Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/138c02a3-d152-354b-8cf8-52bbdad89e92.roa
File:                     138c02a3-d152-354b-8cf8-52bbdad89e92.roa (raw, json)
Hash identifier:          WWc2lc1CLwXZKj5mpK027C0otFZ7IED7BTNmODZY/ZQ=
Subject key identifier:   F4:22:77:25:55:E4:48:57:58:AB:E3:F4:93:99:98:C5:FF:38:55:1E
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F432858450955720918002C9FA81D1080
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/138c02a3-d152-354b-8cf8-52bbdad89e92.roa
Signing time:             Wed 28 Feb 2024 02:00:26 +0000
ROA not before:           Wed 28 Feb 2024 02:00:26 +0000
ROA not after:            Tue 28 May 2024 01:00:26 +0000
asID:                     198949
IP address blocks:        2607:cc80:1000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:09:55:72:09:18:00:2c:9f:a8:1d:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: Feb 28 02:00:26 2024 GMT
            Not After : May 28 01:00:26 2024 GMT
        Subject: CN=e77ee32a-588b-45bf-9f4d-067ee144a278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a8:06:48:36:60:29:f3:dc:00:ce:e1:34:f9:
                    33:cc:0e:34:80:12:aa:aa:f5:fd:e1:d1:65:b4:da:
                    93:eb:4e:a2:8e:68:4b:88:78:a8:53:fb:c6:cc:64:
                    90:a6:62:30:e3:4f:38:22:c4:5b:c9:72:9d:28:51:
                    67:a5:d2:d0:14:1e:ff:3c:7c:c0:ae:61:7a:18:eb:
                    92:a7:06:bc:af:f9:29:46:32:77:71:8a:e9:2d:b7:
                    d4:c1:e3:01:d0:d7:0c:ae:57:0b:8d:9f:35:4b:88:
                    9b:1d:f2:56:1e:94:b2:08:98:b1:05:05:01:21:45:
                    26:49:18:8b:a0:d1:00:c0:47:b2:b9:8e:66:b5:92:
                    5b:8f:77:51:84:d0:dd:8a:0c:9c:94:52:0f:03:52:
                    36:e1:97:7b:30:29:31:2b:8b:4f:85:97:a1:1d:f7:
                    c4:30:19:5b:6e:2d:21:89:ba:3c:d1:0e:48:58:0e:
                    ee:23:4c:d5:f7:77:05:9e:63:34:97:a0:6f:4a:15:
                    82:7b:cc:b0:2d:77:6f:ac:5b:96:c8:bd:2a:c3:82:
                    37:16:c2:f7:35:f0:87:c7:06:40:f7:fe:06:13:8f:
                    86:f4:0c:d4:4d:10:af:ca:07:eb:53:2b:c6:4f:23:
                    dd:36:e2:78:d8:53:b3:0d:13:ad:25:30:48:22:1f:
                    08:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:22:77:25:55:E4:48:57:58:AB:E3:F4:93:99:98:C5:FF:38:55:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/138c02a3-d152-354b-8cf8-52bbdad89e92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80:1000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:d7:a3:58:5f:e5:fd:fe:48:c1:03:86:3b:b9:59:10:d8:90:
         8b:38:a6:3a:64:95:3f:5d:5f:27:32:ea:1a:80:10:80:64:e2:
         60:2d:53:9b:80:9c:01:b2:84:fc:ee:98:67:56:5d:96:ce:46:
         ea:92:0c:3e:77:f3:dc:62:e4:7b:7e:0e:4b:73:62:5b:0f:6a:
         23:ea:94:50:2b:18:fb:d2:93:b1:28:95:df:14:a1:ab:7a:68:
         e7:a6:b0:9a:d5:15:c2:5b:2d:3d:52:70:53:27:96:26:9a:cb:
         d5:a1:14:cd:dc:80:42:51:52:0a:6b:ed:58:95:27:07:5f:15:
         2b:f3:eb:3f:9a:0b:dc:c9:8a:6f:5f:d3:79:08:c3:5e:a2:f2:
         c2:c5:f8:a0:77:64:bb:ae:68:f8:4d:b4:a2:d6:e7:b6:3b:e8:
         5e:70:31:36:26:9b:a5:04:f5:f3:d9:a9:5d:0b:b4:81:7f:ea:
         cc:b7:b1:d9:d5:aa:30:eb:d7:f4:c6:25:87:a6:7f:86:62:66:
         1f:a3:7b:a7:29:34:44:b3:0a:95:67:7c:d8:4a:94:3d:57:d2:
         21:ef:ef:a7:3d:ef:67:00:00:6c:40:5d:1e:fe:18:72:cd:9c:
         fd:cf:f5:53:91:12:fb:e2:67:ba:64:6c:1c:5a:5a:64:11:ec:
         ab:ec:e2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 23:11:52 2024 by rpki-client on console-ams.rpki-client.org