Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e/85834eb1-405f-3a20-9a7c-853a9cf304c1.roa
File:                     85834eb1-405f-3a20-9a7c-853a9cf304c1.roa (raw, json)
Hash identifier:          iUP25BLm9ElUan74vAan40yAySRHFx8mnEFrNMcwhpY=
Subject key identifier:   15:71:86:2C:69:50:7A:47:D4:6E:1C:7D:E4:53:32:BB:DE:85:2E:B5
Certificate issuer:       /CN=e3bd1f87-8818-4b01-a7e8-514858edd50e
Certificate serial:       010D0C9F4328584551CD69202BF94D830ABB9310
Authority key identifier: 2D:95:2F:80:9F:58:C0:47:70:47:3E:79:F1:B9:A8:93:FB:D1:B4:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e/85834eb1-405f-3a20-9a7c-853a9cf304c1.roa
Signing time:             Mon 25 Mar 2024 01:00:25 +0000
ROA not before:           Mon 25 Mar 2024 01:00:25 +0000
ROA not after:            Sun 23 Jun 2024 01:00:25 +0000
asID:                     16509
IP address blocks:        2602:817::/45 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e/e3bd1f87-8818-4b01-a7e8-514858edd50e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e/e3bd1f87-8818-4b01-a7e8-514858edd50e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:51:cd:69:20:2b:f9:4d:83:0a:bb:93:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3bd1f87-8818-4b01-a7e8-514858edd50e
        Validity
            Not Before: Mar 25 01:00:25 2024 GMT
            Not After : Jun 23 01:00:25 2024 GMT
        Subject: CN=b562151e-c2a9-440e-91bf-66440d46eb49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bd:7b:df:6a:b5:84:39:68:82:70:18:cb:de:
                    4f:e6:05:81:cc:c3:ae:6e:b6:9f:cc:02:83:ad:d7:
                    20:37:fe:00:ab:fd:97:6d:e4:76:40:0b:cb:a1:70:
                    d5:d1:bf:34:84:54:3c:b0:a4:26:47:f0:8f:88:2c:
                    0f:ad:04:0d:8c:06:1b:4a:76:9e:bd:f4:a0:56:e0:
                    33:07:ae:1e:1e:20:28:76:24:06:c0:ac:b9:1e:f2:
                    60:77:28:94:c0:9b:6c:88:a4:28:57:14:b4:c7:5c:
                    28:1b:ec:cb:b0:ee:e2:af:b0:d0:99:a0:2e:3d:14:
                    ec:44:01:65:29:4a:49:59:82:4e:93:10:c7:27:0e:
                    b4:97:3f:bb:8a:d8:e8:05:f8:01:de:42:b1:78:af:
                    fd:30:7d:33:d1:5f:f2:18:ba:c4:4b:17:bb:32:1e:
                    5b:f0:b9:d9:aa:20:84:07:15:f4:d2:78:4e:c0:1d:
                    60:1b:64:33:c3:e1:3e:3b:ae:ad:b2:ab:e5:79:60:
                    31:98:8a:7f:8b:29:a6:44:bd:08:16:d8:88:9f:e5:
                    9a:78:0d:24:8b:fc:b9:90:38:fd:18:76:19:88:d3:
                    d6:61:28:4a:10:40:48:f1:11:80:89:e9:82:4d:d9:
                    8e:16:11:07:35:b7:81:03:05:04:be:41:1f:ff:9e:
                    84:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:71:86:2C:69:50:7A:47:D4:6E:1C:7D:E4:53:32:BB:DE:85:2E:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e/85834eb1-405f-3a20-9a7c-853a9cf304c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e/e3bd1f87-8818-4b01-a7e8-514858edd50e.crl

            X509v3 Authority Key Identifier:
                keyid:2D:95:2F:80:9F:58:C0:47:70:47:3E:79:F1:B9:A8:93:FB:D1:B4:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e3bd1f87-8818-4b01-a7e8-514858edd50e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:817::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:51:83:26:01:dc:7c:24:8b:7a:ba:d9:d5:7b:99:b3:9b:f6:
         58:64:3b:cf:d5:67:a0:50:f6:aa:92:97:0a:58:21:5b:51:6f:
         86:35:3e:da:4f:e2:28:40:1d:ef:a1:3f:5f:44:31:8a:71:bd:
         7d:26:f3:2c:23:c9:f7:07:c3:cf:93:9a:ee:01:56:e7:9b:cc:
         59:52:6f:93:af:a9:cd:ef:ce:a4:ff:5e:3e:22:f1:c7:32:2c:
         1d:38:f2:63:55:7c:75:1e:fc:a2:e3:c7:ab:0e:32:7a:d4:e0:
         0d:8b:8e:d9:c1:33:63:96:ec:7b:0d:94:8b:88:25:18:a3:0a:
         6c:f2:a4:a2:1b:09:55:88:e9:19:3c:63:66:cd:71:59:27:69:
         f5:87:43:64:26:f3:d3:33:fc:dd:15:b5:67:44:c8:74:83:2f:
         9d:19:9c:8a:68:6c:b1:26:49:f7:be:18:93:ff:1e:06:c1:e4:
         1b:5b:4b:a9:e2:b9:2f:6a:d4:fe:4f:8c:e3:ed:14:5e:18:07:
         3b:07:98:5e:0f:8b:94:6f:b1:a3:99:13:e8:4e:e3:8c:48:00:
         60:48:75:81:86:4f:32:75:88:2c:c9:93:41:1d:ac:8a:61:ae:
         f9:33:aa:06:94:a1:30:96:2b:e6:91:85:24:c4:ef:ed:b6:5c:
         e1:ed:0f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:58:06 2024 by rpki-client on console-fra.rpki-client.org