Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/1f5a9a72-5fc9-3e7f-9f3e-76f84c3c9dcf.roa
File:                     1f5a9a72-5fc9-3e7f-9f3e-76f84c3c9dcf.roa (raw, json)
Hash identifier:          t4eIWgJ2pasy+H19xEN2NkGwNDIjLpcPbH9VxI0LFIU=
Subject key identifier:   74:08:3A:B6:FA:F1:45:A1:98:70:E3:17:05:94:37:D8:98:8A:86:D8
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F43285845174AE1741BB85BFD4F34CEC0
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/1f5a9a72-5fc9-3e7f-9f3e-76f84c3c9dcf.roa
Signing time:             Mon 04 Mar 2024 02:00:26 +0000
ROA not before:           Mon 04 Mar 2024 02:00:26 +0000
ROA not after:            Sun 02 Jun 2024 01:00:26 +0000
asID:                     2152
IP address blocks:        2607:cc80:6000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:17:4a:e1:74:1b:b8:5b:fd:4f:34:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: Mar  4 02:00:26 2024 GMT
            Not After : Jun  2 01:00:26 2024 GMT
        Subject: CN=7adf8295-75d5-4426-ae1b-bb727336e6d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d0:c1:6a:0a:6e:1a:3a:4b:e4:71:72:f4:d7:
                    c2:b9:5b:16:3d:c9:c6:70:cc:01:5c:a5:df:a1:a8:
                    f6:aa:bd:ee:f9:30:06:23:41:ae:e6:32:85:71:84:
                    d3:b3:5c:84:72:7b:7d:4d:c9:b0:fc:b5:9e:1c:d4:
                    fc:ea:4e:3b:63:01:b5:93:d5:e3:0e:d1:1e:5c:f5:
                    23:0d:8f:e2:1e:c7:ca:87:02:e6:e5:03:f9:01:0d:
                    e1:b4:a1:91:4b:f5:44:10:6e:4e:49:8a:2f:af:46:
                    94:8e:bb:41:27:a4:df:1f:1c:c0:a3:b9:bd:77:11:
                    e0:9e:bd:cf:0f:3b:70:f6:d3:53:05:f0:a3:e4:83:
                    4d:cc:58:a6:01:75:ee:ec:62:66:25:4b:12:f2:d1:
                    e1:32:3b:fe:97:d3:04:00:d6:d0:98:6b:1d:e3:9c:
                    3c:41:97:06:83:24:70:53:bb:16:5c:48:78:7a:f5:
                    6e:0b:db:19:94:34:63:62:a8:22:b2:c2:04:a6:db:
                    37:24:4f:5c:f9:e2:c3:87:ed:bf:9e:27:d8:86:1b:
                    5e:d6:95:8f:13:5a:09:31:90:a1:b7:48:50:0f:5b:
                    e3:0a:43:e8:f3:46:ae:9b:6b:d4:0e:4e:01:be:c6:
                    e4:5b:b4:17:3a:41:33:97:fc:68:47:98:77:58:ad:
                    b3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:08:3A:B6:FA:F1:45:A1:98:70:E3:17:05:94:37:D8:98:8A:86:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/1f5a9a72-5fc9-3e7f-9f3e-76f84c3c9dcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:83:dd:d7:c4:15:a1:c7:ac:14:90:3c:6f:da:c3:b6:f5:48:
         a8:ab:2c:de:2b:61:d9:2c:5f:7e:02:2a:fb:c0:9e:01:de:82:
         97:14:40:e2:f2:14:8d:b8:76:14:ca:38:24:4c:ca:8c:07:04:
         73:9b:4c:7a:f1:00:a0:73:92:b0:83:57:dc:49:42:b3:08:9f:
         7c:4a:77:41:36:ed:1e:ad:80:63:a6:5f:85:15:04:f6:10:1d:
         39:5d:c3:6e:2b:d9:b8:67:f1:bd:a0:19:a7:34:81:ff:cd:41:
         de:0b:1d:ef:a6:5d:7c:11:08:1e:40:e1:df:02:f5:83:c9:47:
         3a:4b:d9:8a:75:26:92:04:c6:ba:60:6d:60:dc:92:73:b1:b5:
         b6:7b:2a:1b:5b:1d:fe:26:79:ca:19:02:04:d3:b4:94:2a:b3:
         1e:8e:27:c4:ed:9c:f4:95:15:74:7f:2c:90:50:ee:9b:95:ba:
         a0:91:4c:cc:4e:38:ab:4d:1d:87:79:22:f9:71:7a:e7:1f:1d:
         fd:12:7c:d8:27:b5:10:89:9f:3b:54:40:ac:b0:da:97:1c:b1:
         e4:3a:74:08:8c:40:1d:9a:23:3f:d6:ae:de:45:02:c4:bd:40:
         e5:49:c1:65:4b:be:df:35:1a:59:c8:f5:7b:f1:a2:2d:83:e8:
         b7:7c:a5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:09:10 2024 by rpki-client on console-fra.rpki-client.org