Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/60d1100e-3de1-311b-b5e5-9cee1401282d.roa
File:                     60d1100e-3de1-311b-b5e5-9cee1401282d.roa (raw, json)
Hash identifier:          t3sVFCcAh4b0P6AXitORbghiG56V9uCIP04v3SmM96c=
Subject key identifier:   68:BC:ED:20:13:14:F8:CE:DA:E0:10:D4:FB:63:88:A6:57:99:35:92
Certificate issuer:       /CN=3b0b4e45-c916-48be-ae0d-b57b80a30cdc
Certificate serial:       010D0C9F43285844957A15DC376384B137DF0F80
Authority key identifier: CD:F0:0E:4B:F1:FB:B5:39:ED:3F:7A:94:3C:D7:4A:2B:C2:0E:F7:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/60d1100e-3de1-311b-b5e5-9cee1401282d.roa
Signing time:             Wed 17 Jan 2024 14:00:31 +0000
ROA not before:           Wed 17 Jan 2024 14:00:31 +0000
ROA not after:            Tue 16 Apr 2024 13:00:31 +0000
asID:                     399612
IP address blocks:        2602:fc7a::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:95:7a:15:dc:37:63:84:b1:37:df:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b0b4e45-c916-48be-ae0d-b57b80a30cdc
        Validity
            Not Before: Jan 17 14:00:31 2024 GMT
            Not After : Apr 16 13:00:31 2024 GMT
        Subject: CN=4edb5f5c-b54c-4085-8135-883f86cfbcfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:95:ad:9a:b0:3b:5e:c7:d1:d8:81:0f:95:81:
                    ed:df:e8:c8:79:de:2b:18:ec:56:e3:00:f1:79:09:
                    5e:77:e7:5b:e5:e1:5a:04:6d:2c:88:8b:12:49:cb:
                    db:2e:cd:75:32:eb:62:85:2c:c3:9b:7d:48:33:9a:
                    77:92:dd:aa:19:6d:ae:4a:34:5c:3c:41:68:9c:60:
                    17:83:46:e0:b6:7e:17:f6:2d:52:62:1d:88:bc:2e:
                    b6:53:52:d4:01:8d:91:4e:30:cc:1b:6c:01:2d:0c:
                    c7:eb:f6:01:69:7a:fe:e5:9f:dd:fb:fa:53:42:54:
                    da:f4:47:c9:7f:9b:a2:c5:2c:d2:7d:5a:2c:bc:d2:
                    f3:fe:ab:1f:aa:26:ac:94:3d:7e:1b:fd:b5:19:3d:
                    21:17:4e:45:a8:e7:90:94:18:93:31:92:cd:19:dd:
                    b3:e3:fd:21:67:b7:63:93:71:16:91:d3:a6:a2:ce:
                    72:15:81:51:bb:8e:d6:46:7a:45:d6:df:50:8a:cb:
                    fb:40:c0:e3:b3:cd:85:25:65:02:f3:6f:ce:b5:d3:
                    f0:e4:6e:cf:0c:bb:3f:11:88:b9:42:84:73:fc:86:
                    f7:93:18:ab:dc:09:b4:22:56:89:74:3b:5a:8d:ff:
                    71:85:fb:7a:80:a6:72:ae:2c:32:18:c0:23:ae:2d:
                    84:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:BC:ED:20:13:14:F8:CE:DA:E0:10:D4:FB:63:88:A6:57:99:35:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/60d1100e-3de1-311b-b5e5-9cee1401282d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.crl

            X509v3 Authority Key Identifier:
                keyid:CD:F0:0E:4B:F1:FB:B5:39:ED:3F:7A:94:3C:D7:4A:2B:C2:0E:F7:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc7a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:dc:33:53:ab:99:38:c5:4e:47:a7:1f:6d:c5:81:e2:fc:7d:
         9d:62:ab:b8:ee:c9:b8:d8:32:09:22:54:1d:6c:aa:bc:1d:7b:
         ad:14:2d:d4:93:54:0a:04:0a:be:70:60:9a:9b:48:76:58:10:
         a0:da:9a:0a:35:bd:aa:14:30:b3:19:d2:1f:e9:40:26:45:53:
         86:d1:69:6d:c0:9d:b5:70:e6:70:31:a5:4d:66:cf:24:d2:ab:
         e9:2b:00:97:1e:1a:9f:02:f0:36:67:39:70:63:87:74:2f:89:
         9c:52:f2:97:82:61:7c:a6:93:b8:09:40:d0:d2:eb:35:43:3b:
         c5:95:51:0c:ae:cf:1e:e8:1a:30:ee:47:ea:db:8e:18:9e:47:
         23:48:c4:57:8f:39:8a:50:7c:2d:a5:8f:82:dd:c7:71:9a:3b:
         bc:be:1d:26:84:1d:93:be:53:e8:95:d4:60:b5:1a:24:41:4b:
         88:c6:55:36:74:85:35:e8:65:92:34:75:cd:37:df:d7:89:fc:
         5b:6d:f2:9d:1c:6c:d7:90:81:a7:cf:45:e5:51:25:eb:cb:cd:
         be:67:75:97:29:62:e7:a2:85:e1:de:2b:b4:1b:b4:f3:48:44:
         29:cd:c5:e7:7d:46:0c:44:e9:24:dc:6f:a4:9e:be:47:38:14:
         b6:c5:58:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 22:27:04 2024 by rpki-client on console-fra.rpki-client.org