Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/0bbf9d71-8699-39f7-8db3-a034ef8819fd.roa
File:                     0bbf9d71-8699-39f7-8db3-a034ef8819fd.roa (raw, json)
Hash identifier:          OZTCtY5HO3p8kMzmXVvjYY5v3a8RHsk1ddYxDfoTtk0=
Subject key identifier:   8C:02:BE:B3:9A:AB:1B:1B:10:18:90:D6:C0:69:07:DE:98:84:D0:17
Certificate issuer:       /CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
Certificate serial:       010D0C9F43285845ADEE0E31845437856B9CCE00
Authority key identifier: A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/0bbf9d71-8699-39f7-8db3-a034ef8819fd.roa
Signing time:             Sat 27 Apr 2024 01:00:26 +0000
ROA not before:           Sat 27 Apr 2024 01:00:26 +0000
ROA not after:            Fri 26 Jul 2024 01:00:26 +0000
asID:                     210630
IP address blocks:        2602:fc24:16::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ad:ee:0e:31:84:54:37:85:6b:9c:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
        Validity
            Not Before: Apr 27 01:00:26 2024 GMT
            Not After : Jul 26 01:00:26 2024 GMT
        Subject: CN=1d732321-3494-4f08-a441-55f5eb293e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:38:7f:dd:5b:77:c9:6e:ec:a2:94:32:7d:de:
                    c0:a8:63:50:f2:38:d3:c3:e6:85:31:8d:ec:83:a5:
                    5e:ff:8d:d0:a8:d8:af:9d:52:c2:b5:d3:7f:e0:de:
                    4b:ef:eb:40:ce:cb:89:13:5c:1f:da:62:69:79:ac:
                    b1:19:0e:b0:70:3d:bd:02:c3:d6:68:f7:ec:56:74:
                    03:c8:7e:b9:f0:2f:ae:2a:48:2e:14:54:44:98:01:
                    a4:49:b7:70:47:9e:a8:86:3e:e5:46:4d:d1:a7:0c:
                    a1:ca:91:a9:45:b2:c7:de:71:fa:f5:00:1a:a7:e8:
                    f7:f9:de:1c:70:89:5b:0a:9a:e9:be:c0:41:9b:bf:
                    29:90:fd:d3:dd:5d:d8:29:75:1d:32:b9:86:6e:85:
                    db:cf:3e:50:ce:12:61:37:17:3f:96:3b:5f:03:32:
                    81:5d:9f:1b:9c:ae:04:53:d1:a1:d3:8f:09:5a:48:
                    ee:f8:73:1c:39:7e:0a:06:f7:50:57:c7:c6:1c:45:
                    f5:2d:75:dc:7d:dc:81:01:f3:e5:b4:04:1c:45:85:
                    4e:8c:7a:b9:79:56:7e:09:86:a9:dd:65:54:bb:eb:
                    29:2f:9b:c0:f2:d2:7f:a0:a1:42:d0:fe:de:8e:87:
                    88:e3:1e:33:0b:f1:bb:e0:9a:ae:88:ec:bd:7f:ae:
                    f3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:02:BE:B3:9A:AB:1B:1B:10:18:90:D6:C0:69:07:DE:98:84:D0:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/0bbf9d71-8699-39f7-8db3-a034ef8819fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl

            X509v3 Authority Key Identifier:
                keyid:A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc24:16::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:6a:f5:db:bc:d0:09:50:4d:c4:6f:8d:d2:19:16:98:55:5e:
         98:c6:63:bb:25:68:b3:bb:0f:3f:af:e8:f6:f5:87:78:a1:f5:
         f1:5b:84:f2:30:52:14:ae:86:f3:07:71:5e:3d:0c:c6:6b:a6:
         6e:78:91:6e:b0:c7:5b:5c:3c:c5:4a:a1:1c:20:bf:67:82:e7:
         84:a4:62:0c:e4:a5:e0:af:ce:7a:75:73:e3:b0:8a:e5:8f:9c:
         78:29:3a:55:eb:17:c7:1c:0b:a8:c3:fb:64:44:83:f0:03:bc:
         f0:4d:7f:17:35:f9:47:b1:e9:80:63:3c:62:62:24:33:61:25:
         5f:f3:58:38:5d:16:4f:ba:6c:d9:1f:0b:59:e3:68:c0:e7:0f:
         06:67:86:15:e3:41:61:52:ad:4d:66:c5:8d:f6:3f:36:29:fc:
         80:22:41:d1:e3:6c:64:3a:f8:bd:ce:4a:f9:a0:d0:17:b9:7e:
         9a:a3:ed:1c:27:6c:43:de:d5:42:7e:8f:fa:98:da:92:12:66:
         1f:a1:8a:db:3f:8e:97:25:95:10:0c:91:bb:55:05:15:b3:59:
         0e:ba:37:85:e4:6e:85:18:2e:41:ff:21:eb:b2:9d:f2:7e:19:
         83:b8:87:17:24:d0:c0:32:8d:dc:77:16:d1:dd:c6:ff:e9:ba:
         fc:12:ef:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:28:07 2024 by rpki-client on console-ams.rpki-client.org