Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/2de3e884-338a-38e6-8560-019d31695915.roa
File:                     2de3e884-338a-38e6-8560-019d31695915.roa (raw, json)
Hash identifier:          ITaVlp+YB0HrbKrCyr1SGaZOXVGRuFZ3QZ0t+do4xoc=
Subject key identifier:   CA:D8:58:D0:78:0B:73:62:33:75:B4:B0:99:C8:C7:BE:BA:92:D9:39
Certificate issuer:       /CN=0675db59-b7a3-47ed-ae85-edcfb590155e
Certificate serial:       010D0C9F4328583D51CE684B97AC46CD21E9F580
Authority key identifier: D6:DD:50:92:34:CF:D1:3B:C7:4B:47:40:06:68:71:C3:2A:DE:A6:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/2de3e884-338a-38e6-8560-019d31695915.roa
Signing time:             Tue 03 Oct 2023 04:00:00 +0000
ROA not before:           Tue 03 Oct 2023 04:00:00 +0000
ROA not after:            Thu 03 Oct 2024 04:00:00 +0000
asID:                     399866
IP address blocks:        2602:fc5d:c0a::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/0675db59-b7a3-47ed-ae85-edcfb590155e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/0675db59-b7a3-47ed-ae85-edcfb590155e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:51:ce:68:4b:97:ac:46:cd:21:e9:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0675db59-b7a3-47ed-ae85-edcfb590155e
        Validity
            Not Before: Oct  3 04:00:00 2023 GMT
            Not After : Oct  3 04:00:00 2024 GMT
        Subject: CN=d3df3785-34a6-44f7-b379-311a62f26995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:bc:69:57:2d:d9:73:c4:34:15:92:d5:3b:65:
                    0f:49:7f:3f:2f:d9:bb:e9:5f:4a:1d:fc:e2:68:c1:
                    7a:bd:93:ee:e4:66:a0:f0:37:96:5f:ec:86:e5:c7:
                    cc:1e:27:6b:f1:81:77:18:a4:dd:9a:df:22:ca:f5:
                    44:6f:87:23:e1:7f:85:dc:05:8e:f1:44:b6:dd:de:
                    a0:02:15:fc:09:92:b0:4f:96:cd:15:3f:93:d8:25:
                    be:f7:da:e7:f5:fa:c6:7e:79:6b:fd:e8:f9:c3:dc:
                    d9:a3:1e:ad:1d:c8:04:8a:0f:63:cc:4f:2b:f6:37:
                    2b:ff:12:a9:ac:58:18:68:ca:d0:15:fa:01:01:f3:
                    f5:a4:35:16:57:3e:fd:a4:5f:ab:dd:59:80:87:12:
                    2f:2b:7b:0d:e4:c2:bd:2f:6a:c9:97:12:42:d1:c4:
                    a3:a3:ea:10:7d:8f:16:c5:2a:47:5a:88:e9:b6:c1:
                    13:56:da:7c:ee:81:18:1a:18:95:57:32:79:48:07:
                    6f:7c:b9:1e:85:cf:67:27:34:cf:16:73:28:2c:25:
                    0d:8f:22:a8:a3:1b:2c:bc:56:09:8f:0c:ec:57:32:
                    b9:e2:f8:c4:ac:92:9f:5c:6d:41:a4:08:f9:ad:94:
                    81:b7:b0:49:58:f3:95:de:3a:ae:6c:2e:cb:79:a9:
                    43:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D8:58:D0:78:0B:73:62:33:75:B4:B0:99:C8:C7:BE:BA:92:D9:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/2de3e884-338a-38e6-8560-019d31695915.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/0675db59-b7a3-47ed-ae85-edcfb590155e.crl

            X509v3 Authority Key Identifier:
                keyid:D6:DD:50:92:34:CF:D1:3B:C7:4B:47:40:06:68:71:C3:2A:DE:A6:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc5d:c0a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:78:45:ca:50:6b:70:b5:8c:e6:5e:db:1b:9f:36:93:6a:f7:
         f7:4f:a7:38:d4:0c:a5:3a:c4:47:fd:e6:22:6a:30:6c:b9:f4:
         ef:38:18:61:b2:c5:34:fe:fe:49:91:20:73:e4:51:5b:be:2b:
         53:3c:5e:24:e1:12:59:80:08:3d:81:49:75:ec:f0:ea:90:44:
         6e:f4:05:16:80:2c:04:72:ea:cb:c6:cf:a9:52:00:67:19:65:
         63:4e:d0:6c:d3:38:63:07:a4:0c:c1:02:a7:12:9d:e5:93:5e:
         57:70:1f:48:d6:88:dd:98:76:37:9a:39:58:f1:56:b4:e9:0a:
         2a:13:43:61:16:ee:5e:9f:63:c0:7f:27:2f:45:8d:9f:7a:88:
         19:29:1b:5a:44:98:52:c5:be:21:c6:a1:12:14:91:a1:60:b9:
         e3:1b:13:1e:ef:f9:63:18:2c:4b:81:13:38:ed:d9:25:64:f4:
         77:38:0b:8f:18:8c:00:d9:da:04:9a:51:24:69:3e:61:70:ef:
         e4:e7:8a:56:61:b8:41:7d:97:a8:2e:a8:8f:4b:d9:24:41:ae:
         48:42:dc:81:81:31:a8:f3:62:95:a4:9c:35:81:ca:d4:bc:76:
         ca:99:44:ba:23:b8:c4:f3:a0:f0:5a:af:0b:88:d9:f4:90:05:
         90:a9:b0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:28:02 2024 by rpki-client on console-ams.rpki-client.org