Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/02af4fd6-b34b-3ffb-af01-7175b91b078a.roa
File:                     02af4fd6-b34b-3ffb-af01-7175b91b078a.roa (raw, json)
Hash identifier:          lDBTpLtBnDhm+BHqhwr0p4u3mf/NtGapafETKJmOa1I=
Subject key identifier:   9D:63:E0:31:C6:A9:E1:BF:B9:6C:50:14:D8:B5:74:42:8D:7F:BB:B6
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2DDAD3A5A94C67D534640
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/02af4fd6-b34b-3ffb-af01-7175b91b078a.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     11955
IP address blocks:        2603:90c8::/30 maxlen: 30

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:dd:ad:3a:5a:94:c6:7d:53:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=015f1798-2991-42ac-9b7a-267f1dc213df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:67:3a:93:49:8a:30:0d:b8:ac:08:fc:39:1e:
                    f0:15:97:bd:21:65:00:75:8f:66:c4:b3:51:af:1f:
                    6b:37:2a:37:45:83:3f:6b:93:b8:d2:31:19:3f:40:
                    dd:e1:38:f1:46:17:b9:3e:64:64:1e:47:ce:0e:1e:
                    16:cb:b7:32:43:99:8b:cb:a0:61:fa:98:dc:c7:97:
                    6f:d0:77:13:86:4e:07:ee:d0:3b:3a:fe:28:21:2f:
                    6e:b9:68:95:f3:6b:3a:55:02:a2:32:7b:22:8d:a8:
                    fd:aa:06:e5:a4:02:20:d7:d5:18:2e:25:8e:1d:94:
                    32:0c:a9:5a:c6:9d:d0:80:93:64:d2:86:fc:ba:da:
                    21:9f:8d:29:7c:ab:6a:3b:7c:f9:a3:5a:98:a4:c1:
                    dd:7d:8b:9f:d6:67:3d:94:68:89:2c:59:95:a6:2e:
                    19:4e:5e:4f:06:32:a5:17:bd:a0:02:03:be:90:42:
                    06:4d:13:12:49:f2:81:27:9b:47:7c:a9:c0:7a:8d:
                    d1:72:e8:1a:27:6f:38:31:6b:3f:12:4d:f6:37:b9:
                    0f:c4:a6:7a:ed:37:50:dd:ac:3c:fe:78:40:d0:a6:
                    5d:e3:80:b2:9e:f9:c4:15:90:2e:65:dc:d9:2b:11:
                    9a:4f:9c:3e:be:b2:29:57:80:87:c7:a9:7e:7f:06:
                    31:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:63:E0:31:C6:A9:E1:BF:B9:6C:50:14:D8:B5:74:42:8D:7F:BB:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/02af4fd6-b34b-3ffb-af01-7175b91b078a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90c8::/30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:ea:d7:67:4a:12:a5:da:03:d7:ea:ff:28:3a:96:f2:bb:44:
         b5:cb:ea:47:6d:79:29:97:83:fc:e0:29:a1:3d:59:f9:5f:1f:
         b3:02:60:5c:1e:2b:e6:56:be:10:5c:70:9b:2c:b9:79:17:34:
         5e:fc:d3:0e:62:7f:c5:6a:4f:72:9f:11:21:de:f3:19:28:80:
         1c:bc:e3:69:c7:81:b3:38:60:b1:06:70:7c:86:d6:8f:d1:ff:
         cf:22:3c:5d:90:87:cc:30:eb:b9:a5:da:2b:96:40:78:7d:b9:
         92:52:86:83:ca:ac:fb:c7:51:e3:5c:01:b8:b3:6f:dd:c7:01:
         a6:41:55:d4:11:a5:bd:f0:2e:a2:dc:48:30:2d:23:b8:12:48:
         27:44:72:fb:40:a2:86:1e:0f:8c:49:4d:b8:3a:ba:b8:8a:68:
         5e:d1:80:36:5d:da:6e:a7:42:45:d3:6a:ce:f7:5d:b1:3f:17:
         7f:86:5d:58:a2:dd:3e:48:06:5d:58:18:0a:ae:9e:29:16:15:
         15:a4:43:45:a6:a7:7a:75:98:8d:5e:3b:f1:0a:0b:df:b7:46:
         af:c1:10:3e:fc:74:11:64:fa:f1:cb:b8:5e:f8:24:7f:05:9e:
         82:24:b4:93:39:51:26:67:10:9b:b8:dd:94:b3:22:75:8e:a9:
         a7:f8:99:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:52:03 2024 by rpki-client on console-fra.rpki-client.org