:de:df:2c:42:
                    c3:0b:21:a4:c1:53:99:01:df:ee:cd:0b:72:ff:27:
                    a0:fd:00:ea:1a:9e:70:57:63:c4:3b:82:ce:09:69:
                    58:c1:95:2c:23:08:57:99:1e:b7:ab:9b:1e:46:fa:
                    28:c2:c2:96:16:51:9f:ee:8f:b6:2f:29:bc:b1:64:
                    e9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:12:9F:4B:F5:9A:5B:67:F1:A5:22:65:70:42:D0:72:18:3E:9A:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/3593ca76-417d-3e1b-ad15-3dd09ebe96e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.crl

            X509v3 Authority Key Identifier:
                keyid:75:B2:7A:F3:34:66:D4:62:06:FA:3F:26:9A:08:A2:A4:20:7D:D5:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd10:600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:ef:a8:f3:a9:2c:bd:dc:0f:41:b8:50:17:ca:11:77:17:82:
         ed:5a:4a:09:af:60:17:93:1d:b1:a1:6c:c2:02:74:7c:8d:75:
         ba:32:f2:1c:31:e8:55:97:8a:52:f5:c5:2c:3d:2f:1b:a0:3e:
         d7:00:c5:04:54:b3:bc:d6:c4:bf:27:52:7e:38:32:05:d0:58:
         c9:58:a9:38:6e:10:b0:b2:fb:34:88:7c:17:1f:9d:ba:ca:7a:
         76:b7:40:e6:a6:47:bc:6b:bb:0d:49:71:95:5c:c6:58:84:bc:
         06:0a:64:2c:d9:c8:e4:c5:ec:94:46:0c:12:f0:42:44:aa:25:
         ca:ca:07:87:5f:7b:2d:3b:92:56:27:42:fc:16:48:6b:23:5c:
         6f:dc:13:01:67:e6:f7:00:f0:3e:95:c8:35:99:8d:7b:18:04:
         3c:52:0e:d4:f4:8c:c3:1b:d6:5a:c8:93:9a:92:d3:44:97:6d:
         97:c0:1b:59:f1:34:62:3c:17:84:c9:71:31:b4:a3:c0:8b:2b:
         b3:35:3a:61:6b:bd:10:16:41:77:96:df:32:79:7a:45:97:0f:
         f4:f6:df:d4:34:1f:47:17:9b:fc:cc:81:85:21:bf:9d:e9:15:
         a2:12:fc:66:15:5a:a9:20:12:cd:2c:29:5f:59:fb:d4:55:e3:
         27:05:b3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 06:50:24 2024 by rpki-client on console-fra.rpki-client.org