Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/0c902d3d-4077-3632-8bde-216dc5f21dba.roa
File:                     0c902d3d-4077-3632-8bde-216dc5f21dba.roa (raw, json)
Hash identifier:          JWCeLDrvhDIjiY2Luy5v914AGT/BbABtWwr+6DZJe1I=
Subject key identifier:   D7:A5:6F:53:2F:63:EE:34:02:AF:23:DC:51:B5:B5:16:10:F0:55:F6
Certificate issuer:       /CN=5541e022-414f-45f5-9426-a7643db1ec8d
Certificate serial:       010D0C9F432858455068232AAD2A2399C5A2CD80
Authority key identifier: F5:72:66:9B:FA:2B:D5:E4:58:2E:1F:EA:1A:CA:67:24:96:6B:3F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/0c902d3d-4077-3632-8bde-216dc5f21dba.roa
Signing time:             Sun 24 Mar 2024 13:00:33 +0000
ROA not before:           Sun 24 Mar 2024 13:00:33 +0000
ROA not after:            Sat 22 Jun 2024 13:00:33 +0000
asID:                     149020
IP address blocks:        2602:fa08:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:50:68:23:2a:ad:2a:23:99:c5:a2:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5541e022-414f-45f5-9426-a7643db1ec8d
        Validity
            Not Before: Mar 24 13:00:33 2024 GMT
            Not After : Jun 22 13:00:33 2024 GMT
        Subject: CN=02c4704f-8d6b-4b93-9a3f-f26732180e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5c:4a:fb:3d:b7:75:af:ae:2f:f3:d1:d6:a0:
                    a0:0e:8a:9b:c1:7e:e9:3c:f6:2d:cf:f4:32:f4:3c:
                    56:af:c9:89:d1:fa:18:a8:e8:da:a5:94:25:33:f4:
                    c3:0c:bd:cc:bc:71:88:6f:c3:3d:4d:5f:43:02:3f:
                    52:4b:0c:e0:61:85:61:69:3e:42:36:97:16:8a:1e:
                    30:04:2b:4d:94:b9:53:9d:f8:a0:77:88:c2:de:61:
                    97:d0:86:7c:0c:01:42:7d:4b:94:f4:c5:f6:39:b4:
                    2b:d8:78:67:89:dc:12:20:5e:f8:be:6e:58:14:af:
                    59:3a:c8:f8:3a:07:f7:1d:c9:c9:92:70:14:c6:41:
                    60:3d:ed:52:8d:d0:61:0a:64:8f:75:03:da:3e:e4:
                    0e:5f:d9:44:03:63:67:89:f5:c1:fa:57:1b:fa:6b:
                    36:b5:05:d9:22:fe:8f:67:5a:4f:d9:5c:82:0d:e5:
                    84:d3:7f:a0:4e:4d:78:82:cd:0e:8d:14:45:a7:84:
                    1d:40:50:41:69:8f:9a:40:aa:33:bd:29:2d:72:f4:
                    59:7c:9a:26:9b:69:05:9e:ae:84:ef:10:b5:62:6c:
                    e0:fd:02:fc:26:4c:8c:8b:de:f5:0b:11:e2:6d:34:
                    ed:5d:4d:1c:66:ab:35:28:7f:b3:4a:4a:ec:c7:77:
                    a3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A5:6F:53:2F:63:EE:34:02:AF:23:DC:51:B5:B5:16:10:F0:55:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/0c902d3d-4077-3632-8bde-216dc5f21dba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.crl

            X509v3 Authority Key Identifier:
                keyid:F5:72:66:9B:FA:2B:D5:E4:58:2E:1F:EA:1A:CA:67:24:96:6B:3F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa08:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:e4:ef:1f:34:b0:25:a9:e4:52:f8:ae:26:d2:ff:aa:01:07:
         37:53:87:9c:1c:c9:98:f4:a4:23:cf:e6:ae:23:ef:b7:87:6e:
         3d:42:a4:25:e2:07:0a:79:ac:b5:a8:bd:c1:7e:70:f4:6e:95:
         72:86:d7:16:d2:00:85:26:4c:2e:4a:bd:5d:c7:32:90:d8:8d:
         84:be:ed:af:e2:2a:10:ae:26:2d:77:5a:17:d2:1e:18:9f:ab:
         37:65:39:6e:2a:1d:b1:ef:fc:84:76:5a:22:02:e8:8d:b8:87:
         03:a8:1a:89:6b:56:7b:cf:e7:58:23:f6:96:e8:5e:9b:27:1a:
         9b:75:1f:10:82:7c:90:7c:5b:58:29:c8:e8:45:c6:f8:72:12:
         67:e6:2d:07:e7:dc:8a:fa:d8:0b:52:22:60:c7:fb:d7:08:ef:
         81:19:5a:ea:52:d0:c1:96:5a:af:49:13:b3:bf:1e:05:37:3b:
         eb:34:6b:62:e8:aa:7e:24:c2:b8:11:44:98:8b:07:79:59:e0:
         7c:da:58:f8:2e:db:30:d8:df:c4:7f:ff:af:9a:6c:8c:46:76:
         ac:0b:19:ba:47:16:dc:82:fd:16:d4:bd:d1:05:8f:3d:fd:77:
         3b:a7:a2:99:8a:32:ea:8d:60:e6:99:27:4a:39:45:4f:12:e6:
         c3:e8:9e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 01:46:59 2024 by rpki-client on console-fra.rpki-client.org