Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/a0ed00a4-2dcb-32ed-a058-569efce134bb.roa
File:                     a0ed00a4-2dcb-32ed-a058-569efce134bb.roa (raw, json)
Hash identifier:          cRpPyFq9VVX0p1BqQtYtwL4HeAJpfleXRBamw7W9r4M=
Subject key identifier:   B2:1A:CD:E5:70:28:10:EB:71:07:10:B0:AD:89:73:9A:B5:26:A4:59
Certificate issuer:       /CN=3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814
Certificate serial:       010D0C9F43285845C5A8ED46E5ACED66F3E36300
Authority key identifier: AE:5A:17:D4:5E:19:27:94:CE:6C:CF:74:F7:18:5D:98:55:8B:CD:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/a0ed00a4-2dcb-32ed-a058-569efce134bb.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     62900
IP address blocks:        2602:2d5:f1::/48 maxlen: 48
                          2602:2d5:f0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:ed:46:e5:ac:ed:66:f3:e3:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=44b1c821-7e42-404f-88ee-a07ebccca1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:38:3e:fb:d3:f1:9f:97:9a:01:b1:23:bd:00:
                    15:55:c3:38:66:ec:ee:f7:42:b0:09:25:89:95:51:
                    31:5f:2a:ee:fe:c9:36:d6:34:90:e6:92:43:0a:cd:
                    34:05:85:fb:14:25:f7:d4:ca:11:9e:5f:13:d8:dd:
                    57:b1:b6:81:b7:dc:05:74:3c:22:6c:7b:65:f9:b8:
                    6e:51:84:7d:63:aa:0f:c8:69:ea:bb:03:7f:cc:06:
                    57:cf:99:80:3e:cb:1e:ae:8f:93:b8:2b:cd:94:73:
                    f1:fe:4a:fb:db:aa:d2:88:b8:60:e6:17:f7:32:4e:
                    b5:54:f2:60:0f:72:1a:d0:36:b6:7a:97:d0:c2:6d:
                    bf:37:45:02:2c:d5:37:a6:cd:e5:19:94:e0:b3:a6:
                    b5:53:29:1f:c7:59:b9:c4:30:1c:f7:09:10:be:a7:
                    a7:95:18:aa:2c:ee:f3:c2:f7:04:8d:2d:c1:a0:0f:
                    52:fc:e7:a6:5c:bf:db:74:ee:38:72:66:82:13:89:
                    70:08:4c:61:ff:c6:17:11:63:8a:fc:dd:aa:c8:bc:
                    94:52:48:07:9d:c5:4f:ad:0f:a6:3f:b2:f7:2c:3b:
                    cc:a8:7c:1c:35:7c:c7:5c:ad:ad:14:11:0e:d9:49:
                    f9:19:0f:6e:29:01:1d:d2:2d:43:ef:91:15:0c:6e:
                    76:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:1A:CD:E5:70:28:10:EB:71:07:10:B0:AD:89:73:9A:B5:26:A4:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/a0ed00a4-2dcb-32ed-a058-569efce134bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.crl

            X509v3 Authority Key Identifier:
                keyid:AE:5A:17:D4:5E:19:27:94:CE:6C:CF:74:F7:18:5D:98:55:8B:CD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2d5:f0::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:ed:4d:a7:d6:d9:02:59:80:a6:bc:53:d8:de:95:f2:53:bb:
         14:ec:a9:b7:dd:64:46:38:39:4e:81:88:08:a4:2b:e5:39:17:
         5a:37:a1:cf:86:75:f2:bf:5c:fd:d5:3b:35:13:06:33:b0:c4:
         b1:9f:b2:9c:8a:ec:86:f9:06:4a:4a:b0:d5:ad:24:b2:45:0f:
         13:07:cf:66:60:46:5c:d4:6b:9e:34:3e:9b:82:6c:7d:45:cb:
         bd:e3:58:fb:13:42:68:25:45:b7:40:d9:13:40:e2:a8:13:6a:
         ea:25:97:67:35:bd:1c:ec:55:85:d9:9e:93:7f:41:0f:7a:74:
         86:22:6d:6e:f8:14:57:72:a8:9f:bc:30:4d:25:67:0e:7c:23:
         23:f0:ad:91:ec:8a:b1:ec:9f:62:f5:ec:69:02:84:29:65:cc:
         28:df:b8:10:5b:d5:0b:ac:94:27:ee:1d:a9:31:ce:9d:f5:df:
         e9:38:4b:03:a8:02:51:a6:90:ff:de:b7:fc:3d:60:61:69:85:
         f9:4b:97:d7:a2:c4:e6:e2:61:7a:ce:d8:42:1c:19:28:08:66:
         9d:39:6d:62:ba:f8:d4:4b:d9:61:a7:cd:f7:5d:4e:af:6f:f5:
         e2:43:c7:b5:ee:ed:63:ca:71:2c:9e:4a:89:22:cf:87:e3:49:
         7a:79:95:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 17:02:02 2024 by rpki-client on console-ams.rpki-client.org