Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/e38c5b2c-3ac5-3095-9c66-b14c15b4ab75.roa
File:                     e38c5b2c-3ac5-3095-9c66-b14c15b4ab75.roa (raw, json)
Hash identifier:          FK5nWGWY6gSKLIIlAVMoDvZKiGLMCZQW4eSEUMVDPeM=
Subject key identifier:   0F:AB:29:33:17:C0:69:71:42:CE:97:BA:9A:79:D5:E2:36:95:61:28
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F4328584598FE03D0DFF33F6C5A94A680
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/e38c5b2c-3ac5-3095-9c66-b14c15b4ab75.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     31898
IP address blocks:        2602:fdaa:90::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fe:03:d0:df:f3:3f:6c:5a:94:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=c5750679-927a-468e-a6c9-949a6c696148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7e:e0:f2:bc:ce:b4:bc:73:85:f8:5b:ab:6c:
                    55:86:93:f7:8a:86:f7:f7:67:11:0b:12:88:b6:5a:
                    87:6d:1d:da:32:44:d5:66:56:10:57:3b:ef:b0:53:
                    69:82:c0:65:3c:74:23:a3:dd:6b:57:60:50:a0:d5:
                    66:9d:7e:7f:e5:7a:de:68:53:e7:68:bc:46:05:e0:
                    2a:52:c1:67:39:31:42:5e:3d:ee:ab:f9:54:43:a7:
                    41:73:f7:1b:0d:0a:ac:3d:f5:88:ff:e7:59:3c:3d:
                    10:48:47:4a:93:7b:98:66:06:23:29:8c:e0:12:52:
                    bb:7a:85:0b:29:b8:4c:ab:99:7f:11:0c:00:14:ea:
                    22:38:bb:fb:6b:23:99:98:11:a0:0d:74:de:e2:bc:
                    3a:b5:fd:13:11:41:77:53:56:dd:eb:62:d0:7c:7b:
                    91:3d:8f:65:d2:37:0b:75:bb:7a:a9:bb:f5:0a:17:
                    85:94:e6:e6:1c:46:31:c5:7a:f0:00:92:60:75:7d:
                    7f:07:93:77:3f:3e:a8:5b:e2:05:a5:fb:55:c4:9d:
                    57:ca:20:4b:a3:e3:c0:47:70:cd:50:4c:ad:73:81:
                    94:29:1a:60:f7:cd:e8:bb:7a:b8:86:20:81:45:55:
                    c6:96:1a:13:83:0f:a5:63:d3:67:fe:03:58:eb:ac:
                    2e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AB:29:33:17:C0:69:71:42:CE:97:BA:9A:79:D5:E2:36:95:61:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/e38c5b2c-3ac5-3095-9c66-b14c15b4ab75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdaa:90::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:2d:86:77:87:bd:14:b1:68:6d:4d:86:a8:69:d5:c0:52:9a:
         31:d7:b6:dd:2b:d9:aa:c8:56:1a:2f:8b:d9:c1:f8:c6:f8:c5:
         bd:00:4d:ac:c0:11:61:6b:f2:2a:ba:4a:49:74:91:30:f6:81:
         28:36:3c:e2:9d:af:3e:70:f0:8a:55:bc:ef:95:e8:f0:b1:5c:
         93:43:7f:f7:aa:dd:b5:93:d3:04:af:65:df:9d:e5:2b:66:ad:
         34:d1:6a:2f:94:52:d3:72:7d:49:e1:b8:4b:8a:8a:92:e3:4b:
         d5:94:00:bc:e2:0a:67:f0:b1:a1:8e:e5:b0:50:18:a6:0e:4f:
         25:fc:4f:a4:48:4c:7d:a2:58:ee:6e:17:6d:a7:f1:85:bf:51:
         10:b7:83:e3:6d:3b:c6:bc:05:38:19:89:6a:4f:e3:d3:a5:91:
         55:a1:8d:ac:44:33:e1:1c:94:68:fe:d6:d3:c4:03:8d:1e:65:
         be:87:a3:c9:e6:6b:3b:8f:45:ec:f4:98:5c:ec:de:c5:be:42:
         86:63:4c:c5:78:77:3a:b9:d7:0a:e0:1e:d9:de:b1:cc:b2:79:
         cb:c5:ba:6c:21:98:99:fa:f6:9d:1d:8e:4f:21:e1:c6:bb:a0:
         2f:09:83:33:92:2f:a0:77:ea:2f:26:3b:11:8a:75:66:8a:87:
         48:32:f3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:27:08 2024 by rpki-client on console-fra.rpki-client.org