Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/06c3809d-66d7-3e41-a354-f867244709a5.roa
File:                     06c3809d-66d7-3e41-a354-f867244709a5.roa (raw, json)
Hash identifier:          bzyo35h50ylo4QhW9LzjUjkn5X0GKpPm2JTNBVglHc8=
Subject key identifier:   13:E4:BE:A9:7C:80:DA:6B:94:6E:E3:97:33:15:B3:80:0C:4F:46:53
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F432858459BC89E0D9999631B518A6380
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/06c3809d-66d7-3e41-a354-f867244709a5.roa
Signing time:             Sat 20 Apr 2024 13:00:34 +0000
ROA not before:           Sat 20 Apr 2024 13:00:34 +0000
ROA not after:            Fri 19 Jul 2024 13:00:34 +0000
asID:                     31898
IP address blocks:        2602:fdaa:40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9b:c8:9e:0d:99:99:63:1b:51:8a:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Apr 20 13:00:34 2024 GMT
            Not After : Jul 19 13:00:34 2024 GMT
        Subject: CN=11f28358-9982-4e3d-9b0a-9ad2d30b9aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ca:86:d7:c0:97:45:53:0d:31:09:a0:79:a2:
                    59:b9:95:6a:63:a1:87:b6:44:f1:89:27:19:99:95:
                    2c:93:62:43:fe:1a:1e:a1:95:76:7f:3f:13:ef:f1:
                    9f:16:4a:8a:18:10:b9:b6:e3:46:f6:90:6d:7e:7e:
                    6a:36:4f:9e:d3:91:bd:32:ed:4a:fe:a3:93:38:4f:
                    93:57:f7:95:e5:29:5c:c1:1b:a5:c0:b5:9b:08:cd:
                    f6:e1:a7:1c:11:4d:3d:3a:06:0b:c0:16:63:36:b2:
                    67:b7:b6:39:e6:22:06:2e:3a:7c:33:69:d4:a1:c2:
                    de:b5:97:cd:7b:84:1d:17:2f:7a:28:e1:d1:7b:92:
                    73:fa:d6:8c:e6:4c:a0:32:3e:ea:2a:8f:fa:95:c8:
                    be:ce:6e:c2:dc:9d:7d:22:9e:33:c7:b5:e1:92:df:
                    d1:e0:94:e9:0b:f2:39:7b:64:e0:5f:3c:15:73:6e:
                    96:12:c8:59:a3:1a:13:35:75:06:2c:33:7d:bf:a2:
                    3e:12:1f:4a:d3:78:4c:1e:b2:bb:7d:cd:42:15:0c:
                    f4:12:3b:72:ad:60:ab:46:63:e2:31:52:fe:ac:b8:
                    91:a5:3b:77:93:a9:d3:1e:49:9c:88:1a:49:34:f6:
                    66:32:94:19:14:44:ce:19:15:63:62:14:c6:a9:44:
                    34:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E4:BE:A9:7C:80:DA:6B:94:6E:E3:97:33:15:B3:80:0C:4F:46:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/06c3809d-66d7-3e41-a354-f867244709a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdaa:40::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:1b:f7:40:42:f6:27:38:93:0d:79:80:68:86:43:2f:a5:3b:
         2e:23:73:b9:e1:97:be:d0:a3:d7:bb:a4:50:fe:87:9b:21:40:
         9f:b8:9e:0b:6a:f1:60:66:9f:c7:a5:f8:13:87:91:a7:f8:e4:
         1f:b4:ac:1c:fb:93:8f:7a:e9:b0:43:04:5f:8c:1e:36:41:eb:
         39:f1:14:5c:91:cb:12:50:8b:97:d0:93:a0:12:99:ff:e1:ab:
         70:62:99:35:45:6a:00:37:2a:7f:16:50:53:90:c6:fe:55:e6:
         5c:cb:c4:4d:27:8f:6d:16:92:d6:ca:a7:9c:10:13:fe:84:6a:
         80:b4:90:01:4f:77:23:68:9d:b8:58:e5:2a:89:d5:2b:dc:ef:
         8c:52:13:78:f4:f7:59:95:41:6f:33:2a:f7:3a:bf:f3:0c:98:
         ec:8b:e9:43:13:d9:74:ac:39:c3:1a:58:28:81:e4:e9:d4:6e:
         f2:2b:32:b8:52:ab:ed:b6:18:47:7c:df:cd:8d:fe:61:06:f6:
         82:36:89:79:07:1f:ba:50:f4:e8:91:59:8f:73:b7:01:b9:2f:
         48:68:d7:21:b9:02:89:b2:b6:c7:d3:56:e9:22:a3:9e:6a:d5:
         1d:bd:61:8f:bb:63:62:53:07:80:02:33:67:c1:40:27:f0:99:
         45:de:dc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:51:46 2024 by rpki-client on console-ams.rpki-client.org