Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/0bec5560-5f61-3939-92dc-d3500f8e8095.roa
File:                     0bec5560-5f61-3939-92dc-d3500f8e8095.roa (raw, json)
Hash identifier:          cyx1mklmu6/lljFSIPqRxj8xwo6l1jgr7dXqLK0N2lM=
Subject key identifier:   17:E9:22:26:B5:D3:95:6C:CA:52:A9:9D:4D:89:A6:5C:CE:94:C8:B8
Certificate issuer:       /CN=07cb17d4-9502-4d38-b51a-02ae7bf3137b
Certificate serial:       010D0C9F43285844F5CAA10C9CA17A85089B6280
Authority key identifier: C0:7D:F3:29:1A:91:8D:CD:FA:37:63:19:EE:28:22:CE:B5:88:34:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/0bec5560-5f61-3939-92dc-d3500f8e8095.roa
Signing time:             Wed 21 Feb 2024 02:00:25 +0000
ROA not before:           Wed 21 Feb 2024 02:00:25 +0000
ROA not after:            Tue 21 May 2024 01:00:25 +0000
asID:                     16509
IP address blocks:        2602:fc8b:aa::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/07cb17d4-9502-4d38-b51a-02ae7bf3137b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/07cb17d4-9502-4d38-b51a-02ae7bf3137b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f5:ca:a1:0c:9c:a1:7a:85:08:9b:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07cb17d4-9502-4d38-b51a-02ae7bf3137b
        Validity
            Not Before: Feb 21 02:00:25 2024 GMT
            Not After : May 21 01:00:25 2024 GMT
        Subject: CN=52c5c5d7-1e67-4547-9861-7c01ad8dcb1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:11:89:4d:d9:73:32:b7:ad:ff:b7:ee:37:63:
                    ac:e0:4b:7c:5a:d5:39:36:e8:85:42:1e:b9:c0:0a:
                    c7:27:2f:51:94:7f:2e:92:5b:80:fa:20:c1:12:c5:
                    0b:19:1f:54:a7:78:43:29:82:3d:51:f7:5f:3d:45:
                    fc:ad:79:57:9c:c3:97:21:e0:be:4a:74:0f:c4:cc:
                    f6:36:95:1e:3d:fe:00:58:e9:8b:92:5b:53:18:64:
                    6b:0c:72:15:b2:b0:58:2b:32:8d:37:61:bf:ef:16:
                    17:a1:74:4e:f0:3c:d9:c3:99:8b:1b:b5:8a:ff:88:
                    d1:f4:26:69:e2:99:4f:51:d5:5f:1f:02:6f:1d:da:
                    e2:55:3d:ed:4a:72:a4:26:71:0c:b8:35:5e:c2:c0:
                    aa:e3:2e:1e:16:40:a1:b5:48:57:2c:42:81:96:c3:
                    46:16:39:cb:e5:76:51:38:76:26:85:9b:01:d9:f9:
                    38:4e:14:e5:a3:fe:30:c4:4d:62:c1:87:9b:3f:fb:
                    19:75:0b:08:9d:49:b9:cf:b0:fc:0f:3d:4c:a4:8b:
                    1d:52:f4:80:a4:c9:03:9d:77:fd:59:04:d2:f3:f4:
                    6f:eb:af:49:b7:a9:d1:e3:90:6c:55:fe:2b:6c:72:
                    27:c0:5d:c2:93:96:3e:80:f7:dd:97:dd:37:8b:35:
                    cc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E9:22:26:B5:D3:95:6C:CA:52:A9:9D:4D:89:A6:5C:CE:94:C8:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/0bec5560-5f61-3939-92dc-d3500f8e8095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/07cb17d4-9502-4d38-b51a-02ae7bf3137b.crl

            X509v3 Authority Key Identifier:
                keyid:C0:7D:F3:29:1A:91:8D:CD:FA:37:63:19:EE:28:22:CE:B5:88:34:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc8b:aa::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:29:d4:7e:a7:f1:09:df:4d:d6:09:d8:ec:6a:58:fd:2b:a8:
         4c:51:f0:63:2a:92:1a:91:08:04:aa:cc:81:9e:06:5c:2f:1e:
         5a:9d:9a:48:20:bb:e6:64:1a:a9:72:79:ce:82:3b:78:a7:d6:
         1a:91:a9:73:d3:66:31:5b:56:32:50:f3:39:89:95:b3:e1:65:
         ad:37:3c:4b:34:18:07:a4:11:ec:f9:80:fb:08:a7:27:5d:53:
         e2:48:a0:10:09:e1:c5:bf:e8:93:72:cf:6b:84:d8:34:50:74:
         fe:7f:38:2f:46:b7:8c:9c:6a:67:bc:63:8d:1d:2b:0d:b3:ab:
         b3:c9:42:71:7e:37:7e:22:78:f7:a5:f4:08:5c:1e:b2:8e:cf:
         64:b5:0f:c1:e2:85:f2:dd:d7:fe:86:c5:05:9a:20:50:1a:78:
         b1:15:0b:c0:97:38:34:47:7c:b3:b8:94:3c:2f:fc:c8:af:56:
         5c:52:41:6c:ef:07:b0:64:f6:1f:c2:90:18:63:4a:cc:72:14:
         b2:45:f1:d4:25:81:96:c0:dd:61:17:a3:9e:4f:23:11:14:4e:
         4f:66:8b:b7:1c:53:e6:cf:2c:cd:fc:24:cd:6e:02:4a:eb:b7:
         13:e8:e2:ed:e8:ce:31:45:39:ab:77:f7:e9:f6:10:8c:c6:ba:
         92:27:3c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:34 2024 by rpki-client on console-fra.rpki-client.org