Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/423ff1b7-3cf5-3cd5-93c1-4a324aeed78e.roa
File:                     423ff1b7-3cf5-3cd5-93c1-4a324aeed78e.roa (raw, json)
Hash identifier:          uR8ioEdijJyBt9HyfkbE3NZihP/46/fTGfj7Irgoy2A=
Subject key identifier:   32:84:EC:95:CE:49:CC:62:18:CA:4E:24:3E:2B:61:95:DC:23:E7:31
Certificate issuer:       /CN=5ef79eb4-544e-4504-9a6f-d1ddff5bcd45
Certificate serial:       010D0C9F43285845777DB5A49E16D8E712A14B80
Authority key identifier: 75:B2:7A:F3:34:66:D4:62:06:FA:3F:26:9A:08:A2:A4:20:7D:D5:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/423ff1b7-3cf5-3cd5-93c1-4a324aeed78e.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     398795
IP address blocks:        2602:fd10:800::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:b5:a4:9e:16:d8:e7:12:a1:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ef79eb4-544e-4504-9a6f-d1ddff5bcd45
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=3bb23966-ac3b-4b90-ac54-3f2bb4a807f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3b:ef:40:97:35:22:7a:53:85:ea:d3:fd:57:
                    39:db:72:a8:ab:22:39:82:53:5d:26:32:32:2c:ff:
                    ef:4a:51:47:23:75:e3:18:d1:59:44:b1:8b:54:8a:
                    c1:57:67:f4:60:a6:65:11:08:96:60:54:a5:47:33:
                    4e:36:e9:e0:c1:f2:9e:35:d5:ad:dc:bf:2f:82:d7:
                    90:ca:1c:45:bb:40:e5:4d:31:67:a0:a3:3d:30:60:
                    3b:a0:75:ff:af:f9:38:f2:30:1b:71:1b:c9:50:95:
                    ac:a6:d2:3f:a4:61:c8:2c:23:d9:83:48:8f:37:54:
                    12:ed:9c:f2:b5:d9:a9:2a:4a:76:06:9d:2f:bb:01:
                    5b:df:f8:86:78:92:9a:9b:37:42:2c:e3:f1:c6:66:
                    96:2b:f2:bf:92:ae:4c:05:18:78:11:d2:e9:e3:d5:
                    a8:88:0a:0f:38:0f:ca:78:06:4e:25:18:e5:54:11:
                    b6:d7:4d:cf:9a:9b:a5:94:1d:d8:12:05:b2:f9:d4:
                    6f:80:40:2e:36:1e:28:9d:ed:d9:cf:be:87:d0:ea:
                    9f:2d:0b:31:42:21:70:86:74:0a:7e:2d:00:16:9f:
                    c0:22:1c:ec:69:b6:a3:58:90:ac:ff:36:25:a1:d6:
                    eb:88:d8:1b:52:dc:5a:47:fb:54:83:60:4c:f7:36:
                    8f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:84:EC:95:CE:49:CC:62:18:CA:4E:24:3E:2B:61:95:DC:23:E7:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/423ff1b7-3cf5-3cd5-93c1-4a324aeed78e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.crl

            X509v3 Authority Key Identifier:
                keyid:75:B2:7A:F3:34:66:D4:62:06:FA:3F:26:9A:08:A2:A4:20:7D:D5:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd10:800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:0d:76:27:7c:57:2c:01:e2:3e:ec:4b:cf:8a:f1:dd:7b:1f:
         8d:9f:15:ae:9c:32:22:46:3a:cc:c7:b5:9c:19:48:32:98:e9:
         12:20:f9:9a:04:13:cd:24:17:31:fc:32:a1:6a:0a:cf:66:1f:
         00:a1:4a:44:fa:b5:d1:29:16:72:31:ec:3d:d3:f8:1c:d4:36:
         e8:69:08:d4:1a:96:f0:8b:48:c5:38:ba:cb:d4:60:e6:29:c4:
         b8:80:be:60:91:99:e4:17:91:38:20:00:0f:32:d5:2f:18:01:
         7f:54:0c:59:09:a9:d7:01:0b:1a:b4:66:2c:99:48:e2:4c:2a:
         e3:c3:8f:50:36:48:31:51:8a:2a:9f:e6:6d:5d:03:aa:a6:82:
         f8:ff:59:a7:81:13:1c:3d:c9:f0:7c:08:15:e9:42:b5:e9:e2:
         d4:46:fe:b9:3c:b5:01:a2:02:c3:b0:4f:44:d7:50:4d:9f:b2:
         c7:1e:e5:1f:a8:e2:a3:8b:b7:f4:23:f0:b2:2f:de:c9:10:21:
         f0:3b:f4:b3:ee:72:d9:3f:42:1a:2d:03:53:c5:1b:60:a7:b5:
         89:cd:a7:2e:47:98:2c:11:0d:12:e7:1f:bd:73:5a:62:8d:d8:
         96:fd:cb:51:43:19:2d:e4:61:80:dc:6e:a9:f9:e0:30:40:c3:
         89:ab:94:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 19:30:37 2024 by rpki-client on console-fra.rpki-client.org