Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f/8b84c134-7de9-3053-8d3a-7c66ce6a4ba3.roa
File:                     8b84c134-7de9-3053-8d3a-7c66ce6a4ba3.roa (raw, json)
Hash identifier:          H4Q+xcUOXffAih6zAEwlaBfr/lHycM2JV+4MKptcXwA=
Subject key identifier:   C5:58:41:69:42:C3:37:80:F2:7A:30:04:14:05:16:4B:64:3F:12:6C
Certificate issuer:       /CN=bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f
Certificate serial:       010D0C9F43285845E193B9173551DA8AB4227500
Authority key identifier: E7:5A:9B:72:A0:DA:D3:14:B8:AF:D2:D5:58:D4:5B:AA:2E:62:ED:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f/8b84c134-7de9-3053-8d3a-7c66ce6a4ba3.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     399761
IP address blocks:        2602:fc63::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:b9:17:35:51:da:8a:b4:22:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=1939e5b8-91dd-473a-8497-ac83f5224233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b9:70:f1:a8:4b:75:8b:cb:56:13:aa:a7:00:
                    a6:f2:ad:60:5b:7c:5d:5f:b9:17:fd:d2:08:26:2e:
                    a0:af:20:81:49:46:d7:7c:21:ea:a9:66:a3:d9:e0:
                    d7:4c:d4:b0:f5:d1:a1:ef:dd:47:8c:10:c2:10:4c:
                    3e:6e:b2:26:77:65:67:cf:f2:0e:2a:66:a4:e4:41:
                    3e:15:d1:fd:c5:69:65:c0:ff:1e:d5:68:02:d5:72:
                    db:fd:ae:5a:90:64:53:34:1d:b9:98:22:fa:62:50:
                    03:02:54:96:30:5e:ab:2d:c9:ed:63:27:c3:66:bc:
                    47:2b:13:8b:fb:f6:1a:32:13:bd:62:05:c0:d7:5f:
                    67:cd:69:c8:3e:72:b9:13:e3:af:e3:60:b0:eb:5e:
                    95:64:5f:18:91:f9:b9:73:7a:f2:cc:1d:9d:54:7f:
                    6f:44:cd:c3:b8:e9:3e:7b:5d:93:e9:30:dc:7d:65:
                    68:a1:0f:ed:b3:bd:66:f2:e2:18:27:0e:83:18:d8:
                    a1:7a:52:e1:0c:e7:42:79:ac:9e:26:91:83:18:8b:
                    49:45:7b:19:bd:3d:c1:7f:24:f0:5c:7c:c1:53:a4:
                    74:54:0f:36:66:5f:92:9f:ab:b2:a8:0f:53:fa:8a:
                    4f:c9:b0:74:11:9f:72:e0:04:1b:bf:3b:44:76:f0:
                    f0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:58:41:69:42:C3:37:80:F2:7A:30:04:14:05:16:4B:64:3F:12:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f/8b84c134-7de9-3053-8d3a-7c66ce6a4ba3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f.crl

            X509v3 Authority Key Identifier:
                keyid:E7:5A:9B:72:A0:DA:D3:14:B8:AF:D2:D5:58:D4:5B:AA:2E:62:ED:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc63::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:05:30:66:34:6e:a4:f3:65:73:ff:88:05:8a:e8:ba:4e:7e:
         2b:1a:8d:33:bb:6a:51:62:82:38:3c:87:7a:78:34:11:e9:9d:
         42:84:59:00:d4:c8:59:31:81:4e:9a:b1:fe:87:f8:3b:56:1e:
         d3:87:6b:a6:84:27:46:e6:ff:d3:51:2e:ce:45:15:00:5f:f4:
         d9:95:7e:df:42:6f:f0:36:00:64:4b:3c:b5:87:8f:59:53:05:
         2b:10:8b:17:c4:4e:6b:cf:4c:a6:eb:75:94:83:7f:a8:35:58:
         b2:b8:ee:a9:4d:3e:26:58:3b:8e:1e:16:68:88:54:8a:00:23:
         2c:84:17:f2:22:8e:f2:d4:47:0a:63:10:a2:9c:d7:9c:0f:18:
         0c:ce:d0:39:74:8f:b8:b5:3d:8a:3d:96:6d:85:ec:aa:c3:be:
         9d:4b:15:3b:c3:ec:72:54:f1:16:0a:5a:5a:f7:86:9f:d0:14:
         8d:10:d0:9c:4d:9b:5d:ab:02:74:a3:92:14:77:bb:5f:cc:5e:
         03:6e:71:c0:f7:23:1c:7d:13:e3:45:e7:af:0c:b8:62:29:e7:
         a0:b4:9d:0c:94:cf:aa:cf:fe:30:36:73:26:22:a7:01:c5:bd:
         9b:ee:ca:40:7b:4c:56:f2:27:19:d4:eb:63:44:bd:10:32:29:
         cd:1e:1d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 10:59:06 2024 by rpki-client on console-ams.rpki-client.org