Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/4020e010-6258-39fe-a416-ee3742e2a02e.roa
File:                     4020e010-6258-39fe-a416-ee3742e2a02e.roa (raw, json)
Hash identifier:          IMraE1Q+WmPQ9vXfBG7bT7B5PtEXjlg9fqxlIoX9yIo=
Subject key identifier:   41:0A:81:6C:AB:1D:6D:15:F0:46:CF:26:C4:C3:5C:1C:07:6B:7C:08
Certificate issuer:       /CN=5ef79eb4-544e-4504-9a6f-d1ddff5bcd45
Certificate serial:       010D0C9F4328584496DF685363CC4D972FA58600
Authority key identifier: 75:B2:7A:F3:34:66:D4:62:06:FA:3F:26:9A:08:A2:A4:20:7D:D5:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/4020e010-6258-39fe-a416-ee3742e2a02e.roa
Signing time:             Thu 18 Jan 2024 02:00:26 +0000
ROA not before:           Thu 18 Jan 2024 02:00:26 +0000
ROA not after:            Wed 17 Apr 2024 01:00:26 +0000
asID:                     0
IP address blocks:        2602:fd10:a00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:96:df:68:53:63:cc:4d:97:2f:a5:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ef79eb4-544e-4504-9a6f-d1ddff5bcd45
        Validity
            Not Before: Jan 18 02:00:26 2024 GMT
            Not After : Apr 17 01:00:26 2024 GMT
        Subject: CN=aa627028-ae27-47a7-8feb-de8d70a6e9d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5a:26:c2:ea:1f:c0:81:b9:24:8d:25:59:18:
                    eb:8d:72:2e:66:48:5d:71:33:9c:1c:ad:66:b2:95:
                    ea:35:6e:6c:b9:e5:db:3b:5b:ef:ab:86:44:62:19:
                    cf:9c:1c:ba:59:5b:b6:56:89:7c:ad:c5:52:4d:8a:
                    da:6c:11:84:69:79:83:68:99:63:df:cb:80:17:a8:
                    cc:88:d6:7f:d8:a5:e1:7d:16:c8:25:8e:4c:ac:42:
                    08:64:df:76:a9:bc:13:ba:b0:e5:30:ac:e3:fe:26:
                    98:83:67:de:a1:87:12:42:c5:db:27:67:05:f6:1e:
                    01:64:8d:36:a0:47:94:da:60:1d:a5:43:e1:ff:b7:
                    43:f2:fe:39:02:87:1d:da:08:65:6c:69:57:ae:4c:
                    cb:10:b7:cb:af:fd:e9:7d:bc:94:81:d6:66:c1:3f:
                    2d:65:91:24:93:9e:e8:91:12:c6:c7:ec:2b:5e:44:
                    08:d0:e3:fe:e4:25:2a:50:ff:9a:f1:d3:2f:a6:0f:
                    d6:7a:75:a7:f9:a4:a3:39:a9:02:a4:c8:42:a7:7c:
                    19:c5:28:46:9d:99:c2:69:f0:3a:6e:0e:9c:69:33:
                    7b:85:8f:5d:8a:8f:c3:3b:5c:13:a0:a3:d8:71:a0:
                    9f:b2:15:17:51:ca:73:2d:7c:65:e1:eb:09:67:bd:
                    c6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:0A:81:6C:AB:1D:6D:15:F0:46:CF:26:C4:C3:5C:1C:07:6B:7C:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/4020e010-6258-39fe-a416-ee3742e2a02e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.crl

            X509v3 Authority Key Identifier:
                keyid:75:B2:7A:F3:34:66:D4:62:06:FA:3F:26:9A:08:A2:A4:20:7D:D5:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd10:a00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:ae:97:ef:93:aa:45:f2:ca:2d:05:fc:d4:99:80:3a:fa:0d:
         be:61:84:0c:94:8a:24:d2:4b:5c:a4:63:4f:67:41:f4:42:aa:
         53:f7:9c:a3:a0:64:86:28:37:b7:e8:f3:ef:c3:11:df:b4:f3:
         0d:48:e1:ca:0b:e1:7b:3c:88:91:78:e2:8c:49:31:78:2e:3e:
         7c:23:c8:2e:34:de:7c:a5:80:77:27:3e:61:f4:56:86:b4:7b:
         2f:06:2a:d2:1b:ba:08:8b:af:8d:ac:5a:81:45:9c:dc:9e:c7:
         00:47:32:ab:e3:75:9a:9e:31:59:1b:5e:f4:11:5e:a3:c1:1f:
         06:d2:0e:75:1f:40:b0:10:7a:eb:3e:af:5c:7e:7c:bf:d7:58:
         27:bb:bb:0a:7e:7b:bc:9a:11:e3:73:f0:76:0f:c0:2e:04:75:
         46:45:59:79:1d:65:a9:e0:d0:1f:de:96:23:b1:19:94:0a:f9:
         95:86:c2:88:14:aa:ff:3e:fe:3e:10:51:b6:41:cd:b0:99:e5:
         42:d9:bf:0e:95:ec:1b:10:15:9e:d3:66:32:5b:b7:69:9a:c6:
         3a:ce:73:9d:64:1f:ad:c7:08:a8:ea:00:47:5e:db:b7:25:fa:
         42:c7:0d:aa:be:28:75:30:bf:50:59:c9:9e:97:a5:64:8d:4a:
         3a:7b:b8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:42:16 2024 by rpki-client on console-fra.rpki-client.org