Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/8dfaedd2-d2b4-316d-99da-8efd6cb2fb86.roa
File:                     8dfaedd2-d2b4-316d-99da-8efd6cb2fb86.roa (raw, json)
Hash identifier:          j481ktfoN9u4MEKWNXjdlPAaC+ktUZxgQjdN/DnT1zM=
Subject key identifier:   0E:3D:45:AC:35:C8:C3:C3:70:42:10:96:FA:38:F7:75:86:0F:F5:D0
Certificate issuer:       /CN=7b10d7ba-e273-4d34-8688-c7c1e38ab6da
Certificate serial:       010D0C9F4328584543D7FE1865DB7FAFF0D4F0D0
Authority key identifier: D6:45:D5:C1:6C:FB:39:78:63:09:8C:D9:84:C6:B1:13:16:72:9A:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/8dfaedd2-d2b4-316d-99da-8efd6cb2fb86.roa
Signing time:             Wed 20 Mar 2024 01:00:24 +0000
ROA not before:           Wed 20 Mar 2024 01:00:24 +0000
ROA not after:            Tue 18 Jun 2024 01:00:24 +0000
asID:                     16611
IP address blocks:        2602:fa07::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:43:d7:fe:18:65:db:7f:af:f0:d4:f0:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b10d7ba-e273-4d34-8688-c7c1e38ab6da
        Validity
            Not Before: Mar 20 01:00:24 2024 GMT
            Not After : Jun 18 01:00:24 2024 GMT
        Subject: CN=cd0c21c4-4d04-4c2a-964f-deba45a8c89c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b2:7a:f2:84:ae:54:50:ff:42:1e:a4:81:3c:
                    45:b4:69:21:99:54:86:25:df:f6:57:f8:ee:87:29:
                    ce:8c:9a:4c:cb:1a:33:1a:40:a6:4c:29:37:c4:4f:
                    e1:e4:78:18:20:fc:3c:61:e7:82:33:c9:d2:e7:19:
                    b7:a1:6d:5d:65:41:f8:d1:89:84:18:1c:5a:41:72:
                    a5:81:15:ca:61:86:2c:fb:54:0d:86:2b:30:44:82:
                    46:41:c9:c2:00:9d:39:35:05:29:f2:ac:f8:34:a8:
                    9b:77:e2:67:f9:5a:f2:86:7f:01:5e:af:a4:58:c1:
                    47:1a:33:db:76:81:ef:56:ef:69:86:cd:41:44:b8:
                    c3:7b:0b:f2:16:99:94:3d:b9:02:92:17:a8:68:d2:
                    bd:5d:17:e9:b7:ee:18:62:26:90:83:b9:a9:93:5f:
                    8d:f6:1d:65:9d:23:24:bb:92:63:35:60:35:0d:ab:
                    08:6e:6c:c2:97:1e:b4:17:f2:e0:68:11:0f:df:bd:
                    46:25:5d:88:f4:0b:81:76:4d:96:fb:4f:cf:7a:b9:
                    f6:22:48:8c:42:f3:ce:75:53:c5:2b:50:ce:28:7b:
                    1a:1c:15:a0:14:ae:16:24:2e:82:20:22:0c:af:8d:
                    ac:00:f0:17:1e:5d:32:41:2d:02:83:79:30:bd:8c:
                    74:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3D:45:AC:35:C8:C3:C3:70:42:10:96:FA:38:F7:75:86:0F:F5:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/8dfaedd2-d2b4-316d-99da-8efd6cb2fb86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.crl

            X509v3 Authority Key Identifier:
                keyid:D6:45:D5:C1:6C:FB:39:78:63:09:8C:D9:84:C6:B1:13:16:72:9A:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa07::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:ad:e9:16:a8:31:a9:87:2f:a4:62:e8:91:37:93:c1:94:09:
         b5:09:0a:d3:ea:f5:b2:68:d8:ef:92:b2:ac:51:37:41:3f:6d:
         a8:70:2f:85:60:93:50:77:53:e7:6b:ba:42:35:41:32:19:91:
         9c:27:2d:30:51:1a:31:f0:8a:10:f9:67:13:b9:61:33:64:4b:
         a1:a2:79:6b:91:3b:c9:e9:6c:54:a6:12:db:b1:c1:fe:7e:8e:
         d6:49:11:ea:a2:c5:6d:2c:87:f0:40:00:e7:bd:0d:70:12:9c:
         5a:70:2d:7c:f3:60:e1:d7:ed:dd:d2:07:16:70:22:73:3f:e8:
         e8:e4:7a:c5:df:e4:c3:13:08:df:37:15:07:3d:03:b7:2e:d6:
         a3:d7:d1:fc:21:26:62:eb:48:1c:9f:b3:e0:7c:47:89:8a:e5:
         8a:9f:36:58:92:57:b2:5a:6d:5d:b2:44:b8:24:d8:bf:92:d8:
         dd:65:2a:53:da:9e:ca:fd:a1:0e:b6:e1:08:a0:f0:69:16:81:
         05:f2:16:48:56:47:fd:35:46:83:50:04:b9:f2:50:67:75:9f:
         cf:03:82:3d:15:96:85:41:24:e2:3c:55:44:d1:3d:de:b4:f2:
         c2:6d:bb:2c:13:37:de:00:3c:3f:a5:a2:c0:3c:8e:5f:f7:4d:
         43:48:5c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 16:42:43 2024 by rpki-client on console-ams.rpki-client.org