Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/60eb5078-363b-324d-91a4-7c996050a432.roa
File:                     60eb5078-363b-324d-91a4-7c996050a432.roa (raw, json)
Hash identifier:          UHMg5U9TooO8OUTlJY0qr2w4H0LdmteXUCip+3EOthE=
Subject key identifier:   14:AC:A7:2A:95:0B:17:63:B3:FE:75:DA:79:3F:2E:5F:25:41:F0:72
Certificate issuer:       /CN=1fb5932e-f862-443b-a719-26a612c2f112
Certificate serial:       010D0C9F4328584526A5AAD91C9F2EDF7F26C140
Authority key identifier: F5:AB:0F:90:6F:99:E6:9A:92:D2:B6:31:82:2C:59:81:14:79:AC:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/60eb5078-363b-324d-91a4-7c996050a432.roa
Signing time:             Sat 09 Mar 2024 14:00:31 +0000
ROA not before:           Sat 09 Mar 2024 14:00:31 +0000
ROA not after:            Fri 07 Jun 2024 13:00:31 +0000
asID:                     17326
IP address blocks:        2602:fd2a::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/1fb5932e-f862-443b-a719-26a612c2f112.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/1fb5932e-f862-443b-a719-26a612c2f112.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:26:a5:aa:d9:1c:9f:2e:df:7f:26:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fb5932e-f862-443b-a719-26a612c2f112
        Validity
            Not Before: Mar  9 14:00:31 2024 GMT
            Not After : Jun  7 13:00:31 2024 GMT
        Subject: CN=22f173ef-37da-4cea-9352-ce99d4366891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:42:be:d1:76:cf:a4:a4:32:68:c0:8d:32:2c:
                    48:d8:e4:47:9d:5d:46:0a:f7:e8:23:f0:38:73:4d:
                    3b:4b:18:ae:6d:b5:71:8a:5a:87:80:32:f1:6c:c6:
                    b0:e1:b3:1c:e7:83:f5:e9:75:93:63:56:6a:97:c6:
                    e3:26:92:f3:01:f7:48:8d:a1:1f:3c:11:90:f4:0b:
                    e2:fd:2b:69:57:39:bd:12:9b:b9:5d:4d:05:66:6f:
                    4c:11:4e:8b:16:ff:8d:9d:99:57:af:79:4d:92:34:
                    1d:5c:26:fe:16:0e:be:d2:91:ab:5f:f6:6b:e9:f8:
                    65:3b:01:9a:f4:a6:1c:a4:84:4a:a5:dd:4e:2b:93:
                    08:eb:b9:7a:fb:16:14:db:ef:54:7b:af:73:08:9a:
                    2e:81:ef:b7:78:66:38:16:91:d7:bf:48:a0:5a:ae:
                    ca:e7:49:93:d3:7d:20:8a:55:b1:a6:48:7e:39:76:
                    ec:3f:96:1d:a7:db:d0:3f:3a:d6:92:e1:5b:de:54:
                    12:86:bc:3b:90:d5:65:e5:e8:e0:df:18:3b:a3:ee:
                    4e:5e:d5:18:79:e5:76:a6:8b:52:2c:1e:98:f6:fa:
                    7f:ea:d7:83:c5:b4:f5:f8:bd:92:cc:7d:2d:46:20:
                    29:30:a4:25:73:5b:ec:b7:8b:cf:15:b0:cd:a0:da:
                    9a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AC:A7:2A:95:0B:17:63:B3:FE:75:DA:79:3F:2E:5F:25:41:F0:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/60eb5078-363b-324d-91a4-7c996050a432.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/1fb5932e-f862-443b-a719-26a612c2f112.crl

            X509v3 Authority Key Identifier:
                keyid:F5:AB:0F:90:6F:99:E6:9A:92:D2:B6:31:82:2C:59:81:14:79:AC:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd2a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:90:5d:33:8b:37:38:bb:89:9f:df:24:88:49:00:4c:4d:0e:
         19:14:95:d4:d7:fb:3b:f2:bc:ef:64:33:cc:31:34:e2:3d:89:
         55:7c:dd:14:12:37:8e:71:36:93:e3:d2:af:c5:ba:4a:a8:9b:
         9d:28:6e:d4:12:62:d8:a9:6d:36:a0:4a:88:e7:34:07:07:fd:
         98:5d:fc:79:88:8e:cb:41:e8:8a:15:5e:13:c8:be:48:e7:b2:
         6b:41:8b:2c:99:80:cf:f1:1b:3a:86:49:57:c2:0b:80:cc:74:
         1e:dd:55:da:8d:fb:64:5a:5c:4e:d3:f6:14:e4:6d:d8:0f:fd:
         9b:ca:55:6a:41:28:32:b4:86:3d:84:d4:e7:0c:bc:53:c6:28:
         91:e3:07:41:3e:d0:c7:7f:1d:84:69:8a:a7:18:92:c7:37:b0:
         af:f2:e2:2f:12:ef:da:08:cf:cc:f8:f0:63:a6:9f:a1:2c:c3:
         db:88:e5:36:53:7d:ac:b8:7f:26:4e:0c:a9:7d:eb:cf:58:50:
         b5:e8:4b:e9:96:cd:07:11:8a:bc:1a:00:f1:37:32:c9:1f:b5:
         55:a4:c3:b3:fc:4e:e2:45:7c:74:17:db:16:91:6b:22:b6:9e:
         82:9b:ec:34:70:d3:4f:33:aa:9e:0f:50:55:5f:d6:b1:90:98:
         8c:81:ed:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:43:31 2024 by rpki-client on console-fra.rpki-client.org