Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/ad77c3bb-21c2-3118-b477-431fc83ce1f9.roa
File:                     ad77c3bb-21c2-3118-b477-431fc83ce1f9.roa (raw, json)
Hash identifier:          dzRr9V/2Exj4XnwygTwOytJtXev7OX//5oFOCg8TuU4=
Subject key identifier:   B6:90:26:B6:9B:6E:48:37:B3:8B:53:97:0C:DD:35:68:3C:1E:71:8D
Certificate issuer:       /CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
Certificate serial:       010D0C9F4328584523DAF863D22970CA199576C0
Authority key identifier: E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/ad77c3bb-21c2-3118-b477-431fc83ce1f9.roa
Signing time:             Fri 08 Mar 2024 14:00:30 +0000
ROA not before:           Fri 08 Mar 2024 14:00:30 +0000
ROA not after:            Thu 06 Jun 2024 13:00:30 +0000
asID:                     399122
IP address blocks:        2602:fcd5:16::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:da:f8:63:d2:29:70:ca:19:95:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
        Validity
            Not Before: Mar  8 14:00:30 2024 GMT
            Not After : Jun  6 13:00:30 2024 GMT
        Subject: CN=abc99b0c-57b6-49f4-a812-3c0d79df81e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:69:4c:7c:91:8f:21:ca:59:0b:26:cb:c4:fa:
                    c0:fc:3b:57:9e:40:a3:40:4a:65:f3:08:cd:83:27:
                    5a:1d:8d:82:2f:5f:cc:b7:65:da:a6:d6:ab:0f:f2:
                    4b:4f:54:fe:e7:70:63:40:4f:3b:07:ac:ea:34:65:
                    15:b4:aa:8b:72:e0:9c:cb:a3:36:49:70:af:f3:d6:
                    aa:cf:e1:cc:02:16:f9:b8:7b:4b:2d:ec:13:e5:a9:
                    28:80:b4:58:18:a1:a7:b9:3a:97:a8:88:0c:8d:4d:
                    08:df:e8:34:17:dd:a4:9e:9d:07:8c:4f:83:a9:e1:
                    5f:20:e4:8d:a1:ce:ef:3e:8e:ca:5c:2d:c7:e3:89:
                    3e:1b:e3:0f:7f:4e:00:d2:6f:cc:26:13:5c:f0:67:
                    37:b5:05:cd:4b:49:34:ad:c2:36:9b:ee:9f:31:e6:
                    c1:48:5c:93:a3:d8:7d:c7:49:a3:eb:a1:08:ec:3b:
                    96:86:dd:f2:f6:01:b9:aa:ce:eb:e4:b7:5c:32:25:
                    bd:83:52:3f:eb:ca:78:09:5f:4c:f8:aa:1c:f7:aa:
                    22:6d:92:7b:51:c0:5b:f0:ac:13:09:5f:dc:76:38:
                    fb:7f:a6:f5:05:4d:4a:5d:4e:54:3a:04:54:8a:04:
                    a5:14:6a:26:f5:85:35:87:16:93:fc:bd:b3:16:ec:
                    45:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:90:26:B6:9B:6E:48:37:B3:8B:53:97:0C:DD:35:68:3C:1E:71:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/ad77c3bb-21c2-3118-b477-431fc83ce1f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl

            X509v3 Authority Key Identifier:
                keyid:E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd5:16::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:20:c5:4d:77:a2:2c:76:f7:0b:40:5e:37:55:10:58:b5:b4:
         30:3a:04:d0:f8:cd:d0:7e:59:1c:85:44:72:73:88:64:44:9a:
         c8:09:ef:44:a8:55:8e:01:7a:38:7f:71:91:f8:f2:65:6d:f3:
         7c:e1:59:fe:fe:c2:e0:53:dd:b9:72:d4:81:5a:dd:af:76:41:
         3e:99:9c:6c:2c:b5:3b:5c:d9:b2:5d:75:70:8e:50:d2:27:d2:
         d8:9d:aa:f4:a0:91:e9:52:1d:c9:69:07:ca:86:85:5e:55:c4:
         64:31:c3:73:97:11:4d:f9:f4:1a:30:8d:d4:55:40:04:ef:c0:
         20:33:0e:a9:c2:b0:03:79:f4:91:4f:7d:b0:3b:15:f7:c3:17:
         9c:71:99:20:25:8e:56:51:78:b7:b3:95:07:71:1d:94:cb:9f:
         db:21:ee:f4:c7:84:a8:c9:48:d9:fc:bd:ff:95:f1:cc:82:0c:
         c1:c5:a9:dc:2d:67:45:2e:bb:ce:e6:a6:2a:cf:ea:d6:19:3c:
         22:01:9e:d5:88:40:b3:35:82:0e:fe:bf:ec:76:b1:78:a3:a4:
         0e:bf:ce:82:ce:92:59:1b:c0:ae:cb:14:00:d0:a9:28:24:08:
         95:08:c8:9b:b4:bf:5f:57:4b:8d:d5:df:56:f6:b1:79:c0:91:
         82:d9:9c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:32:50 2024 by rpki-client on console-fra.rpki-client.org