Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b/db334f3d-45ff-3147-8b7b-0e824caf304f.roa
File:                     db334f3d-45ff-3147-8b7b-0e824caf304f.roa (raw, json)
Hash identifier:          vGT3Ryr8sHGkMFZdggV+6uHGHRJHW0ZCF34THZW+0eU=
Subject key identifier:   85:75:3D:70:B5:92:8E:40:E6:81:97:72:70:8B:B5:81:23:08:D4:80
Certificate issuer:       /CN=41b5f4d1-1f4a-425e-bd76-092c5cfc678b
Certificate serial:       010D0C9F432858457686F65151854D544F776B80
Authority key identifier: D2:BB:4C:78:84:A8:E6:04:AC:47:F3:B0:FF:2A:F8:9F:B2:66:4E:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b/db334f3d-45ff-3147-8b7b-0e824caf304f.roa
Signing time:             Sun 07 Apr 2024 04:43:24 +0000
ROA not before:           Sun 07 Apr 2024 04:43:24 +0000
ROA not after:            Sat 06 Jul 2024 04:43:24 +0000
asID:                     27424
IP address blocks:        2602:f93c::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b/41b5f4d1-1f4a-425e-bd76-092c5cfc678b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b/41b5f4d1-1f4a-425e-bd76-092c5cfc678b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:76:86:f6:51:51:85:4d:54:4f:77:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41b5f4d1-1f4a-425e-bd76-092c5cfc678b
        Validity
            Not Before: Apr  7 04:43:24 2024 GMT
            Not After : Jul  6 04:43:24 2024 GMT
        Subject: CN=7f460714-4f95-480b-8afe-764a5ce1e119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:57:c8:38:ec:0f:46:33:ac:a8:d3:34:ee:e2:
                    32:97:eb:90:3d:aa:4f:b5:44:e7:1b:e4:ba:e5:bf:
                    82:53:8f:af:e8:09:ec:48:38:8e:5f:56:68:0d:3c:
                    9a:64:b7:79:0f:fc:1c:82:be:e1:10:57:f5:12:7d:
                    22:18:6e:22:ac:dc:3b:90:2a:f1:f9:88:65:40:ca:
                    9e:58:4e:7a:e2:5f:59:b7:9d:6e:57:d9:ba:bb:8e:
                    29:d7:d7:ca:d8:6c:e8:1c:00:8b:39:72:94:2f:31:
                    f2:fc:d5:db:97:e1:58:61:3f:fd:81:bd:a1:0f:71:
                    41:fb:f3:5c:7c:c3:22:ae:4b:7a:d0:e0:65:af:5d:
                    ac:48:8d:6b:cc:c2:83:52:29:8d:47:a0:3e:66:88:
                    f1:9e:4a:a6:3a:c6:91:d8:e0:b8:0f:27:4f:29:56:
                    69:89:8e:66:6c:7c:b0:d5:e2:87:d7:5e:ef:11:7f:
                    76:a2:98:08:15:5d:57:c9:66:39:9f:89:cb:3f:cc:
                    a4:b9:47:bd:44:bd:47:17:8f:d5:5d:44:51:e6:47:
                    2f:5a:12:c5:60:4f:68:6c:b7:19:5c:f9:25:ac:0c:
                    2b:c0:79:75:0d:d3:49:1f:d3:0f:ab:b8:1b:e1:c2:
                    10:5f:bc:6c:ae:a1:9d:83:0b:24:1b:50:9b:95:68:
                    f4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:75:3D:70:B5:92:8E:40:E6:81:97:72:70:8B:B5:81:23:08:D4:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b/db334f3d-45ff-3147-8b7b-0e824caf304f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b/41b5f4d1-1f4a-425e-bd76-092c5cfc678b.crl

            X509v3 Authority Key Identifier:
                keyid:D2:BB:4C:78:84:A8:E6:04:AC:47:F3:B0:FF:2A:F8:9F:B2:66:4E:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f93c::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:95:09:5b:2d:4b:90:cb:24:24:28:d3:45:ff:ea:b6:e8:01:
         5d:95:51:5f:49:b5:2c:b2:8a:65:99:32:e9:2d:2f:2f:1e:bd:
         46:cc:a3:65:5d:d9:16:47:3f:8d:d3:0a:04:ae:34:26:f5:14:
         57:15:01:55:96:30:ab:d5:75:64:fe:db:fb:19:0e:28:df:28:
         f5:4e:7d:9b:d8:12:88:30:c8:af:fc:db:b7:be:f5:96:16:fc:
         ce:43:89:9a:2c:7a:77:58:02:c1:16:d0:56:fc:60:3d:ee:f0:
         a5:1f:09:c1:53:ee:ba:25:28:bf:d4:ee:8c:5e:fe:58:5f:9d:
         b1:20:80:1b:ca:b8:b6:fa:9b:27:9a:c2:48:1a:a9:7d:b9:f4:
         0b:7b:f9:ba:66:1c:ca:9a:ba:bd:bc:95:ca:8b:14:5a:5f:7d:
         10:63:39:5c:0e:c6:1e:1f:85:e2:bb:4e:58:f6:42:a8:87:ff:
         ae:73:20:55:5d:a9:de:1d:b5:2e:1a:3b:23:e7:e2:d1:2d:33:
         17:01:bb:fc:e1:ee:7e:e5:f5:7c:28:86:40:db:74:bb:74:7f:
         65:0e:45:46:fc:27:f2:dd:23:19:f7:3e:7f:8f:ba:a1:0d:ab:
         db:3f:b2:40:e6:6e:f8:72:4d:bd:9d:e9:4a:44:99:f4:55:66:
         12:31:6b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:57:39 2024 by rpki-client on console-ams.rpki-client.org