Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/28616b93-3237-38ad-a208-0f96a708731c.roa
File:                     28616b93-3237-38ad-a208-0f96a708731c.roa (raw, json)
Hash identifier:          KZxEgwyvMVrDtn6e7j7hOvb20cZnyUAEOQPpDOk0afA=
Subject key identifier:   B0:48:B6:32:12:FD:11:20:F7:85:AE:6A:D1:21:89:06:74:0E:0E:C2
Certificate issuer:       /CN=0675db59-b7a3-47ed-ae85-edcfb590155e
Certificate serial:       010D0C9F4328583D51CE685A3D60AB4BE10A4580
Authority key identifier: D6:DD:50:92:34:CF:D1:3B:C7:4B:47:40:06:68:71:C3:2A:DE:A6:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/28616b93-3237-38ad-a208-0f96a708731c.roa
Signing time:             Tue 03 Oct 2023 04:00:00 +0000
ROA not before:           Tue 03 Oct 2023 04:00:00 +0000
ROA not after:            Thu 03 Oct 2024 04:00:00 +0000
asID:                     399866
IP address blocks:        2602:fc5d:c0a::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/0675db59-b7a3-47ed-ae85-edcfb590155e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/0675db59-b7a3-47ed-ae85-edcfb590155e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:51:ce:68:5a:3d:60:ab:4b:e1:0a:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0675db59-b7a3-47ed-ae85-edcfb590155e
        Validity
            Not Before: Oct  3 04:00:00 2023 GMT
            Not After : Oct  3 04:00:00 2024 GMT
        Subject: CN=d28d0f34-37c8-4845-b8d3-114c5b82f77c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b6:27:5b:6e:10:de:39:c1:4e:0b:ac:aa:66:
                    27:8c:5d:e7:5a:86:a9:46:c8:cf:9b:3f:6d:75:2c:
                    89:fb:1b:28:63:14:0b:e8:f1:39:b8:8c:07:80:df:
                    c2:82:97:ac:8e:0c:fd:d0:66:f9:8a:6b:71:a7:f0:
                    42:59:25:67:b5:95:ae:a5:bd:52:e4:14:c0:95:d4:
                    44:7a:91:c9:86:4b:81:17:0a:e9:4e:fa:25:0d:2c:
                    9d:97:77:91:25:4f:17:81:08:4d:1b:a5:ac:5d:97:
                    3e:53:6f:5b:ca:77:ae:c3:e7:d6:f0:81:c7:5f:97:
                    21:29:ce:16:60:9e:f6:a0:4f:8d:8b:c8:1f:8a:35:
                    0a:16:53:ad:b8:36:8b:84:00:23:bf:cc:bc:26:f9:
                    cc:a7:10:e8:49:50:c7:d2:61:b6:81:df:94:22:0d:
                    7d:ea:63:94:a6:6d:53:b7:cb:55:3c:e2:d2:f8:1c:
                    8d:60:76:03:de:da:8a:1c:74:24:c9:e3:97:26:73:
                    d7:2a:a9:f5:42:4f:cd:6f:6a:34:0d:f4:e6:67:df:
                    99:b2:a0:06:6b:31:a1:35:98:3d:8e:cc:e7:3d:16:
                    6f:88:59:6a:bd:dd:98:0d:b5:43:41:75:c0:9b:ef:
                    a0:ee:18:29:d0:65:e3:05:ef:67:ac:03:8c:5b:7a:
                    3f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:48:B6:32:12:FD:11:20:F7:85:AE:6A:D1:21:89:06:74:0E:0E:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/28616b93-3237-38ad-a208-0f96a708731c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/0675db59-b7a3-47ed-ae85-edcfb590155e.crl

            X509v3 Authority Key Identifier:
                keyid:D6:DD:50:92:34:CF:D1:3B:C7:4B:47:40:06:68:71:C3:2A:DE:A6:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc5d:c0a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:3a:77:46:f6:73:8c:1f:90:87:7c:70:e3:de:74:c6:b1:34:
         b0:6c:95:66:5d:3a:94:59:34:05:d4:e2:58:84:5b:05:86:db:
         05:87:7c:62:2d:4a:95:79:0c:33:ec:0d:29:bc:c2:c3:f1:0e:
         ed:52:fb:ba:3b:e0:7b:64:c5:04:0d:e8:75:09:67:00:39:97:
         14:fc:d4:82:3b:cc:08:9a:39:74:6c:3a:ee:9b:68:b1:09:be:
         5e:5e:de:e8:44:65:78:d4:26:b2:7b:59:ed:7b:41:8d:62:ae:
         ad:c4:d0:d7:4f:63:bc:cd:2c:d5:62:59:8d:73:06:5b:d1:7e:
         ae:88:9a:cf:6e:90:5e:0b:7f:0a:cf:15:b4:03:6a:21:52:43:
         27:09:2b:01:89:a1:c5:3a:06:0a:62:39:1c:4f:28:86:59:eb:
         f1:db:56:d3:51:27:99:66:d2:74:0f:50:14:d5:ef:23:4e:8b:
         de:d1:fe:fb:a4:37:d3:81:e0:a7:81:8b:34:27:c4:53:dc:9e:
         55:c3:d5:e4:5e:13:d5:8c:30:65:93:86:9e:c8:df:6b:fb:bd:
         00:89:43:d1:6a:0c:42:7f:9c:c4:f1:bf:a0:57:ae:61:c0:14:
         7c:3b:da:06:15:11:76:e9:33:3e:af:b4:8e:ea:4b:a9:f0:13:
         a0:6a:1c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:26:29 2024 by rpki-client on console-ams.rpki-client.org