Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/8a93ad7a-1f96-37f2-b51e-adf90e530bdd.roa
File:                     8a93ad7a-1f96-37f2-b51e-adf90e530bdd.roa (raw, json)
Hash identifier:          gzHtjKnGaqOZyYve/o0g5yQ8TwBpfao64R/6UMw75eg=
Subject key identifier:   E8:5A:18:30:CF:E0:F8:99:4F:F6:86:A6:E3:FB:7D:1E:30:61:D0:7E
Certificate issuer:       /CN=ec3472d2-073b-458a-8e0f-7ee77169574a
Certificate serial:       010D0C9F432858451BAB966FFC6975715B099F80
Authority key identifier: 72:70:44:BC:98:D7:EE:B4:32:B4:5E:0A:84:F1:84:AE:56:51:A9:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/8a93ad7a-1f96-37f2-b51e-adf90e530bdd.roa
Signing time:             Tue 05 Mar 2024 15:38:38 +0000
ROA not before:           Tue 05 Mar 2024 15:38:38 +0000
ROA not after:            Mon 03 Jun 2024 14:38:38 +0000
asID:                     16509
IP address blocks:        2602:f957:a00::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/ec3472d2-073b-458a-8e0f-7ee77169574a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/ec3472d2-073b-458a-8e0f-7ee77169574a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1b:ab:96:6f:fc:69:75:71:5b:09:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3472d2-073b-458a-8e0f-7ee77169574a
        Validity
            Not Before: Mar  5 15:38:38 2024 GMT
            Not After : Jun  3 14:38:38 2024 GMT
        Subject: CN=48ea7664-a520-4398-907e-b5aade87aba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:65:9e:7c:ef:fe:04:c4:00:68:88:d2:11:4e:
                    63:34:f1:0c:46:fc:6a:e8:11:0d:45:45:be:58:df:
                    44:ac:25:23:4f:26:87:f8:13:43:c6:3c:c4:80:e9:
                    67:b4:1f:97:5e:0e:6f:60:10:6b:36:49:4a:50:59:
                    eb:15:24:5c:4a:00:78:17:57:ac:44:20:a5:dc:2e:
                    35:44:6b:0b:5a:be:94:4a:ee:e1:93:6c:c3:d4:4f:
                    d5:d6:0b:e9:3f:af:32:9d:f9:4d:e7:33:ff:cc:ff:
                    e5:e5:6d:c3:65:f5:16:a2:6a:0f:a0:2a:2f:a2:3c:
                    97:9f:1d:c4:73:d5:ac:e3:a2:c1:a8:ad:25:04:66:
                    ff:c8:b9:d6:f5:c5:f8:5e:b1:33:ce:f9:14:8e:56:
                    41:5e:98:e6:e5:1a:2f:63:18:3f:14:db:b8:de:d7:
                    c1:23:9e:40:b9:72:70:2c:80:d3:fd:84:87:c5:3b:
                    09:e7:44:ac:65:c7:6e:c5:70:d8:39:3c:9b:82:82:
                    18:76:37:09:8f:f2:81:6d:38:de:54:7d:f5:2c:b9:
                    91:0a:ff:53:50:e7:95:78:0f:98:b5:e1:aa:5a:30:
                    6b:d7:f2:d2:66:14:51:0f:d4:97:dd:7d:6e:6b:4b:
                    81:e3:ea:b8:c7:d8:eb:89:ed:01:6e:fe:ff:91:2f:
                    d8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5A:18:30:CF:E0:F8:99:4F:F6:86:A6:E3:FB:7D:1E:30:61:D0:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/8a93ad7a-1f96-37f2-b51e-adf90e530bdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/ec3472d2-073b-458a-8e0f-7ee77169574a.crl

            X509v3 Authority Key Identifier:
                keyid:72:70:44:BC:98:D7:EE:B4:32:B4:5E:0A:84:F1:84:AE:56:51:A9:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f957:a00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:5f:81:bc:63:ae:f1:7c:54:1b:9e:9e:35:31:35:f4:3a:72:
         e7:fa:07:2c:77:0b:9a:c1:29:15:ac:24:d3:44:c3:ed:ec:13:
         58:4d:d1:d1:d6:65:da:f4:ef:9e:a0:1a:9a:0f:cc:dd:bf:4a:
         4b:6b:47:c5:cd:ab:71:69:f3:a7:fa:d4:e7:b2:ad:86:f6:bd:
         49:cb:8b:fc:ec:7c:4d:c8:9b:4c:12:e2:4d:61:ec:a9:81:66:
         95:1a:1c:01:c3:a5:c7:47:35:eb:4b:fe:1d:69:a2:d9:16:76:
         e8:e2:92:4f:3f:68:7f:1b:4e:0e:08:27:b5:72:7d:d8:6e:0a:
         1a:16:84:d0:a0:b0:d8:e0:1a:39:a8:d0:a2:df:2d:a9:34:3d:
         b5:58:0a:18:45:0f:c6:d4:3b:7b:be:5d:91:39:0f:dc:1b:66:
         19:8f:2e:db:2d:b7:0d:3a:e7:b7:8b:65:88:85:0a:6a:b8:55:
         9d:b2:09:e9:35:6a:e6:45:bc:2e:73:40:9f:73:26:a6:ec:31:
         1c:13:06:0a:8c:8d:11:6a:96:c4:fe:b2:76:16:23:d7:40:55:
         ad:fb:aa:d2:15:6b:0d:4c:17:cd:56:3b:1b:f2:41:e2:3a:10:
         e9:f3:26:f6:00:c3:d7:0d:1c:ce:75:9a:7d:82:71:42:de:37:
         f5:11:41:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:21:11 2024 by rpki-client on console-ams.rpki-client.org