Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/a141aecc-d387-3289-865d-15a9235c3670.roa
File:                     a141aecc-d387-3289-865d-15a9235c3670.roa (raw, json)
Hash identifier:          oo6xD+3486jeAZy+x5Ksn3EYXQQ7d2HyBP5CbgXZjNQ=
Subject key identifier:   E2:27:4D:FE:E7:F1:79:16:88:B0:70:06:F5:28:0F:00:82:5F:56:94
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F432858454D9D7C11C0E778F2C5158D00
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/a141aecc-d387-3289-865d-15a9235c3670.roa
Signing time:             Sat 23 Mar 2024 13:00:32 +0000
ROA not before:           Sat 23 Mar 2024 13:00:32 +0000
ROA not after:            Fri 21 Jun 2024 13:00:32 +0000
asID:                     36231
IP address blocks:        2602:fd92:cc0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:9d:7c:11:c0:e7:78:f2:c5:15:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Mar 23 13:00:32 2024 GMT
            Not After : Jun 21 13:00:32 2024 GMT
        Subject: CN=3a2ce307-98e6-495e-98d3-9c59213af786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e7:03:55:e0:6f:41:84:a0:f0:f5:d8:02:5a:
                    cb:82:ee:4e:38:c0:8e:8f:03:10:2e:b4:b6:0b:2a:
                    84:47:8e:ae:53:e6:3f:58:cf:28:c9:38:04:b2:4c:
                    42:1d:59:b4:83:d8:68:9f:83:9c:83:1e:7b:36:a5:
                    d4:98:23:40:38:c7:f0:28:e2:94:e6:a9:2a:54:ab:
                    0e:ed:49:41:76:c8:87:93:a4:fa:35:b0:19:bb:3c:
                    a5:b7:71:8a:07:a3:8a:b1:b7:6e:c3:11:96:cc:2a:
                    83:1a:0c:40:2b:78:5d:0f:73:09:23:2b:e0:a3:8d:
                    b5:fb:e8:64:85:c8:54:4a:69:8e:15:61:f8:e7:92:
                    aa:01:a6:e4:d3:e6:e2:ab:6f:ff:2d:88:0f:71:2a:
                    e9:4b:ec:85:c8:87:6d:70:16:1c:9f:12:13:9c:09:
                    dd:40:d1:b6:97:53:83:6e:17:ce:67:fd:a8:7f:dd:
                    d6:10:a0:57:2e:7a:86:8d:03:99:53:9e:c0:c3:21:
                    b7:ef:40:0e:c5:b6:79:24:2e:a9:b3:9f:9a:30:0f:
                    33:a6:a1:0c:92:e4:60:b4:a0:71:32:08:7c:b0:7c:
                    78:7c:5f:62:56:e4:9f:ad:89:ec:27:45:fa:4f:85:
                    f3:fc:c0:41:81:01:a3:96:39:38:de:81:f1:17:dc:
                    50:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:27:4D:FE:E7:F1:79:16:88:B0:70:06:F5:28:0F:00:82:5F:56:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/a141aecc-d387-3289-865d-15a9235c3670.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:cc0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:e9:dd:20:0e:69:32:71:81:1e:5d:c5:e0:6f:83:d5:2c:2d:
         27:d2:97:4f:5f:9a:1a:72:f6:ff:3c:36:3d:b7:b2:b3:3f:4d:
         09:dc:72:31:f0:b0:00:8a:4b:3b:e6:bc:da:32:64:41:f1:29:
         77:a5:20:ac:03:c3:a7:6e:d1:b9:26:63:45:3e:0c:f9:d0:07:
         0a:54:67:7c:bb:2f:aa:92:a2:17:41:e1:89:d1:f6:1a:83:ec:
         dc:f2:1b:6a:3b:a7:37:f4:fc:e6:a4:69:3d:0e:bc:13:ae:ce:
         13:26:20:a2:01:bd:29:59:ef:7b:be:d1:14:e7:b4:79:69:ab:
         75:56:65:92:3f:c2:77:f8:1f:91:ed:b2:a0:11:55:a6:53:31:
         71:b2:c8:cc:39:f9:b1:fe:0b:91:81:af:f0:4e:1a:39:da:dd:
         e6:f6:e1:6f:93:65:c9:d1:54:f2:46:da:ba:c5:f9:2d:10:95:
         e8:61:5f:51:dc:ae:7d:80:e3:e2:e2:4d:47:e4:17:1b:38:b0:
         04:a0:33:ac:e9:fa:4b:51:9b:85:27:a9:02:11:bb:7a:8a:aa:
         1b:89:9a:1f:46:5d:60:57:e8:a8:c8:52:39:78:64:cc:34:60:
         77:72:00:74:2d:94:5e:e8:5b:57:87:76:ea:79:06:f5:23:ae:
         64:94:5a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 23:11:57 2024 by rpki-client on console-ams.rpki-client.org