Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ca80a34a-01fd-39d7-96cc-4e059275a53c.roa
File:                     ca80a34a-01fd-39d7-96cc-4e059275a53c.roa (raw, json)
Hash identifier:          PqP84pFtXGPaZb4xU+gU+nyeRV51wRUTP8fS48bHefg=
Subject key identifier:   1D:BD:48:2C:D5:94:50:34:B4:71:2F:93:74:84:43:96:E5:FA:17:2D
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285845304D3A45A0A5BFA21A55CE00
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ca80a34a-01fd-39d7-96cc-4e059275a53c.roa
Signing time:             Wed 13 Mar 2024 01:00:26 +0000
ROA not before:           Wed 13 Mar 2024 01:00:26 +0000
ROA not after:            Tue 11 Jun 2024 01:00:26 +0000
asID:                     6128
IP address blocks:        2602:230::/32 maxlen: 32
                          2607:fda8::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:30:4d:3a:45:a0:a5:bf:a2:1a:55:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Mar 13 01:00:26 2024 GMT
            Not After : Jun 11 01:00:26 2024 GMT
        Subject: CN=4d5bfaf8-935e-4b24-b7cf-7d2048c357bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d7:65:db:56:31:bb:3a:d5:e9:ed:dc:0f:af:
                    69:4f:1e:a8:8d:5b:98:39:3d:a0:19:73:aa:fd:d4:
                    35:b1:b5:b5:33:04:b7:07:d9:16:13:30:22:27:18:
                    91:1c:92:8f:13:30:e0:36:4f:35:b3:ff:c7:ab:16:
                    c3:6b:06:e4:47:c8:4c:67:78:27:7e:04:a7:38:77:
                    74:71:e0:fa:7f:aa:95:74:4a:4d:db:48:8e:b3:2c:
                    0a:34:a6:e0:f1:ae:1b:cb:67:43:ae:27:2e:9c:d9:
                    7a:25:10:72:59:19:29:37:10:33:d3:eb:0b:5d:2c:
                    7b:43:51:65:2a:4c:28:69:00:17:f3:d7:c5:0e:b9:
                    9f:70:e6:77:a9:f8:68:2d:8e:89:20:85:f8:05:16:
                    a9:88:8e:47:08:a1:9e:0c:8f:64:4e:f8:1c:74:0b:
                    7f:85:44:a3:4e:83:89:59:0c:b2:77:7e:8a:c9:7d:
                    97:5b:f5:31:fd:26:58:34:bc:34:97:f7:b4:97:29:
                    a3:ea:44:ec:5f:cb:36:5a:42:31:8f:c7:99:21:91:
                    03:e9:fc:9f:94:a5:82:bd:a5:27:7f:b4:a1:ba:08:
                    91:6e:89:bf:79:fa:4a:35:f7:3a:93:de:94:b7:4d:
                    a0:8c:cd:53:2c:b6:19:88:8d:2c:69:01:5e:38:6e:
                    e9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BD:48:2C:D5:94:50:34:B4:71:2F:93:74:84:43:96:E5:FA:17:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ca80a34a-01fd-39d7-96cc-4e059275a53c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:230::/32
                  2607:fda8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:e4:98:8f:db:24:36:c4:bd:00:ea:fb:f9:5c:6e:ea:0a:78:
         8d:63:c5:58:55:7c:64:2c:d5:37:cf:cd:86:71:9e:ac:d8:42:
         7d:0e:6d:ca:45:48:20:fd:ab:42:51:ba:a4:6c:5b:a0:30:6a:
         42:0e:f8:a5:b9:4c:4d:5f:51:93:f5:67:b1:c6:e6:72:f3:2c:
         85:4f:ee:12:d3:3a:c0:5f:4b:02:23:e9:40:1a:82:85:21:d9:
         08:0e:b6:96:1e:b1:a2:93:6d:bc:c0:19:fe:65:a0:73:c9:0a:
         74:ad:50:b7:cd:0e:48:2b:92:3c:c8:04:19:39:a2:e8:7a:81:
         0b:4d:d0:ee:36:84:9c:de:3a:32:1b:df:5f:3f:19:0a:98:cf:
         df:7d:74:e8:a3:15:6d:8f:c9:fd:a1:39:34:7a:40:56:88:dd:
         af:93:cd:cf:46:7d:20:ee:4f:dc:8f:ea:92:cd:8e:5c:95:63:
         47:17:dc:9b:d4:6a:c5:ed:8e:cd:be:d7:b8:51:26:91:5e:46:
         98:2b:6b:31:ed:f9:47:ef:bc:35:03:d6:a4:d5:cf:14:60:4e:
         3d:96:65:17:96:8c:6f:c1:40:3d:22:5c:7b:fd:03:f0:31:84:
         6e:59:e7:43:e0:a8:2f:fe:c7:ea:2f:53:dd:91:2e:0c:a7:a6:
         dc:43:18:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 17:01:50 2024 by rpki-client on console-ams.rpki-client.org