Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/42d8c57e-fde5-393b-9bd1-1b0872741781.roa
File:                     42d8c57e-fde5-393b-9bd1-1b0872741781.roa (raw, json)
Hash identifier:          iipeu9eB628KIjIkueswmMF8HqR+M7UXD4z1wl+pKnY=
Subject key identifier:   0B:D9:5A:1C:A4:8C:DB:11:F6:42:64:45:11:86:1D:3E:41:10:B5:88
Certificate issuer:       /CN=a683f70a-4d8a-489e-b03c-abca94cd7852
Certificate serial:       010D0C9F4328584531B29A7F60747DF93609BF00
Authority key identifier: B8:59:03:9E:D8:37:04:1C:D9:8D:1B:75:25:FF:EA:F2:58:28:49:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/42d8c57e-fde5-393b-9bd1-1b0872741781.roa
Signing time:             Wed 13 Mar 2024 13:00:30 +0000
ROA not before:           Wed 13 Mar 2024 13:00:30 +0000
ROA not after:            Tue 11 Jun 2024 13:00:30 +0000
asID:                     200809
IP address blocks:        2602:fe69:f27::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/a683f70a-4d8a-489e-b03c-abca94cd7852.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/a683f70a-4d8a-489e-b03c-abca94cd7852.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:31:b2:9a:7f:60:74:7d:f9:36:09:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a683f70a-4d8a-489e-b03c-abca94cd7852
        Validity
            Not Before: Mar 13 13:00:30 2024 GMT
            Not After : Jun 11 13:00:30 2024 GMT
        Subject: CN=61370bb3-2194-414d-9f9e-9a081a3768ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d6:6f:c9:11:3d:df:6c:bc:fb:69:00:f7:42:
                    94:fb:dd:a9:bb:4a:e8:6b:35:61:21:11:94:58:47:
                    c2:59:53:a6:71:14:e4:83:ed:d0:01:ba:0e:89:83:
                    5f:74:9a:5f:08:c6:4c:8b:50:4f:dc:02:78:ec:3e:
                    1f:51:08:e4:e8:20:b9:5f:df:6c:88:02:f5:11:61:
                    24:87:e5:c7:7e:62:0a:9d:69:6d:5f:cd:56:8a:2a:
                    51:b8:a5:6a:0c:65:b4:a5:0f:a0:e7:4b:04:3f:91:
                    45:47:33:5a:e7:54:a4:55:96:38:4f:d8:ca:e2:e1:
                    6e:fc:9d:73:00:23:00:c2:0d:87:9d:3d:a1:de:74:
                    07:e5:5e:b3:60:a0:4e:b4:6d:30:92:78:a0:d3:a2:
                    70:18:9f:20:1c:23:0a:88:da:20:a6:ae:2f:0b:cc:
                    e0:f7:bf:77:18:2d:91:91:14:6d:ac:8c:9e:57:21:
                    11:e2:d9:1c:e8:df:ac:37:e2:ff:8e:d6:b6:c4:dd:
                    3c:e5:bf:29:fb:3a:41:e8:a1:41:ab:79:c5:14:cd:
                    a5:e9:e2:99:c0:33:66:12:38:1d:96:81:48:b2:0a:
                    a0:82:67:2e:ff:a3:f2:f4:2a:0d:45:e0:be:45:63:
                    ca:33:c5:84:5f:6c:e6:99:ef:aa:13:03:1d:00:a7:
                    b7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D9:5A:1C:A4:8C:DB:11:F6:42:64:45:11:86:1D:3E:41:10:B5:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/42d8c57e-fde5-393b-9bd1-1b0872741781.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/a683f70a-4d8a-489e-b03c-abca94cd7852.crl

            X509v3 Authority Key Identifier:
                keyid:B8:59:03:9E:D8:37:04:1C:D9:8D:1B:75:25:FF:EA:F2:58:28:49:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe69:f27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:05:7c:76:99:36:4a:dd:43:af:ca:3e:eb:6b:55:d7:68:04:
         5f:c0:b2:59:05:3b:1a:4b:4c:49:6f:ea:b2:ef:a6:a0:fa:c6:
         0a:2b:65:bb:0e:d5:74:56:45:8e:0d:28:71:45:c0:3f:bd:a8:
         ac:4d:50:0f:f4:ad:9f:d4:64:e5:af:e8:51:cb:99:e5:97:d5:
         a7:1d:b3:04:aa:7f:e2:93:86:f1:57:cd:bd:13:23:9e:9a:18:
         21:9b:7c:a4:25:bb:23:5f:c2:90:5c:c4:f3:09:2e:22:95:94:
         52:40:d4:d7:3d:47:09:db:5e:d0:19:2d:1b:93:83:07:74:7b:
         79:d1:e1:76:b4:a5:cf:3b:9c:75:90:3a:b5:37:63:66:c5:5f:
         fd:76:13:d4:51:76:cc:3c:cb:84:dd:a0:8d:f8:73:1f:67:c6:
         3a:7c:77:52:2b:25:72:d1:c3:3e:0f:05:32:28:5b:b9:87:45:
         09:d6:ea:1e:ca:f9:6c:92:4f:a4:e1:6f:82:91:f9:71:64:0a:
         48:d3:16:1a:ef:a9:d7:3f:54:4f:61:dc:77:ee:7c:db:36:a3:
         a9:45:bb:57:3b:aa:9e:8e:4e:d9:81:03:4a:86:42:f2:a7:ad:
         da:83:15:b9:e2:11:c6:e6:0d:c8:8e:31:a5:11:40:15:43:38:
         e1:b6:79:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:20:25 2024 by rpki-client on console-ams.rpki-client.org