Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/43a59a46-c115-3889-8c22-deae7fcbc88e.roa
File:                     43a59a46-c115-3889-8c22-deae7fcbc88e.roa (raw, json)
Hash identifier:          oW6ZIO7Lb4swrhn+ocL69UMxPkvV84cAq9TJvjVk2so=
Subject key identifier:   BB:CA:F8:87:20:9E:77:92:1D:63:0E:E7:67:DA:CB:85:36:35:93:44
Certificate issuer:       /CN=ab1101f4-a527-459b-8c16-d78b261e6de3
Certificate serial:       010D0C9F432858459368C61E8A0D577E15B0B580
Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/43a59a46-c115-3889-8c22-deae7fcbc88e.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        2602:277:d02::/47 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:c6:1e:8a:0d:57:7e:15:b0:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=de6ddc6c-e622-4ef5-ac91-02a13c33fe2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5c:db:1a:b0:78:4c:3f:aa:b0:6f:4b:26:0f:
                    54:f1:3f:8e:68:07:c7:97:09:b5:14:bf:47:00:36:
                    58:cd:cb:e5:04:46:3c:60:c1:35:b9:6f:21:8f:90:
                    1d:cf:b3:99:9b:5e:84:f3:e2:13:2e:3b:11:2e:10:
                    c3:bb:f7:66:cc:3c:33:ad:93:5e:28:05:06:91:0d:
                    ef:46:14:d7:2c:39:7d:a5:77:6c:db:c2:37:d2:62:
                    70:00:87:25:ba:d7:84:98:b3:0a:27:0f:81:26:8c:
                    0b:25:5c:b0:44:d0:e2:64:68:76:b4:80:b4:c3:5f:
                    e1:e6:c4:13:24:9b:9a:52:e8:27:d8:95:d5:3b:81:
                    e8:d8:b7:9e:a8:cf:1a:ff:61:8a:5a:e3:6a:2f:06:
                    ca:99:60:07:7f:2c:bd:8c:49:55:41:6f:50:d5:fe:
                    37:66:8c:42:5c:e0:0d:9d:c0:fd:99:38:0b:15:6e:
                    99:58:ee:9d:f7:37:f5:65:ac:eb:e5:b5:45:f6:30:
                    7a:73:18:19:a8:8d:ea:81:6c:0a:17:7e:97:f2:26:
                    ae:4d:6e:8c:61:5f:3f:e8:86:91:df:79:76:91:b8:
                    1b:2b:c2:3a:ed:98:57:d9:32:40:83:e2:8e:33:4a:
                    46:2c:7e:57:0b:d1:8a:3d:e5:6e:92:f1:62:8b:66:
                    74:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CA:F8:87:20:9E:77:92:1D:63:0E:E7:67:DA:CB:85:36:35:93:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/43a59a46-c115-3889-8c22-deae7fcbc88e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl

            X509v3 Authority Key Identifier:
                keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:277:d02::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:98:df:1a:a2:36:95:3b:7f:b3:d0:17:a6:3c:d7:1d:7e:89:
         31:ae:29:49:5b:9f:31:6e:c8:0d:d9:ae:30:c2:dd:1b:95:17:
         af:a7:17:55:52:33:8e:ff:7b:c0:1f:0c:d8:85:18:36:05:57:
         ba:f0:00:db:39:32:dd:22:39:80:f0:da:77:53:28:d9:26:6c:
         81:1b:af:a7:c2:41:d5:45:61:9e:5b:53:9f:2e:62:12:a8:42:
         e1:9f:22:ec:5f:bd:90:82:c1:a8:f8:77:b1:ad:e2:fd:4f:78:
         87:4c:d2:42:04:a7:d5:b3:db:9d:e4:36:5f:48:ca:99:74:e9:
         4e:2e:b1:b6:b6:13:a5:99:00:da:c8:bc:1d:62:04:41:8b:b8:
         88:84:24:d9:f9:e0:f7:1b:c3:32:a6:5e:f4:23:f8:27:09:e5:
         c6:15:62:0a:de:9d:92:7f:58:6c:eb:c7:f4:35:90:e2:ce:9d:
         4b:99:43:ba:56:ec:c1:4a:d9:2b:40:22:00:15:9a:0b:c5:29:
         6c:94:f6:97:ef:c7:56:eb:b5:e9:e4:18:1c:29:b6:e1:ff:d6:
         ec:c7:42:53:73:8c:0e:ce:cd:89:91:42:70:e6:a6:3d:53:cb:
         25:81:07:36:f2:f8:5e:ca:3a:88:65:26:f8:0f:31:76:7b:d5:
         c4:c0:29:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:58:17 2024 by rpki-client on console-fra.rpki-client.org