Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/4c153a19-e10c-3a3c-a3d0-6f0d6060d334.roa
File:                     4c153a19-e10c-3a3c-a3d0-6f0d6060d334.roa (raw, json)
Hash identifier:          s0aGnRqlx74oSzkm5Gab0xuqPKYT7xK/fUNOdqde51I=
Subject key identifier:   43:EA:74:6E:98:F7:26:AF:65:97:D2:10:CB:B1:7A:DD:40:71:86:38
Certificate issuer:       /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Certificate serial:       010D0C9F432858458DD334356189F4BE43362750
Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/4c153a19-e10c-3a3c-a3d0-6f0d6060d334.roa
Signing time:             Mon 15 Apr 2024 13:00:35 +0000
ROA not before:           Mon 15 Apr 2024 13:00:35 +0000
ROA not after:            Sun 14 Jul 2024 13:00:35 +0000
asID:                     47069
IP address blocks:        2602:f9df:300::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8d:d3:34:35:61:89:f4:be:43:36:27:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
        Validity
            Not Before: Apr 15 13:00:35 2024 GMT
            Not After : Jul 14 13:00:35 2024 GMT
        Subject: CN=95a4b631-bed4-4772-a952-afdb2233633f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f3:b4:49:98:9c:cc:14:8f:d7:a4:04:f2:39:
                    8b:5d:fe:d0:51:06:63:fe:61:48:37:3f:7f:e8:c6:
                    c9:d1:18:9c:62:db:86:20:74:73:0d:2b:d9:23:0a:
                    94:89:8f:e2:a9:62:14:c5:6e:96:01:f9:b1:6d:ad:
                    81:c9:d6:75:21:cc:aa:59:79:94:e1:74:2a:21:f4:
                    8a:5b:12:d3:92:a2:2b:f3:e2:82:85:06:83:40:b4:
                    18:15:24:e6:f4:d6:bf:0d:f6:d0:16:1d:ea:91:f5:
                    0f:29:ef:59:00:c4:da:0f:31:3d:e0:af:d2:4e:d3:
                    87:08:de:69:78:cc:b5:93:5f:56:04:de:d3:c1:e3:
                    7f:00:3d:76:91:f7:95:83:df:a0:8f:2d:3f:d9:8e:
                    ab:a4:d0:7f:c8:97:77:cf:2f:3f:26:16:20:57:ef:
                    49:47:24:86:5c:5a:1b:e2:6c:ab:84:7f:d2:5f:87:
                    e7:ae:27:3c:78:31:83:26:5f:5a:02:40:cc:9f:42:
                    e5:ee:06:72:63:08:12:35:a1:69:e2:95:9c:3b:4a:
                    fb:92:46:53:70:2f:5a:6c:1b:19:68:d7:45:16:8e:
                    81:08:72:fa:a2:32:21:31:c0:b5:e2:eb:ef:a2:4d:
                    f4:37:59:5e:b9:88:53:6f:a3:28:e9:19:0e:ea:dc:
                    ab:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EA:74:6E:98:F7:26:AF:65:97:D2:10:CB:B1:7A:DD:40:71:86:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/4c153a19-e10c-3a3c-a3d0-6f0d6060d334.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl

            X509v3 Authority Key Identifier:
                keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9df:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:82:a1:6b:11:9e:2a:d3:13:a4:02:fd:80:5e:f9:3a:14:54:
         3e:ff:74:10:1c:7d:4c:9c:64:72:8b:36:8f:3e:84:9b:3a:c3:
         9a:22:a8:df:97:0d:82:2a:2a:83:5b:15:3e:9c:1e:9e:5b:0f:
         31:8e:25:89:4e:34:f2:d5:55:7c:5b:e5:97:a3:85:34:d9:12:
         df:d4:cd:12:1a:a7:ef:c8:f4:c3:d2:5e:40:13:7e:36:4b:16:
         88:40:07:9b:71:f8:94:2f:3b:71:12:01:b1:d6:ad:83:df:09:
         68:71:67:1d:a7:73:a9:53:77:d5:e7:b8:fc:a2:fc:24:97:72:
         71:41:07:86:93:9b:a1:ca:73:37:0a:fb:3c:9b:ba:0a:c6:eb:
         47:20:a3:c5:b0:28:c3:16:5a:98:48:1c:86:d4:95:36:89:46:
         de:77:95:ef:b7:33:1d:1c:b0:62:d2:b5:4d:2d:1a:6a:b3:f7:
         df:35:04:fd:0f:b1:06:60:da:d6:39:ba:5d:cf:99:58:c3:c5:
         16:a6:c1:4c:36:95:0c:92:4b:04:43:d3:24:90:63:4f:73:7e:
         ea:3a:5d:ef:7b:cf:52:24:92:39:67:05:64:65:43:4b:51:5d:
         f6:23:bc:a5:dc:fb:af:4d:4e:57:79:6b:48:c2:1c:b9:01:0e:
         c0:35:f6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 14:50:25 2024 by rpki-client on console-fra.rpki-client.org