Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104/0c04d91a-7fcf-3647-a3dc-bcedb63d6b05.roa
File:                     0c04d91a-7fcf-3647-a3dc-bcedb63d6b05.roa (raw, json)
Hash identifier:          WVePUJkizvph+96r3yE0dZtGNYIoQVHyd7NvVMTTd8c=
Subject key identifier:   8F:92:AF:3A:66:A5:C2:23:88:47:80:04:B8:51:E2:40:D5:30:E5:94
Certificate issuer:       /CN=5b959ce4-3ae9-4721-8444-22b2e7161104
Certificate serial:       010D0C9F43285844EA9FF0B39CC700511F13EE50
Authority key identifier: F7:04:0B:E9:9B:F2:56:71:7F:ED:45:FE:D5:1E:7E:0A:FC:8F:D5:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104/0c04d91a-7fcf-3647-a3dc-bcedb63d6b05.roa
Signing time:             Sat 17 Feb 2024 02:00:27 +0000
ROA not before:           Sat 17 Feb 2024 02:00:27 +0000
ROA not after:            Fri 17 May 2024 01:00:27 +0000
asID:                     32109
IP address blocks:        2602:ff0e::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104/5b959ce4-3ae9-4721-8444-22b2e7161104.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104/5b959ce4-3ae9-4721-8444-22b2e7161104.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ea:9f:f0:b3:9c:c7:00:51:1f:13:ee:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b959ce4-3ae9-4721-8444-22b2e7161104
        Validity
            Not Before: Feb 17 02:00:27 2024 GMT
            Not After : May 17 01:00:27 2024 GMT
        Subject: CN=8f3fdf87-f9cc-4a43-ac36-9c907223e763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:83:a9:7f:b7:a7:82:1f:bc:36:c0:64:4d:94:
                    e4:d0:1b:d8:0b:97:1e:12:5d:29:c0:e0:0b:28:97:
                    98:73:84:84:59:e9:cd:97:da:84:17:89:9b:6c:a2:
                    b0:fc:16:e2:75:f1:ba:11:f2:07:d6:f4:a6:58:54:
                    3c:61:83:0b:f2:8e:6b:40:3b:c4:68:5d:2f:98:02:
                    67:03:72:f5:8a:6c:46:4b:f7:9a:90:f6:d8:ed:08:
                    b8:a6:92:d0:66:ab:e8:33:8a:cc:04:0f:f3:52:bc:
                    a4:f8:d7:b2:36:65:8a:5a:c4:d5:54:01:04:2b:4c:
                    33:3f:5b:f1:b8:bf:1e:d9:e2:fa:71:c6:75:be:83:
                    af:cc:a7:99:3e:70:cd:0f:1f:c0:90:23:e7:a0:a7:
                    a2:76:ce:be:e1:ae:b3:6e:ce:f4:f9:d6:7f:60:8e:
                    9d:1e:12:c7:51:f3:bb:79:51:1b:35:97:ea:01:51:
                    84:56:d3:72:86:cb:1b:91:ad:11:10:3b:f5:04:7f:
                    5c:a8:f0:c0:19:54:80:03:bc:0a:d2:68:2b:5b:ce:
                    70:e3:44:f8:9c:ae:e8:68:22:75:84:75:67:20:21:
                    8f:5b:79:5e:d7:fd:4e:de:64:34:f7:9e:b4:13:da:
                    d0:65:7d:99:a4:38:b0:32:f0:57:73:13:53:e0:c9:
                    a1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:92:AF:3A:66:A5:C2:23:88:47:80:04:B8:51:E2:40:D5:30:E5:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104/0c04d91a-7fcf-3647-a3dc-bcedb63d6b05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104/5b959ce4-3ae9-4721-8444-22b2e7161104.crl

            X509v3 Authority Key Identifier:
                keyid:F7:04:0B:E9:9B:F2:56:71:7F:ED:45:FE:D5:1E:7E:0A:FC:8F:D5:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff0e::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:aa:b8:64:66:dc:8e:30:a5:ff:94:f6:aa:ad:2b:2f:7e:36:
         ed:2d:02:65:9d:d2:ad:cc:39:5b:68:76:94:ce:70:a5:2b:7e:
         ea:38:e8:10:b1:c0:28:bb:9a:c5:4e:38:7d:65:4b:1e:a5:95:
         83:a3:44:8f:c9:2a:98:17:be:54:fe:94:74:ab:70:fc:9a:95:
         e4:e0:c2:f8:09:c0:ed:c0:10:f8:96:a4:06:ae:6e:77:69:82:
         e8:e1:51:52:fc:79:fe:75:f5:42:8b:4b:be:09:53:34:25:60:
         e3:4f:78:01:b5:c4:19:b1:c7:72:34:b3:fd:56:51:89:e3:22:
         e1:0c:07:e7:0d:9e:06:7f:c5:38:54:98:c1:f5:f4:b7:fe:45:
         6d:5e:32:07:7e:b4:6f:83:c5:f7:b3:ae:a9:8f:00:17:03:f8:
         13:9d:36:62:0c:23:9d:fc:26:d0:1c:95:12:72:32:fe:dd:fc:
         88:e3:89:d7:e4:be:1f:74:ed:7c:da:c2:e1:0f:c8:82:cb:c7:
         c0:24:47:18:f7:3e:a0:84:d2:f1:1f:5a:16:22:84:cb:0a:75:
         e2:36:f7:e5:da:e1:c8:cd:52:ea:f5:65:2f:bc:be:3e:00:d0:
         6a:e1:e9:de:74:65:97:9c:66:56:14:ee:8e:42:5a:c5:46:db:
         d1:ff:e7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 21:42:56 2024 by rpki-client on console-ams.rpki-client.org