Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/301ad889-a019-3e06-9ecb-a89ae218965d.roa
File:                     301ad889-a019-3e06-9ecb-a89ae218965d.roa (raw, json)
Hash identifier:          KDp0noELHUxFT6ssq4tw4ZE3MeSDcZ8UTKWetuyhrWY=
Subject key identifier:   B6:03:23:96:C3:96:9C:59:64:58:36:68:CB:78:B4:62:08:7E:16:AB
Certificate issuer:       /CN=731b750c-b48f-4a57-bf26-18e0bc6a456e
Certificate serial:       010D0C9F432858458DD34EEAE74EB1C02DCCB440
Authority key identifier: 13:E4:1E:72:24:24:5A:D5:9A:CF:07:0C:CE:42:27:BC:80:6C:CB:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/301ad889-a019-3e06-9ecb-a89ae218965d.roa
Signing time:             Mon 15 Apr 2024 13:00:35 +0000
ROA not before:           Mon 15 Apr 2024 13:00:35 +0000
ROA not after:            Sun 14 Jul 2024 13:00:35 +0000
asID:                     13649
IP address blocks:        2602:ff26::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/731b750c-b48f-4a57-bf26-18e0bc6a456e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/731b750c-b48f-4a57-bf26-18e0bc6a456e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8d:d3:4e:ea:e7:4e:b1:c0:2d:cc:b4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731b750c-b48f-4a57-bf26-18e0bc6a456e
        Validity
            Not Before: Apr 15 13:00:35 2024 GMT
            Not After : Jul 14 13:00:35 2024 GMT
        Subject: CN=aa9d8b71-e344-4238-b591-128b36eebe8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:16:9f:73:10:5f:3d:a0:db:91:0c:d2:09:7f:
                    68:72:7e:25:34:80:9e:49:19:be:65:0d:ac:e1:b2:
                    f2:81:54:28:e4:50:47:06:e5:86:01:76:af:9f:46:
                    52:6c:81:61:c1:6e:a8:2d:a4:69:5c:53:96:83:36:
                    da:e8:30:ff:70:44:57:0b:40:42:18:56:d7:86:d0:
                    89:f4:24:ae:cc:39:c3:c1:bc:63:97:96:e7:c3:21:
                    0c:95:54:ee:23:5b:9b:40:79:da:4a:36:4c:95:70:
                    85:7b:34:4b:8c:75:f7:c8:9a:b4:26:34:1c:ad:c1:
                    98:e8:15:e8:3e:cc:c2:f0:47:35:8a:03:96:d5:f2:
                    c5:11:28:e3:4b:ff:38:01:01:af:51:0f:94:4d:a9:
                    ff:a0:3d:36:17:7c:0c:da:9e:89:2c:22:4b:ac:1b:
                    c0:e2:a3:e4:92:e0:a0:a6:b4:c8:76:4c:97:bc:5c:
                    9d:82:12:ea:c9:2c:ce:11:de:1c:75:fe:c2:1e:08:
                    94:21:23:f5:bc:92:2f:13:0f:65:f5:b6:00:1b:cc:
                    6a:7c:dc:f6:fa:e2:99:85:12:7f:2b:50:41:66:6e:
                    e2:ce:72:2e:8b:81:9d:31:62:ad:4c:55:79:d6:59:
                    dc:ac:d3:50:e1:0e:41:d3:90:a5:c8:06:50:da:b2:
                    5b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:03:23:96:C3:96:9C:59:64:58:36:68:CB:78:B4:62:08:7E:16:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/301ad889-a019-3e06-9ecb-a89ae218965d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/731b750c-b48f-4a57-bf26-18e0bc6a456e.crl

            X509v3 Authority Key Identifier:
                keyid:13:E4:1E:72:24:24:5A:D5:9A:CF:07:0C:CE:42:27:BC:80:6C:CB:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff26::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:f5:91:8b:b5:41:83:81:f2:17:90:4f:d9:d0:99:78:0a:75:
         5d:7f:0c:0d:f0:0b:10:69:9c:08:fc:76:5b:10:0c:5e:ca:91:
         32:40:0d:91:7d:5d:94:fa:53:24:4c:74:72:90:68:b1:b2:18:
         4a:93:68:92:b5:64:b5:bf:24:36:9d:26:4f:a0:26:0b:b9:ab:
         8c:96:5e:ea:a6:90:34:d3:cd:c1:fd:80:70:92:ef:e3:a7:af:
         3a:e8:df:e5:d0:81:46:02:94:a3:70:43:34:4a:ec:19:1f:66:
         0a:26:d6:d4:c6:98:b4:b5:66:ae:88:61:ba:66:0a:0b:d8:c4:
         b7:e5:f8:0c:f4:b7:c3:81:5d:5d:15:60:c5:ca:04:14:76:b5:
         61:09:fc:30:0d:b5:6c:a0:fb:29:c0:1c:1e:8f:74:7e:c7:61:
         94:ac:7e:57:e0:f0:34:59:c9:c2:2f:a8:d4:0b:41:4b:70:80:
         dc:2b:77:53:ea:e1:27:5f:fb:97:f3:65:3e:ec:68:3c:5d:27:
         9a:d9:bd:51:19:cb:0b:8b:ad:7a:7e:04:7b:0f:10:1d:1d:58:
         d8:1a:39:85:cb:62:7d:8a:33:2c:40:4e:f0:8f:eb:f0:78:2b:
         bb:94:21:a5:12:10:63:c0:39:66:0f:b8:d1:c0:89:d8:f8:da:
         a1:62:5e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:26:29 2024 by rpki-client on console-ams.rpki-client.org