Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/4f1be21b-c4ec-3234-86c4-3044710eb0b1.roa
File:                     4f1be21b-c4ec-3234-86c4-3044710eb0b1.roa (raw, json)
Hash identifier:          UsYX8g5140r49+qSwSNU17FqCCqNVACMUS2IIxSlnZM=
Subject key identifier:   09:A4:C9:21:E4:EA:8D:27:2E:0C:2B:A7:7A:3B:99:89:FF:48:5B:FF
Certificate issuer:       /CN=ec3472d2-073b-458a-8e0f-7ee77169574a
Certificate serial:       010D0C9F432858451BAB6CB66D665B2492916980
Authority key identifier: 72:70:44:BC:98:D7:EE:B4:32:B4:5E:0A:84:F1:84:AE:56:51:A9:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/4f1be21b-c4ec-3234-86c4-3044710eb0b1.roa
Signing time:             Tue 05 Mar 2024 15:38:18 +0000
ROA not before:           Tue 05 Mar 2024 15:38:18 +0000
ROA not after:            Mon 03 Jun 2024 14:38:18 +0000
asID:                     14618
IP address blocks:        2602:f957:a00::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/ec3472d2-073b-458a-8e0f-7ee77169574a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/ec3472d2-073b-458a-8e0f-7ee77169574a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1b:ab:6c:b6:6d:66:5b:24:92:91:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3472d2-073b-458a-8e0f-7ee77169574a
        Validity
            Not Before: Mar  5 15:38:18 2024 GMT
            Not After : Jun  3 14:38:18 2024 GMT
        Subject: CN=5d48be61-98d2-4f87-b6d4-40893a3a1b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f9:f9:9c:96:c1:75:c5:22:3f:36:b6:df:8a:
                    16:f4:86:6d:d2:65:42:b8:4c:0e:6c:55:0c:ec:26:
                    90:dd:a9:9b:38:0f:37:06:0c:89:13:74:c1:6b:ec:
                    da:39:43:6a:67:0c:b9:de:79:bb:ad:8e:a0:99:d1:
                    f8:d1:c2:f3:93:12:a4:4a:2f:bf:c8:36:b9:e0:8c:
                    c3:69:e3:25:a2:b3:3c:7a:a0:9d:63:4b:60:7b:c5:
                    18:5e:12:ff:1a:2e:e3:8a:b6:66:96:ae:30:c4:53:
                    69:33:a0:00:f0:c5:24:af:49:bd:b7:4d:4a:b0:7e:
                    6f:24:76:b5:20:28:7e:13:49:20:9a:61:e2:ed:79:
                    cf:7e:d8:7e:f9:ed:7c:58:9b:ea:01:89:60:5f:9a:
                    8d:27:6f:3f:32:d0:9c:04:4d:c9:c4:3a:f4:a9:6b:
                    db:ab:b8:8a:2a:91:c3:83:38:ed:b7:a5:b6:c5:43:
                    e3:26:66:7b:9c:85:00:44:5a:1f:86:43:18:32:08:
                    95:65:b0:ff:36:55:d4:3b:89:9f:97:5d:8a:b2:1f:
                    d3:2f:5c:99:08:d1:62:07:59:64:24:47:69:83:73:
                    e1:93:10:56:91:27:d0:a1:ec:29:93:6f:30:f8:ae:
                    36:9e:f3:b4:6d:ae:16:78:1a:40:aa:3b:19:2d:5e:
                    56:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A4:C9:21:E4:EA:8D:27:2E:0C:2B:A7:7A:3B:99:89:FF:48:5B:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/4f1be21b-c4ec-3234-86c4-3044710eb0b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/ec3472d2-073b-458a-8e0f-7ee77169574a.crl

            X509v3 Authority Key Identifier:
                keyid:72:70:44:BC:98:D7:EE:B4:32:B4:5E:0A:84:F1:84:AE:56:51:A9:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f957:a00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:2b:66:2b:c9:7c:82:b9:48:66:d2:6a:55:a0:42:bf:dd:11:
         e8:51:d0:2d:de:73:6e:d2:5b:d5:d4:0b:6a:42:ac:6e:97:a7:
         42:eb:fe:9f:0e:26:b5:ad:c9:1a:d4:ea:3c:2b:52:48:6a:55:
         f1:62:10:b2:6a:6e:c7:6e:78:04:4b:71:3b:2a:6e:c0:26:b0:
         1d:59:58:87:cd:3c:14:4c:1a:14:66:f9:61:eb:23:bc:0f:5e:
         e2:2d:89:53:33:5d:0a:1b:79:1e:95:c9:9e:1d:6f:ef:2e:10:
         ad:e7:56:04:e6:e9:b3:44:1f:0a:3b:28:77:48:4b:70:8e:9d:
         a9:a4:af:7e:2e:c8:19:3e:e7:3d:cd:35:60:e7:22:6e:d4:4a:
         9e:43:bf:be:80:61:ce:d8:64:c1:58:5c:ac:de:3b:f1:a7:c0:
         e5:94:4a:2c:10:b5:9a:99:a9:e8:17:c7:0c:4b:d5:6f:0e:61:
         40:7f:9a:42:3c:e0:ea:9b:b9:f5:6d:40:f6:a5:68:27:eb:7f:
         eb:82:90:a3:46:5e:8f:ee:e1:51:fa:85:03:d5:1a:22:cb:b9:
         0a:3c:c9:67:8b:7f:66:13:2d:59:42:ef:21:5b:b5:de:02:46:
         81:19:9e:3d:3d:9b:ec:1c:e6:d6:53:b2:61:15:51:24:52:a8:
         d6:0c:f2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:21:11 2024 by rpki-client on console-ams.rpki-client.org