Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/bd6b9ef4-4d13-3bfd-b0fd-212d7fc9a44b.roa
File:                     bd6b9ef4-4d13-3bfd-b0fd-212d7fc9a44b.roa (raw, json)
Hash identifier:          6rNsSD+gZyXPl+57eDprFkRKl2DrTH5NWtf0nXPPx+A=
Subject key identifier:   58:50:74:78:CA:87:C1:9D:8B:B9:19:37:4F:74:6E:F3:12:A3:0E:A0
Certificate issuer:       /CN=8b01f829-1ce6-47d5-af2d-f61a257f023f
Certificate serial:       010D0C9F43285845C5A8E819F81BA958BC3FEC60
Authority key identifier: 37:A5:20:1E:1E:FE:C4:2F:B6:6D:D4:EA:E3:16:F7:30:FE:EF:91:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/bd6b9ef4-4d13-3bfd-b0fd-212d7fc9a44b.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     14478
IP address blocks:        2602:fb65:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/8b01f829-1ce6-47d5-af2d-f61a257f023f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/8b01f829-1ce6-47d5-af2d-f61a257f023f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:e8:19:f8:1b:a9:58:bc:3f:ec:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b01f829-1ce6-47d5-af2d-f61a257f023f
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=c058e0c6-66f3-4927-a2c4-01445e46cb52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:33:0a:3e:ad:fe:95:ff:0b:26:58:09:18:78:
                    32:09:b2:04:ce:1a:5a:f1:51:d1:63:89:b0:f4:2d:
                    5b:cf:e5:b7:4f:11:eb:7c:99:45:4e:01:bd:0b:7c:
                    88:15:80:b3:bc:2f:cb:b1:c8:81:36:c9:60:68:a5:
                    5e:10:4a:fa:be:7c:30:d1:97:8b:9c:57:2c:0e:02:
                    78:d8:cb:b0:29:d9:d8:73:3e:46:7d:cc:07:bd:1c:
                    74:cb:35:49:85:25:79:05:8f:b8:90:ea:a4:bf:da:
                    14:db:6b:bf:e7:67:bc:42:67:5a:97:62:b8:89:83:
                    03:8c:19:09:a5:3a:70:ae:33:0d:c8:40:c8:3d:b4:
                    af:82:45:ee:83:43:83:3c:be:27:e3:10:49:fd:c9:
                    d0:28:5b:2b:55:05:e3:ca:64:33:da:bc:52:ea:78:
                    43:59:80:fd:06:8a:84:16:27:06:66:00:34:91:89:
                    b7:b1:d8:52:2e:42:ca:e3:d9:ad:a9:50:9f:a1:88:
                    b0:bd:c1:6d:d0:bf:f1:a7:a4:72:7d:3d:1a:b0:0a:
                    7a:90:58:3c:b1:94:33:1d:ca:ed:38:47:48:12:6c:
                    36:e6:1a:18:ec:a0:90:29:88:f5:f1:83:87:50:62:
                    8b:99:c4:3b:c1:36:1f:a9:0f:1a:dd:72:2a:82:a3:
                    a6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:50:74:78:CA:87:C1:9D:8B:B9:19:37:4F:74:6E:F3:12:A3:0E:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/bd6b9ef4-4d13-3bfd-b0fd-212d7fc9a44b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/8b01f829-1ce6-47d5-af2d-f61a257f023f.crl

            X509v3 Authority Key Identifier:
                keyid:37:A5:20:1E:1E:FE:C4:2F:B6:6D:D4:EA:E3:16:F7:30:FE:EF:91:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb65:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:62:d9:01:fa:c1:7d:a9:fc:75:a7:17:dc:ec:0b:37:b6:a9:
         c7:49:5b:fc:78:15:ae:34:bc:66:07:0b:8d:f1:41:25:d0:69:
         37:88:3b:c8:b8:b3:63:bf:ed:9d:fe:5c:3f:43:94:4e:d1:f9:
         a1:db:b5:4a:d7:32:4d:1e:a0:8f:21:88:ac:93:c0:58:55:de:
         de:ef:a2:d9:1d:5b:94:da:be:26:32:b4:cc:5d:76:2a:1f:ce:
         59:61:42:b1:f1:b0:ef:f0:b3:58:9c:e7:2e:d0:86:7c:11:c2:
         3a:07:79:9d:29:4b:d6:1c:fb:3a:97:c3:1c:e9:00:e6:bc:d6:
         be:b2:a5:1a:f1:e4:74:38:96:df:e5:34:a4:82:44:5b:64:51:
         0e:d2:6f:a9:30:dd:04:af:c0:c2:74:c3:de:59:a0:9d:4f:8a:
         f1:b1:e0:cc:b5:a4:51:49:ab:5e:be:3d:ef:f7:41:08:59:ca:
         af:b3:82:60:f8:fd:c0:c5:fd:6f:f6:ac:c7:91:d1:da:e1:ca:
         8b:c8:32:cd:fd:b9:a0:6c:e6:99:7b:d4:61:64:d8:e3:48:f4:
         3a:88:df:d2:80:c0:52:bd:c7:a7:00:06:96:32:0f:aa:57:64:
         f2:2f:a3:75:63:a2:4a:38:cc:fd:30:f1:6e:85:57:49:74:c1:
         02:56:22:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 02:57:51 2024 by rpki-client on console-ams.rpki-client.org