Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/cb18dc66-e88c-3782-88f6-96c7a45cc76f.roa
File:                     cb18dc66-e88c-3782-88f6-96c7a45cc76f.roa (raw, json)
Hash identifier:          e7ZHzPMNfNOA/xIBxVVeIHZKS2qOFG0CE+FpxTBdEiw=
Subject key identifier:   D3:68:56:49:05:47:F5:96:12:E7:DC:8C:1F:05:3F:BE:30:C4:32:7A
Certificate issuer:       /CN=32262fda-73b9-4875-8f83-9733217ce893
Certificate serial:       010D0C9F43285845777DBF8C93363553A2F10180
Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/cb18dc66-e88c-3782-88f6-96c7a45cc76f.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     20278
IP address blocks:        2602:ffc8::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:bf:8c:93:36:35:53:a2:f1:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=84c2e084-9f07-4fb1-8c5e-76428f1c10c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:86:0f:09:9b:96:f2:1a:dc:21:ff:ad:6d:e0:
                    c7:79:8d:23:1a:b3:ef:d6:67:44:76:50:11:58:97:
                    ba:b8:f9:a3:56:6b:37:79:b7:76:f4:ef:9d:75:52:
                    eb:de:89:ca:66:ea:30:3d:ab:57:db:56:7f:32:15:
                    67:db:f6:39:cc:48:7e:76:63:b9:89:35:0e:58:db:
                    8c:aa:bc:f1:d4:d1:37:e1:fc:cf:16:53:2f:75:a4:
                    73:c0:d1:fb:09:1e:a2:8f:2b:ca:46:48:4c:ed:34:
                    6c:42:8f:f7:45:1c:cc:8d:60:aa:ac:a3:71:55:69:
                    e3:14:8a:65:37:87:cc:87:09:14:05:5c:88:38:fc:
                    e1:13:79:e0:b0:9b:35:c5:50:9b:1a:39:f8:da:32:
                    fd:35:04:8e:ae:06:4a:f3:39:2c:a3:60:a7:a5:8a:
                    fc:83:73:3c:d1:0a:ae:68:59:fd:d2:99:2f:44:43:
                    e9:9e:4e:4f:0d:ae:43:6d:0e:a2:e1:85:70:e6:cf:
                    a4:43:f2:59:3a:49:1c:06:6f:0e:ef:7e:59:d2:02:
                    0a:c6:d2:99:bc:fa:b3:d8:06:ca:db:84:87:04:e6:
                    a9:3e:93:2c:37:35:15:df:c8:f8:ea:10:9c:8a:63:
                    35:8a:89:52:f2:56:aa:cd:46:53:6c:20:a4:eb:71:
                    0c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:68:56:49:05:47:F5:96:12:E7:DC:8C:1F:05:3F:BE:30:C4:32:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/cb18dc66-e88c-3782-88f6-96c7a45cc76f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl

            X509v3 Authority Key Identifier:
                keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffc8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:f0:e6:59:56:96:bb:0e:b4:42:04:d3:9e:71:78:fc:82:79:
         41:b6:82:e8:44:07:cd:7d:ab:9c:78:77:77:52:1e:34:47:e8:
         c9:84:13:ca:a1:28:c9:38:51:65:b4:2e:10:88:4d:a2:01:e4:
         76:1e:0f:48:c8:0a:2a:14:fb:ba:b9:18:ae:bb:30:0d:d8:ba:
         5d:dd:9a:ab:c8:39:cf:5b:06:3d:75:24:d9:0a:ca:bc:8e:e8:
         01:22:e0:09:11:91:73:fc:51:72:8c:41:9d:13:f9:33:e5:b7:
         99:24:38:d7:bb:30:e2:03:44:9a:6a:7d:d0:5f:c6:ff:a3:cb:
         19:50:a9:0c:21:02:76:47:c2:ca:31:ff:32:dd:78:37:1f:8d:
         04:fb:64:33:a7:3b:2d:be:77:b1:9f:2b:c3:aa:1a:40:87:94:
         20:86:70:f8:a3:ce:7c:73:2e:98:46:03:7a:d1:fc:55:3d:31:
         17:2b:7f:cb:eb:d1:c2:05:eb:36:e2:6c:f0:c6:73:b8:95:c7:
         e2:c6:2c:25:37:2e:36:c6:fb:4b:73:4b:f2:2c:d1:80:2b:2f:
         af:42:38:eb:b9:8f:6b:fe:84:d5:5a:27:4e:09:75:a2:47:06:
         0c:7c:1b:c2:20:a9:2d:bf:c7:4d:26:a3:5b:8c:7c:69:d0:61:
         12:39:b0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:53:35 2024 by rpki-client on console-fra.rpki-client.org