Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/3bafc015-eee5-3b8a-82fc-f368e1449458.roa
File:                     3bafc015-eee5-3b8a-82fc-f368e1449458.roa (raw, json)
Hash identifier:          Z5D3xz1QIV2V9l4gVW3y+hBN7WXJYydgKSEv75gECNI=
Subject key identifier:   BE:52:97:56:78:05:56:5F:A1:DA:BB:38:C4:AC:A4:67:49:A5:EE:D4
Certificate issuer:       /CN=8b56caea-2136-4342-baff-6f31268d4cc4
Certificate serial:       010D0C9F4328584548081BB7F116073C494C7180
Authority key identifier: 5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/3bafc015-eee5-3b8a-82fc-f368e1449458.roa
Signing time:             Thu 21 Mar 2024 13:00:33 +0000
ROA not before:           Thu 21 Mar 2024 13:00:33 +0000
ROA not after:            Wed 19 Jun 2024 13:00:33 +0000
asID:                     49585
IP address blocks:        2602:faaf:1::/48 maxlen: 48
                          2602:faaf:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:08:1b:b7:f1:16:07:3c:49:4c:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b56caea-2136-4342-baff-6f31268d4cc4
        Validity
            Not Before: Mar 21 13:00:33 2024 GMT
            Not After : Jun 19 13:00:33 2024 GMT
        Subject: CN=dc8727b8-dfb4-4b38-a416-c98548c207ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:07:ed:2e:9f:77:54:1f:60:14:c8:36:9f:dd:
                    37:69:8c:4b:a1:9a:40:b7:81:23:09:97:0b:e4:b8:
                    d5:40:a2:ca:b9:49:73:87:39:21:4c:b6:11:d9:a5:
                    dd:81:f6:d2:66:99:fb:28:2c:dc:d5:c6:92:9b:d2:
                    9d:57:5e:3f:56:cd:9b:d1:15:88:1e:e3:64:94:6c:
                    c5:55:7c:10:55:8b:81:6b:d5:02:3c:74:85:48:49:
                    40:4c:2b:5e:44:6d:98:41:b0:76:c8:2b:12:b8:86:
                    b5:07:fa:ed:5b:6f:5e:64:fb:3a:95:62:39:56:3c:
                    a2:5a:64:7d:d4:dc:d4:ce:37:6c:85:4a:a7:c7:86:
                    11:68:5d:61:e6:98:4c:25:7a:b3:ee:0c:30:fb:16:
                    6f:36:93:23:e8:75:6f:1f:ba:04:8f:42:f9:be:d9:
                    e1:9c:b0:c7:1a:34:dd:d3:0d:c2:98:e1:a9:f8:01:
                    6a:e7:75:c8:87:c2:3d:af:23:a2:f4:dc:59:25:8c:
                    c7:0c:28:3c:6b:59:94:8e:48:60:cb:26:c4:98:c8:
                    66:89:8f:cb:6e:04:82:5d:eb:de:e1:48:f7:c6:cd:
                    4d:1b:a2:a0:e7:c0:62:c3:bf:44:0c:38:65:7c:18:
                    c6:9d:9b:bf:01:86:f7:e3:cd:3d:0a:08:35:50:ec:
                    a8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:52:97:56:78:05:56:5F:A1:DA:BB:38:C4:AC:A4:67:49:A5:EE:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/3bafc015-eee5-3b8a-82fc-f368e1449458.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.crl

            X509v3 Authority Key Identifier:
                keyid:5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faaf:1::-2602:faaf:2:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:9f:1d:03:7f:1b:dc:09:48:02:2f:9e:15:12:82:35:58:45:
         11:a1:e0:f1:2f:4c:66:69:ca:66:19:9b:27:0d:6e:98:71:0b:
         24:b1:02:4b:c7:d4:47:5a:30:11:a8:79:54:7f:da:66:c0:ff:
         af:94:a3:f7:b4:31:7d:57:f4:71:fd:3a:d9:45:b5:de:15:7e:
         fb:25:4f:0d:9d:db:b7:c5:6f:f7:26:93:d3:a5:1b:81:52:c3:
         e7:74:24:f0:44:8a:76:13:8c:85:18:d5:52:64:7f:a0:73:37:
         41:6d:9c:76:64:ad:c3:67:f8:9b:a4:09:3f:46:d1:b3:d5:82:
         96:30:67:0a:78:25:d7:6e:96:89:9a:bb:b4:b4:5c:2f:23:ea:
         6d:41:bd:2f:85:cf:67:f4:b9:37:78:c6:43:85:ba:ae:c3:97:
         10:25:2f:49:7b:25:6d:a3:9c:fd:25:26:da:5c:2a:ef:c5:1c:
         6e:5a:a9:e0:5e:40:97:09:bd:23:da:3d:57:bc:bf:40:23:73:
         28:9e:05:bb:8c:45:d1:c2:fb:75:3b:61:37:3c:da:cb:12:c1:
         6a:c4:98:18:47:ec:26:7d:82:eb:ac:57:76:39:e1:03:e5:ec:
         78:d8:41:05:fa:c0:01:fa:98:9b:c3:2a:2c:e5:2a:cd:6c:23:
         73:a6:cd:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:02:51 2024 by rpki-client on console-ams.rpki-client.org