Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/bed2fa3a-3a1b-399f-b528-fbcdc1703b6b.roa
File:                     bed2fa3a-3a1b-399f-b528-fbcdc1703b6b.roa (raw, json)
Hash identifier:          VPpf14oyC1wVEa7KwirBqLkLVLd+2C3h8AOhJ4jVlLM=
Subject key identifier:   E2:03:84:23:A4:46:B8:5C:C3:76:81:E4:99:9E:A8:9F:84:2C:FD:9E
Certificate issuer:       /CN=2fd7ea67-f633-4dbd-8774-6209ce64a048
Certificate serial:       010D0C9F43285845549827CE7AFF15C8E32A3E00
Authority key identifier: 1C:74:E6:9F:44:A3:B4:04:7D:A4:57:9C:23:A8:A6:C0:9F:E0:1F:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/bed2fa3a-3a1b-399f-b528-fbcdc1703b6b.roa
Signing time:             Tue 26 Mar 2024 01:00:25 +0000
ROA not before:           Tue 26 Mar 2024 01:00:25 +0000
ROA not after:            Mon 24 Jun 2024 01:00:25 +0000
asID:                     16509
IP address blocks:        2602:29e:a1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/2fd7ea67-f633-4dbd-8774-6209ce64a048.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/2fd7ea67-f633-4dbd-8774-6209ce64a048.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:54:98:27:ce:7a:ff:15:c8:e3:2a:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fd7ea67-f633-4dbd-8774-6209ce64a048
        Validity
            Not Before: Mar 26 01:00:25 2024 GMT
            Not After : Jun 24 01:00:25 2024 GMT
        Subject: CN=ddf3a942-6d62-49cc-8132-48701bcf5aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:89:fc:a1:eb:3b:f5:04:ec:6e:1b:7c:87:05:
                    10:4a:94:ff:53:08:f4:ed:53:a4:1f:83:5c:2a:03:
                    f3:07:d4:8e:80:10:4f:b1:8c:9a:73:3b:d1:47:85:
                    59:7c:c4:f5:37:0e:b1:cb:d7:c5:59:18:1d:bd:e7:
                    68:c0:4d:80:54:28:f8:d2:fa:de:e9:a2:16:d1:d4:
                    f3:ec:d8:8c:dc:4b:7b:9d:f0:e8:2b:eb:5f:70:c9:
                    80:b5:b1:ca:c4:09:eb:75:0a:3d:4c:93:9d:7e:71:
                    35:4e:5b:6b:3e:f8:d8:d9:cd:b6:f7:b8:e6:ef:2f:
                    0d:7b:e3:c6:86:46:14:09:ae:75:cd:d6:d9:56:17:
                    dc:c0:b6:21:13:8c:04:d2:c7:4b:fa:af:3d:58:1b:
                    53:8b:b7:67:9e:71:cb:2e:e5:be:6b:ab:56:4b:c2:
                    e2:63:73:2d:be:16:08:c6:05:f9:ab:95:ab:33:db:
                    6e:f3:66:70:26:12:fa:ba:3d:0f:88:4c:1d:cc:b7:
                    25:0b:30:63:67:93:a4:3f:bc:79:1c:83:c9:e5:41:
                    c0:7d:00:22:3d:4a:83:be:30:26:f5:78:1e:53:ac:
                    c3:25:a9:10:04:8e:f5:22:bc:45:67:43:69:6f:20:
                    9b:68:32:28:04:0b:df:9f:82:88:73:e4:b3:8a:c2:
                    38:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:03:84:23:A4:46:B8:5C:C3:76:81:E4:99:9E:A8:9F:84:2C:FD:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/bed2fa3a-3a1b-399f-b528-fbcdc1703b6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048/2fd7ea67-f633-4dbd-8774-6209ce64a048.crl

            X509v3 Authority Key Identifier:
                keyid:1C:74:E6:9F:44:A3:B4:04:7D:A4:57:9C:23:A8:A6:C0:9F:E0:1F:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2fd7ea67-f633-4dbd-8774-6209ce64a048.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:29e:a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:0f:16:ef:21:2c:d9:19:ff:d4:70:2f:27:98:1f:b7:5c:80:
         63:5f:48:33:be:59:94:83:01:c6:af:93:02:3a:93:52:97:05:
         78:79:f6:ea:8a:32:59:bb:db:95:c2:b6:b0:ba:77:13:6d:66:
         c9:ee:fe:4c:98:60:c5:5b:94:2d:6f:79:76:9e:23:e3:5e:bd:
         60:60:34:91:b2:01:76:41:5f:ac:c7:cd:52:60:44:43:67:ab:
         76:e0:81:f9:63:68:fe:1f:16:ee:7f:52:8a:09:7f:fd:94:f0:
         bb:a1:24:d6:77:18:7e:26:15:fb:46:33:c5:e6:31:2a:ee:8d:
         ed:47:56:b9:19:aa:eb:fd:ff:8d:41:43:a7:2f:f8:81:23:29:
         b2:72:f8:ef:82:5c:18:6f:f4:54:78:79:c9:88:46:bd:48:5e:
         dd:ec:52:65:20:7e:d4:f5:e4:ca:ef:17:71:ce:35:e3:4c:83:
         4b:30:79:3c:ea:a9:a9:33:f1:18:77:0d:f5:cd:52:95:c5:f7:
         9f:93:bc:1e:28:3a:ed:4a:fd:3e:9f:da:dd:39:a0:53:10:84:
         cb:80:40:9a:f3:63:54:92:5a:53:32:8b:87:99:38:e4:50:9d:
         77:31:dd:d4:49:8c:69:57:98:77:ee:bd:76:c9:c5:8c:37:0b:
         8c:f4:ed:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:53:58 2024 by rpki-client on console-fra.rpki-client.org