Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/82735312-5a03-3ac8-81b5-8933874e041c.roa
File:                     82735312-5a03-3ac8-81b5-8933874e041c.roa (raw, json)
Hash identifier:          AqMRTs4yuQQDpTMYpGtRM/nZscynGMENHhEbLk5UVBI=
Subject key identifier:   41:14:EF:EE:28:62:1B:DE:78:FA:3A:CC:A0:C9:F2:23:17:7A:54:77
Certificate issuer:       /CN=6ac516fb-e4df-49c1-82bc-fed2399d21c2
Certificate serial:       010D0C9F432858458B088C1365F52A3AE0BB5D80
Authority key identifier: 17:89:41:4A:81:2C:AF:72:C7:E2:27:3F:C0:5C:CC:33:C2:91:67:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/82735312-5a03-3ac8-81b5-8933874e041c.roa
Signing time:             Sun 14 Apr 2024 13:00:34 +0000
ROA not before:           Sun 14 Apr 2024 13:00:34 +0000
ROA not after:            Sat 13 Jul 2024 13:00:34 +0000
asID:                     399906
IP address blocks:        2602:807:6007::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/6ac516fb-e4df-49c1-82bc-fed2399d21c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/6ac516fb-e4df-49c1-82bc-fed2399d21c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8b:08:8c:13:65:f5:2a:3a:e0:bb:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ac516fb-e4df-49c1-82bc-fed2399d21c2
        Validity
            Not Before: Apr 14 13:00:34 2024 GMT
            Not After : Jul 13 13:00:34 2024 GMT
        Subject: CN=58a75d37-57b1-463f-ac5b-dcdfe4ca46d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:25:5f:d7:0a:18:58:5f:1e:08:df:f0:a0:75:
                    e7:01:6d:09:05:f6:5f:10:7d:4d:0d:f0:f4:ce:22:
                    06:41:0d:85:af:23:10:3e:21:dd:9e:16:91:8c:34:
                    d3:12:8d:e5:44:03:23:ac:fa:2b:5b:fc:53:5c:c9:
                    20:63:a0:5c:eb:4a:00:45:c4:46:6d:22:01:f3:26:
                    3d:57:7b:73:3b:a1:d2:ee:9c:11:e7:98:16:a9:65:
                    9b:61:38:51:f1:91:d7:be:d8:5b:fa:86:1d:91:49:
                    50:e1:30:0d:a2:f7:33:77:37:34:2a:0e:91:a3:6f:
                    cd:bd:5d:cd:36:ae:59:77:d2:ad:d9:1b:dc:f0:bb:
                    75:00:20:3c:73:c1:e9:9b:3d:97:f8:8a:05:3d:a7:
                    69:16:ed:f7:28:86:1e:fd:c7:50:c7:39:39:42:60:
                    f0:21:9f:59:fa:50:32:76:98:21:f8:35:f4:f4:ed:
                    29:f3:14:1d:92:08:40:57:d7:6e:99:9a:27:f8:98:
                    08:39:0f:60:5c:fd:ec:88:94:e0:20:4a:b6:f4:3c:
                    57:61:0f:c9:d8:76:17:af:a4:b5:7e:d9:7a:37:3e:
                    76:7f:7f:92:aa:47:62:57:13:0b:06:8f:43:3c:08:
                    fd:4c:f3:da:6f:12:6b:d6:13:3e:fc:63:a6:02:17:
                    27:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:14:EF:EE:28:62:1B:DE:78:FA:3A:CC:A0:C9:F2:23:17:7A:54:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/82735312-5a03-3ac8-81b5-8933874e041c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/6ac516fb-e4df-49c1-82bc-fed2399d21c2.crl

            X509v3 Authority Key Identifier:
                keyid:17:89:41:4A:81:2C:AF:72:C7:E2:27:3F:C0:5C:CC:33:C2:91:67:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:807:6007::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:63:97:2c:54:3e:7b:ae:a1:52:3c:4b:53:1a:35:95:b4:d8:
         73:d6:1f:8b:3a:4a:76:11:81:cf:8e:b9:67:bf:b1:ad:b5:27:
         01:a7:7c:37:c7:47:7a:27:23:1b:c2:0e:3b:d7:48:2a:ae:f9:
         cd:da:1a:b0:a8:e3:a5:3d:70:0f:d5:99:0d:63:14:d2:6c:8b:
         06:e0:c4:3c:ea:9b:c2:80:ff:71:0e:97:0f:3e:40:88:87:1b:
         92:80:3c:fd:18:71:98:2e:a5:a0:29:a4:c7:88:86:9a:19:c2:
         de:31:7f:2e:ec:ce:b6:e4:ba:e3:ad:68:51:aa:57:7c:a5:bd:
         0b:3d:8b:9d:11:1d:0a:e0:e8:e4:2f:aa:1b:1a:48:a2:35:29:
         fe:33:ba:04:94:74:8f:89:84:dc:68:36:96:a8:48:f2:05:dc:
         65:7f:a4:04:7b:31:8a:52:18:20:5e:d8:72:7f:3f:ab:e9:8b:
         14:0c:74:ea:67:ba:32:43:c7:04:c7:00:77:41:b7:8a:09:85:
         40:b9:34:81:fb:d1:3f:73:d5:99:67:bf:93:f2:ad:2f:33:42:
         88:d5:26:95:17:06:3a:ab:d1:7f:fe:20:ae:7f:82:56:ec:6c:
         25:80:09:87:1e:08:df:ca:3d:f0:cc:01:72:7f:e3:3a:0f:07:
         97:9f:f4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 20:37:31 2024 by rpki-client on console-fra.rpki-client.org