Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/21006f88-25cc-321a-bb06-e692d318c31d.roa
File:                     21006f88-25cc-321a-bb06-e692d318c31d.roa (raw, json)
Hash identifier:          JkaiqTz44Q9gi92TYDqR/w6WCdw6wgvVvj6BNghkNsY=
Subject key identifier:   37:1D:6B:A5:A8:D0:1F:91:CF:6A:9B:8D:03:0B:26:A9:ED:FE:6F:AA
Certificate issuer:       /CN=820e56e8-763b-4037-929e-b01c8d786e75
Certificate serial:       010D0C9F432858457D132AF875298DDD0BCD3B80
Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/21006f88-25cc-321a-bb06-e692d318c31d.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     399275
IP address blocks:        2602:fcc0:6666::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:2a:f8:75:29:8d:dd:0b:cd:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=88e26056-c67c-481d-9f7e-b2810b3e1e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fa:15:9d:f2:1e:16:bb:31:62:99:64:2a:78:
                    c1:a8:d9:71:f1:41:a2:b2:2e:8f:ea:4f:da:18:ca:
                    de:11:b8:d3:17:8d:27:b4:a3:71:0c:c3:a3:cb:90:
                    21:0f:21:56:09:90:e9:26:23:11:d5:37:bf:40:87:
                    f3:19:1f:5e:e4:c3:fd:ec:f4:7d:06:f0:dd:9d:5f:
                    d0:72:ad:17:85:66:ea:cf:07:df:69:bb:56:4b:79:
                    40:28:31:e4:84:c8:ab:ec:f4:c8:46:07:46:bd:9d:
                    6d:bd:75:61:ea:39:24:b1:63:42:98:48:cc:21:f5:
                    a3:12:dd:cf:47:38:d0:79:e9:07:c6:40:70:af:39:
                    c7:b5:21:db:5a:2c:ba:c0:ae:62:91:69:15:00:ad:
                    6d:4d:5b:bd:7c:6c:14:d2:1f:55:14:f9:92:f3:96:
                    50:86:e2:64:0e:f3:18:12:33:ce:35:9d:1e:c1:c9:
                    d6:2c:da:26:40:f2:cb:52:99:9c:05:7b:91:a8:4d:
                    6d:da:13:a1:ea:fc:0f:c9:9b:82:4e:e5:36:49:88:
                    fe:36:85:87:61:99:45:5b:49:ac:36:44:6d:35:87:
                    57:3e:80:7c:5a:a9:31:55:98:f3:d4:2e:b0:a4:7c:
                    1d:e1:1d:ae:07:d5:52:55:2e:58:67:04:4f:bf:77:
                    db:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1D:6B:A5:A8:D0:1F:91:CF:6A:9B:8D:03:0B:26:A9:ED:FE:6F:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/21006f88-25cc-321a-bb06-e692d318c31d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl

            X509v3 Authority Key Identifier:
                keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcc0:6666::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:0c:15:4d:93:1b:66:9b:0e:0e:66:c5:d6:39:57:34:e6:2b:
         55:4a:98:e3:24:69:16:bd:b5:0c:ef:d8:52:19:34:7a:ce:d5:
         f5:40:06:b7:c4:32:b9:74:60:e9:bd:9e:22:bf:74:b2:6c:01:
         86:c8:37:d4:84:6a:13:94:d5:50:20:c4:5d:62:85:e9:75:54:
         44:62:5a:4a:57:51:0a:50:a9:b8:e2:2c:6a:28:fa:ff:1d:7c:
         cc:0b:40:aa:70:02:72:27:d1:28:21:8f:cb:10:a1:6b:9c:e2:
         e3:60:f8:56:9b:da:c0:52:5f:8b:e1:96:f4:f5:69:78:91:59:
         fc:01:3a:64:50:60:5d:b9:a1:f5:a8:9c:5e:70:49:28:08:e0:
         1c:15:ea:aa:3c:cd:3e:1a:63:35:5a:28:22:bf:68:01:26:71:
         33:d5:a5:bc:d3:13:d7:f4:3a:5f:50:1b:f1:bb:b6:f3:0a:1f:
         88:d6:6e:1e:bc:c6:49:2b:06:31:f6:5d:32:aa:f2:21:36:c1:
         7e:a0:e8:f0:ea:59:70:06:75:82:82:23:40:ee:38:3c:82:e1:
         3a:70:ad:9e:0e:92:65:30:7b:32:95:c7:97:b7:5d:be:81:21:
         1a:10:95:d6:eb:22:b5:c3:43:4e:e8:09:dc:c4:06:81:ed:78:
         06:39:3d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:43:34 2024 by rpki-client on console-fra.rpki-client.org