Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/4c33b29b-7d74-35de-896d-e8663c41392f.roa
File:                     4c33b29b-7d74-35de-896d-e8663c41392f.roa (raw, json)
Hash identifier:          05oFO4Et0GTukl7yaGsAO+XzbFfRfshENcticACcemQ=
Subject key identifier:   A1:51:26:1E:75:05:26:43:86:93:73:DD:B8:4F:FD:36:21:5E:76:84
Certificate issuer:       /CN=ab1101f4-a527-459b-8c16-d78b261e6de3
Certificate serial:       010D0C9F432858459368C62DB1972C1CC120FA80
Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/4c33b29b-7d74-35de-896d-e8663c41392f.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     14618
IP address blocks:        2602:277:d02::/47 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:c6:2d:b1:97:2c:1c:c1:20:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=3a82b8bc-5de1-45b1-9ba6-3bafa4f3911e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:48:85:81:e2:c0:97:0b:f3:0c:90:56:ce:cb:
                    01:1b:0a:98:10:4c:63:f4:4a:16:49:5f:52:9f:9c:
                    54:49:80:44:23:87:a6:21:9e:b4:ed:b1:94:88:fb:
                    61:5b:b8:20:a9:46:79:56:4f:38:0f:76:1f:3a:c6:
                    97:7a:a2:14:3b:bd:a4:ed:44:9e:57:37:65:13:15:
                    02:aa:c2:e4:78:97:61:bb:24:19:8e:e0:aa:2e:cc:
                    8c:f7:18:9f:fe:89:9c:44:80:0d:6d:dd:62:50:6b:
                    44:33:d2:23:5b:b7:77:01:cb:c4:25:c8:6f:1b:9a:
                    41:f7:7b:61:49:bf:3c:3b:3b:3c:7d:0e:e9:62:2a:
                    cc:dc:39:77:39:0f:6e:31:19:e5:21:27:25:a2:e4:
                    2b:2d:eb:35:74:be:5b:88:dd:d2:6c:6d:02:6d:00:
                    9e:bd:f3:53:8e:7d:e2:e2:fb:dd:4c:79:95:58:48:
                    6e:f8:97:d2:84:29:99:af:99:87:88:91:18:87:71:
                    39:bb:0b:c4:40:2c:26:fc:74:8a:2c:9d:39:97:01:
                    e2:12:6d:4b:a7:4d:25:da:fb:ad:22:30:a5:6d:ca:
                    46:e9:ab:92:17:30:fd:7f:5f:6f:8e:fc:56:7d:3b:
                    56:21:cf:84:f6:60:cb:13:44:aa:ad:94:84:2a:b4:
                    df:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:51:26:1E:75:05:26:43:86:93:73:DD:B8:4F:FD:36:21:5E:76:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/4c33b29b-7d74-35de-896d-e8663c41392f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl

            X509v3 Authority Key Identifier:
                keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:277:d02::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:9e:50:41:ab:d8:2e:9d:81:47:17:18:36:c9:a0:29:34:96:
         47:0e:2e:87:a3:0c:1d:a3:c5:3c:fc:16:36:c0:9a:b0:e2:5e:
         0a:85:8a:e9:c4:08:f9:35:ac:e1:52:74:69:eb:68:3b:e1:bb:
         5c:ad:96:e4:54:4a:03:a4:f5:99:c5:27:b5:ed:b5:84:4f:57:
         2b:b7:81:2a:2c:0d:32:fa:ff:2f:98:f4:ca:27:d7:c7:e9:fa:
         91:00:e0:41:17:78:ee:af:11:d2:86:3c:62:0c:03:b1:e2:bc:
         40:da:7d:74:2b:04:8b:02:e2:b6:d5:ba:2f:39:ba:3b:9f:2a:
         99:bc:5b:89:78:5f:bf:f3:c3:08:99:11:76:65:bd:c4:15:d1:
         d9:9b:8b:c3:89:1f:39:37:06:d8:c1:09:ba:1f:b0:09:15:ea:
         72:b1:b3:ab:71:38:d7:72:c9:a1:32:77:0b:fb:14:54:63:0f:
         a2:12:64:49:cb:6c:ba:d8:8f:45:d0:96:95:e3:a5:18:2d:ba:
         39:40:66:ed:c3:77:25:44:8b:c7:1a:20:f2:c9:30:0b:b7:84:
         be:c8:fc:c7:30:59:23:95:a1:a3:ae:1c:78:57:12:d3:e7:1e:
         62:37:69:bf:51:27:80:02:1e:a7:2c:91:19:86:16:6d:b2:eb:
         af:c8:d2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:28:13 2024 by rpki-client on console-fra.rpki-client.org