Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/ad21d0e5-9b1e-3eab-9a5b-b8298a2e71cf.roa
File:                     ad21d0e5-9b1e-3eab-9a5b-b8298a2e71cf.roa (raw, json)
Hash identifier:          /9MfxWAhtvZg7Cisg0I+e6yueD05mWf3nXZyXsaHWdU=
Subject key identifier:   2E:5A:87:BC:48:2A:0F:6E:B5:EB:2E:AC:D7:B5:D4:E5:00:82:48:31
Certificate issuer:       /CN=04bd1965-5757-479c-b2af-44967b5e0539
Certificate serial:       010D0C9F43285845BD48E49A4FC1CBF1784D4600
Authority key identifier: B5:78:2D:55:7A:A0:51:AA:E0:15:64:BB:40:15:08:8D:34:54:FF:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/ad21d0e5-9b1e-3eab-9a5b-b8298a2e71cf.roa
Signing time:             Thu 02 May 2024 13:00:34 +0000
ROA not before:           Thu 02 May 2024 13:00:34 +0000
ROA not after:            Wed 31 Jul 2024 13:00:34 +0000
asID:                     400671
IP address blocks:        2602:fb7e::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/04bd1965-5757-479c-b2af-44967b5e0539.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/04bd1965-5757-479c-b2af-44967b5e0539.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bd:48:e4:9a:4f:c1:cb:f1:78:4d:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04bd1965-5757-479c-b2af-44967b5e0539
        Validity
            Not Before: May  2 13:00:34 2024 GMT
            Not After : Jul 31 13:00:34 2024 GMT
        Subject: CN=837eac65-6b53-404a-8bd7-f7552ff2a376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:53:7c:83:52:6d:04:3c:3c:35:a8:bb:ef:3a:
                    54:53:9f:a9:d4:84:a5:57:56:1c:2a:0d:6b:04:87:
                    45:14:3c:70:c5:43:6b:54:58:28:57:3d:8c:9f:98:
                    5e:55:e2:61:95:1a:96:c3:46:09:9c:7e:a4:fa:a3:
                    e7:3f:1f:71:a8:09:45:ff:24:6d:2a:65:95:05:1a:
                    2d:99:a0:b1:cc:fd:f1:15:97:91:24:93:5c:ac:8e:
                    0c:ca:10:b4:d6:46:eb:2d:cb:9d:2d:7d:9b:4b:69:
                    ce:77:f5:b9:7c:c4:27:e2:c7:d9:b2:ee:07:6d:b2:
                    89:3d:f2:29:13:a1:84:4d:68:1c:a0:dd:fa:4e:22:
                    22:3a:d1:91:79:97:91:c1:f6:66:ad:85:43:57:66:
                    d9:a5:d6:c0:ae:3b:bc:c4:75:63:bf:df:0e:ec:d9:
                    bd:b6:f5:63:a7:b6:01:1e:57:2e:2b:bd:3e:2e:52:
                    22:c2:b2:ed:77:d7:7d:de:93:cf:43:31:d9:4d:ee:
                    e9:3c:f5:0b:b7:fa:de:cc:62:d5:4e:a8:01:a5:72:
                    50:e9:c9:d4:b5:bb:59:9c:f9:57:31:a0:d1:5e:23:
                    e6:ce:ef:fc:e5:7d:e8:2f:8a:c9:0d:be:e5:5f:62:
                    3b:2d:1a:65:b6:a0:5e:0e:7a:80:be:01:84:cb:d0:
                    cf:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:5A:87:BC:48:2A:0F:6E:B5:EB:2E:AC:D7:B5:D4:E5:00:82:48:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/ad21d0e5-9b1e-3eab-9a5b-b8298a2e71cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/04bd1965-5757-479c-b2af-44967b5e0539.crl

            X509v3 Authority Key Identifier:
                keyid:B5:78:2D:55:7A:A0:51:AA:E0:15:64:BB:40:15:08:8D:34:54:FF:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb7e::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:3f:4b:2c:a7:0b:ba:31:8a:0c:a2:c0:d7:c2:23:80:c1:5e:
         c1:3d:a3:c2:dc:3b:2b:a5:86:af:05:ea:c4:38:3d:5a:12:38:
         6c:a2:ff:a1:44:b9:42:7d:55:20:85:75:97:06:80:f3:5a:f4:
         79:2a:15:23:3b:28:b3:67:03:b8:06:5c:38:da:7f:19:0a:55:
         b2:a4:f5:bc:3c:03:b4:cf:cb:f1:6d:db:fa:53:87:ed:fa:29:
         86:3d:03:76:8d:67:9f:cf:ee:4a:1e:df:28:24:e1:4e:56:20:
         1a:7d:3a:54:9c:cc:e7:94:e9:03:05:36:2c:2b:e2:67:fe:6e:
         01:f1:c4:48:bd:59:c2:6e:30:ea:e8:7e:17:34:7d:4a:3b:88:
         e0:4f:41:f8:cb:d0:48:a1:fa:2e:2f:86:14:8c:22:b2:6c:d5:
         62:13:b9:ee:2d:88:67:ea:67:63:db:d8:17:96:b1:f0:66:11:
         35:aa:33:91:7b:28:0d:5f:45:d3:95:fb:a1:97:9b:4a:27:f9:
         62:67:82:c9:25:97:b7:3b:55:c8:1f:0a:7a:f7:59:a0:98:19:
         39:b7:ba:40:4f:9e:24:9a:d9:47:88:c3:6b:e5:aa:02:5d:14:
         6e:4c:f2:ca:c2:98:24:15:d4:2a:75:41:da:71:44:bf:ae:6c:
         e1:00:4c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 14:40:10 2024 by rpki-client on console-fra.rpki-client.org