Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/a5c331cf-dd93-309e-8876-1675b03e3ca1.roa
File:                     a5c331cf-dd93-309e-8876-1675b03e3ca1.roa (raw, json)
Hash identifier:          xmI3g8smcbOVKbYdHJP5/+KLtUy/IC05iYpp7rmGgvQ=
Subject key identifier:   B9:39:32:1B:2A:88:80:E6:32:31:D5:24:7B:6F:A2:B7:DA:62:18:13
Certificate issuer:       /CN=443e93d6-47f3-4dff-a7d2-d7de4a2a04ce
Certificate serial:       010D0C9F432858456F1DCAC2DA2CB45EB7819100
Authority key identifier: A0:76:4E:8D:13:F2:EB:39:E7:16:02:EC:C0:26:5D:8A:D5:93:E2:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/a5c331cf-dd93-309e-8876-1675b03e3ca1.roa
Signing time:             Thu 04 Apr 2024 13:00:36 +0000
ROA not before:           Thu 04 Apr 2024 13:00:36 +0000
ROA not after:            Wed 03 Jul 2024 13:00:36 +0000
asID:                     14618
IP address blocks:        2602:2df::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:1d:ca:c2:da:2c:b4:5e:b7:81:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443e93d6-47f3-4dff-a7d2-d7de4a2a04ce
        Validity
            Not Before: Apr  4 13:00:36 2024 GMT
            Not After : Jul  3 13:00:36 2024 GMT
        Subject: CN=e048a4c4-11cc-4d9f-998a-8a0b2c096b08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:80:b2:23:27:8d:e2:3f:d6:31:ec:0c:a4:f5:
                    37:5a:09:e5:a7:eb:f2:9f:ae:19:5a:fc:60:c8:ef:
                    92:3d:9d:97:59:77:77:bc:4e:07:d6:1e:54:b4:7a:
                    a0:95:75:25:4a:a5:55:73:ad:c5:63:61:29:f9:47:
                    16:91:20:48:f7:80:8c:ef:f8:40:50:21:7b:26:dd:
                    b9:98:ab:c3:62:9b:4d:60:d2:71:01:32:f6:36:15:
                    3e:8f:34:4f:66:4f:ce:7a:5b:20:1f:b3:94:9f:70:
                    ae:13:1a:44:cd:a0:07:b9:e4:93:d3:64:42:0f:9e:
                    2d:ef:14:94:94:55:1f:b7:a8:b6:db:fb:61:9e:e2:
                    2c:12:df:75:57:12:1f:1f:e0:b9:df:cc:a9:9f:89:
                    05:c8:fe:52:59:6d:f9:cc:75:ea:99:5e:bf:be:c7:
                    06:4c:05:39:7f:ae:92:7b:06:76:40:37:71:58:31:
                    ac:43:17:24:4f:ad:45:a4:61:fb:e0:82:46:e8:8f:
                    85:81:4b:c2:f4:10:b2:4c:d0:68:bd:c9:1e:da:59:
                    01:46:98:95:44:79:dd:88:5d:7b:a6:0c:50:09:ee:
                    fb:01:29:af:19:16:8e:5b:b2:5d:5e:05:9f:6b:02:
                    58:c6:bc:bd:02:e7:8e:d0:0b:d6:45:7b:b2:62:72:
                    61:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:39:32:1B:2A:88:80:E6:32:31:D5:24:7B:6F:A2:B7:DA:62:18:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/a5c331cf-dd93-309e-8876-1675b03e3ca1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.crl

            X509v3 Authority Key Identifier:
                keyid:A0:76:4E:8D:13:F2:EB:39:E7:16:02:EC:C0:26:5D:8A:D5:93:E2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443e93d6-47f3-4dff-a7d2-d7de4a2a04ce.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2df::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:57:93:d8:c0:23:72:d3:d5:07:25:55:fb:08:13:cb:4d:f9:
         a1:ea:da:d8:69:7b:29:e4:a1:26:e1:c5:7f:3b:80:94:67:70:
         2f:f8:f2:e9:31:d6:c7:7b:1a:60:39:97:25:8d:68:75:85:0e:
         b8:70:71:46:d6:62:05:f0:69:16:0f:5c:4e:16:a4:db:2c:17:
         42:16:a9:08:2c:7e:21:99:43:1a:16:c7:aa:c3:5f:55:1f:eb:
         09:aa:b0:35:de:6e:60:35:af:61:f5:16:0e:83:94:8a:03:78:
         a2:85:0f:e5:e5:8f:5e:b5:c6:10:f3:a4:f1:26:2d:c6:7c:46:
         d1:79:c0:53:87:2e:4b:be:21:e9:78:05:4f:a7:9d:84:1e:b2:
         35:10:d4:ee:dc:8f:86:fb:42:5b:4e:a5:a1:17:c5:b1:78:e5:
         fd:e4:45:53:74:29:44:84:96:07:e8:d3:a6:80:51:45:a8:08:
         84:6c:a7:02:b2:2d:f6:9c:50:a4:bc:37:93:35:a7:0a:0c:3d:
         7a:9e:a3:ef:94:c9:2a:c2:f7:d6:c1:54:7e:6d:6f:0e:da:77:
         97:be:63:6d:e4:42:73:a2:7f:f4:32:46:3a:6e:75:3f:65:f8:
         8a:e9:67:f0:64:e0:d4:98:6a:f4:44:99:18:c9:cb:72:46:ed:
         c4:13:69:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:28:48 2024 by rpki-client on console-ams.rpki-client.org