Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/20fe9757-1085-3d95-b6cd-1eb2c897d7f9.roa
File:                     20fe9757-1085-3d95-b6cd-1eb2c897d7f9.roa (raw, json)
Hash identifier:          gGP/V+vanVJ9P0A/j3yfz05m7IdsSiIHxQuEN7aggqc=
Subject key identifier:   3A:58:3B:2B:9A:E8:D6:CE:18:1E:A7:ED:12:0A:E0:71:AE:1D:BB:9F
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F432858452AB7E0B5CADB65DFDD7EC100
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/20fe9757-1085-3d95-b6cd-1eb2c897d7f9.roa
Signing time:             Mon 11 Mar 2024 01:00:26 +0000
ROA not before:           Mon 11 Mar 2024 01:00:26 +0000
ROA not after:            Sun 09 Jun 2024 01:00:26 +0000
asID:                     174
IP address blocks:        2602:fd92:140::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2a:b7:e0:b5:ca:db:65:df:dd:7e:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Mar 11 01:00:26 2024 GMT
            Not After : Jun  9 01:00:26 2024 GMT
        Subject: CN=49479a35-5eee-4bd8-976d-3c4737e4060f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6a:2a:22:a7:f5:ae:e6:20:cd:c1:df:49:49:
                    f9:06:4b:d4:d5:d1:38:27:9c:2f:bb:03:b0:62:e7:
                    cd:ba:f2:e3:76:bd:cf:34:0c:fc:3b:2f:12:46:57:
                    95:1a:47:b7:94:ce:03:9b:0e:75:d1:33:bc:13:28:
                    8e:43:7d:a7:ba:72:e1:1f:8d:67:63:4f:06:92:81:
                    fd:22:af:17:2f:5b:82:33:d9:49:f0:bb:d9:31:41:
                    a8:b2:c4:e6:5d:fe:9e:22:75:61:40:1f:44:84:d7:
                    8b:67:3d:ba:94:15:ff:25:d1:66:f6:8b:2b:43:9e:
                    73:ec:79:2d:72:ec:36:94:db:ce:11:51:08:b2:42:
                    ca:6b:ec:1d:1a:db:f1:8a:1e:c3:da:77:a2:2b:89:
                    52:5d:d8:d5:a9:01:ad:fa:fd:42:03:03:28:2f:39:
                    39:87:51:2c:65:66:a6:34:4a:58:4a:80:db:60:1a:
                    0a:eb:f9:dd:f7:a6:72:aa:11:9b:6b:35:24:66:52:
                    a7:fc:9c:fd:41:3f:6f:83:81:97:5c:b4:5f:70:97:
                    f0:7a:3a:e1:a8:52:e2:9b:94:a2:05:ba:0b:c6:56:
                    46:48:b6:a1:d6:22:65:95:5c:ab:b8:e9:13:f5:98:
                    e7:09:c3:92:4f:89:f1:eb:f5:50:97:a1:48:e1:80:
                    68:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:58:3B:2B:9A:E8:D6:CE:18:1E:A7:ED:12:0A:E0:71:AE:1D:BB:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/20fe9757-1085-3d95-b6cd-1eb2c897d7f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:140::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:9b:dc:86:0a:f7:59:33:db:07:35:92:96:0b:cd:e6:c5:c5:
         c0:da:3e:88:9e:70:f9:9a:0c:08:bc:05:b1:86:b0:59:bc:c2:
         ee:56:d6:4d:e4:f2:9e:4c:58:47:87:f9:3c:c7:56:9c:aa:c7:
         ca:08:5e:98:a9:f4:10:a4:c8:cb:6f:a2:e2:92:83:cb:69:f3:
         90:68:af:75:98:b3:15:85:71:d4:4d:18:bc:12:ab:35:d3:34:
         4e:0c:49:bb:23:72:4c:e1:39:50:a1:6e:c3:2f:31:eb:44:c6:
         43:2a:ac:ff:8e:ac:74:4d:40:d1:86:0f:06:e0:a1:4d:f1:c4:
         58:e9:dc:90:4c:08:ce:ac:da:cc:eb:51:26:5c:7c:00:f8:bb:
         a2:92:fc:ff:38:37:81:a1:08:20:7f:eb:83:98:aa:76:4c:0c:
         d6:9b:a3:c5:0d:b1:56:74:c9:e4:bb:6b:38:c8:2d:f4:8f:17:
         d7:5f:47:2e:d2:f4:f7:1e:4e:da:71:65:ec:17:e3:00:0d:82:
         f5:6e:7f:75:1f:b7:19:dc:5f:7d:c6:38:99:17:11:f4:cf:1e:
         d6:64:22:0a:9f:90:09:c4:fa:3c:8f:bf:00:85:c9:7c:ee:74:
         85:42:8d:c5:5c:bb:da:8c:6d:67:84:81:14:70:67:5f:d6:c0:
         c9:8e:4f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:34:36 2024 by rpki-client on console-ams.rpki-client.org