Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/2fad02dd-0df7-3724-a7c2-b8f2234108f4.roa
File:                     2fad02dd-0df7-3724-a7c2-b8f2234108f4.roa (raw, json)
Hash identifier:          e/CWT93xOnUODDSuPr7kg9C4Sk92ZDLT6WbdZIv3U+k=
Subject key identifier:   99:43:F8:01:DD:2C:40:0F:6B:0D:3C:5E:3C:E2:6B:B9:0B:C1:06:52
Certificate issuer:       /CN=ab1a140b-878b-41cc-864f-08e0177f7325
Certificate serial:       010D0C9F43285844AA6A2AFB77602411A38F542C
Authority key identifier: 71:2D:7B:15:D7:47:DF:6C:DB:98:B1:DC:CB:ED:1A:2D:28:94:57:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/2fad02dd-0df7-3724-a7c2-b8f2234108f4.roa
Signing time:             Thu 25 Jan 2024 02:00:24 +0000
ROA not before:           Thu 25 Jan 2024 02:00:24 +0000
ROA not after:            Wed 24 Apr 2024 01:00:24 +0000
asID:                     20473
IP address blocks:        2602:fd75::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ab1a140b-878b-41cc-864f-08e0177f7325.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ab1a140b-878b-41cc-864f-08e0177f7325.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:aa:6a:2a:fb:77:60:24:11:a3:8f:54:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1a140b-878b-41cc-864f-08e0177f7325
        Validity
            Not Before: Jan 25 02:00:24 2024 GMT
            Not After : Apr 24 01:00:24 2024 GMT
        Subject: CN=6b596af3-a4e6-42b8-b55e-59ca79ee2757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:16:00:21:22:d8:9c:f6:82:33:34:5d:19:14:
                    7e:81:46:3c:80:dc:15:ee:fe:10:e3:0c:3f:a9:72:
                    9a:83:cc:14:21:a3:f1:a5:f6:6c:0e:15:65:6e:f1:
                    08:5c:46:6f:26:86:75:04:b2:83:d8:e6:20:d8:f5:
                    b0:88:9f:8c:a0:3e:e9:b4:ed:d7:b0:ee:69:d0:dd:
                    35:ab:e1:65:4a:d0:41:cd:ea:7a:1b:22:7d:5f:5d:
                    18:90:52:55:a6:03:bc:4e:5f:83:91:0f:cf:27:76:
                    a2:c0:aa:ad:bf:2a:ff:b4:25:52:6e:8e:91:f2:62:
                    7e:da:a6:06:58:48:47:c5:4a:ac:51:32:90:d9:9e:
                    52:aa:86:27:74:cd:3c:14:70:d1:20:eb:bf:ad:5d:
                    d2:ae:f5:3e:b4:61:fc:52:11:0b:ad:76:59:33:28:
                    be:02:ec:73:77:d4:c0:1b:67:98:9d:80:7b:f9:df:
                    e6:39:60:95:64:ce:dc:f2:b4:73:d7:0b:90:dc:d4:
                    a3:b1:b2:36:8a:8c:64:71:7c:59:3b:53:46:bf:16:
                    d9:bc:75:68:52:7e:41:9c:87:10:f1:c2:40:28:59:
                    1f:fc:38:c0:db:81:46:e7:e8:ca:98:2b:9a:c9:d4:
                    0c:54:92:c1:26:35:a5:5a:7a:88:1b:c2:af:91:a9:
                    04:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:43:F8:01:DD:2C:40:0F:6B:0D:3C:5E:3C:E2:6B:B9:0B:C1:06:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/2fad02dd-0df7-3724-a7c2-b8f2234108f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ab1a140b-878b-41cc-864f-08e0177f7325.crl

            X509v3 Authority Key Identifier:
                keyid:71:2D:7B:15:D7:47:DF:6C:DB:98:B1:DC:CB:ED:1A:2D:28:94:57:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd75::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:29:a0:82:ac:8e:61:4d:37:dc:a3:0f:36:40:29:f0:46:e0:
         75:a0:73:61:e0:5c:d6:7b:35:c3:af:5b:85:cd:4d:00:0f:5e:
         8a:4f:f9:03:b4:22:b5:42:c4:0e:cc:94:6b:86:9a:b2:6e:b3:
         19:ef:0d:fe:8b:ea:16:1b:f5:7d:57:9e:66:c9:b7:ef:ed:a3:
         6e:c2:28:39:35:93:ee:5c:31:4f:4b:b6:cb:81:88:ae:31:3b:
         9c:87:d5:c5:67:aa:a3:08:55:43:99:b7:b7:c5:e7:5e:4c:fd:
         f0:27:72:f4:e2:bf:04:34:ab:84:cc:cd:2f:a8:d7:34:8b:b9:
         50:f2:e4:26:ce:02:52:28:69:07:83:b0:91:cf:79:61:d0:ef:
         b5:15:5d:15:d2:bf:b9:d4:f2:48:5c:d7:41:d3:6e:b4:38:20:
         47:49:01:72:f7:3b:23:3a:22:3f:52:c9:b1:26:82:1f:13:e9:
         c6:6b:be:84:b8:de:cb:d0:86:62:5d:3d:82:67:3a:2b:f7:b5:
         21:37:f4:61:13:b6:f1:de:93:1c:11:1d:a1:e3:08:28:aa:17:
         da:eb:6b:0c:60:f5:a4:0a:5a:b1:88:89:84:5e:fa:d2:9d:2e:
         53:d7:89:9b:25:98:8f:c9:ea:64:34:b4:73:86:fe:86:ea:0f:
         4e:81:1a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 21:43:32 2024 by rpki-client on console-ams.rpki-client.org