Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/daa3419e-a799-44bc-aaed-506eaf5314b0/0e68186e-2f06-3fcb-8fc8-33f54435a3d0.roa
File:                     0e68186e-2f06-3fcb-8fc8-33f54435a3d0.roa (raw, json)
Hash identifier:          qWCU8GlBVSD70gYadBCG9AAkKLx630SUeLjXUKGREOI=
Subject key identifier:   1D:7B:C1:8A:FC:04:04:04:5A:ED:88:0E:8E:99:BE:CF:50:D7:19:85
Certificate issuer:       /CN=daa3419e-a799-44bc-aaed-506eaf5314b0
Certificate serial:       010D0C9F432858456962B826B18BEA6B034514C0
Authority key identifier: 06:9F:E9:64:2F:4E:43:DA:8A:95:33:9B:1A:69:62:D5:62:FD:01:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/daa3419e-a799-44bc-aaed-506eaf5314b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/daa3419e-a799-44bc-aaed-506eaf5314b0/0e68186e-2f06-3fcb-8fc8-33f54435a3d0.roa
Signing time:             Tue 02 Apr 2024 11:44:52 +0000
ROA not before:           Tue 02 Apr 2024 11:44:52 +0000
ROA not after:            Mon 01 Jul 2024 11:44:52 +0000
asID:                     19949
IP address blocks:        2602:fad8::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/daa3419e-a799-44bc-aaed-506eaf5314b0/daa3419e-a799-44bc-aaed-506eaf5314b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/daa3419e-a799-44bc-aaed-506eaf5314b0/daa3419e-a799-44bc-aaed-506eaf5314b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/daa3419e-a799-44bc-aaed-506eaf5314b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:69:62:b8:26:b1:8b:ea:6b:03:45:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa3419e-a799-44bc-aaed-506eaf5314b0
        Validity
            Not Before: Apr  2 11:44:52 2024 GMT
            Not After : Jul  1 11:44:52 2024 GMT
        Subject: CN=84e5757d-36cf-470a-960e-e539ab16b653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:51:ff:0b:45:f4:38:5b:4b:9c:96:7a:98:93:
                    3a:54:9a:88:e8:0c:83:19:2b:d5:2a:7f:14:11:f5:
                    58:f1:ce:7d:42:ad:1a:b8:fb:fd:99:56:4d:9a:cc:
                    d3:c4:c2:b0:ec:0e:04:3b:d9:16:03:84:bb:24:97:
                    2f:15:62:23:0d:07:b4:38:e7:52:ed:e6:99:fd:89:
                    fa:bb:6b:a2:2a:5f:38:06:1d:e8:21:f9:fd:d7:99:
                    62:53:ba:bf:71:ba:d9:49:c5:a4:04:18:a0:27:ea:
                    7b:b0:d3:92:42:bc:12:9c:92:87:fe:83:50:5b:2a:
                    73:0e:f8:b9:03:e9:14:d7:cd:6b:ea:ee:6b:49:3e:
                    de:d8:95:1c:c1:f9:97:a9:0f:1a:4d:5e:a0:7f:58:
                    96:c1:a0:63:7d:23:23:47:f9:1a:b2:92:ef:a8:13:
                    97:5a:7f:55:f4:54:ff:99:39:32:2e:31:17:00:e4:
                    3d:48:f8:48:17:f9:c2:22:94:b8:85:6e:d0:d2:d1:
                    6d:0e:f8:c3:60:9d:c3:be:c2:eb:78:ca:52:fe:70:
                    78:7d:b8:0e:27:a0:8b:d9:c7:65:82:60:f6:39:3d:
                    03:a8:b0:57:21:ac:88:a3:f5:00:f3:96:7f:56:8d:
                    0d:9d:9b:ec:1e:bb:c9:4a:da:ea:74:2e:2e:ea:10:
                    b6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:7B:C1:8A:FC:04:04:04:5A:ED:88:0E:8E:99:BE:CF:50:D7:19:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/daa3419e-a799-44bc-aaed-506eaf5314b0/0e68186e-2f06-3fcb-8fc8-33f54435a3d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/daa3419e-a799-44bc-aaed-506eaf5314b0/daa3419e-a799-44bc-aaed-506eaf5314b0.crl

            X509v3 Authority Key Identifier:
                keyid:06:9F:E9:64:2F:4E:43:DA:8A:95:33:9B:1A:69:62:D5:62:FD:01:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/daa3419e-a799-44bc-aaed-506eaf5314b0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad8::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:c8:a3:4f:e0:e8:f6:33:13:13:78:38:9e:01:75:72:6f:7b:
         57:f4:ca:d5:d0:f0:a9:da:3a:07:ee:6e:5d:b8:07:b7:69:b6:
         f5:fd:09:73:cc:d1:1f:83:ad:e4:cf:fe:10:55:30:7f:36:43:
         01:2b:02:a2:9c:e3:61:f4:fa:97:91:d5:76:d4:d9:e5:29:00:
         b1:1d:f0:46:59:4c:fc:39:1a:68:31:99:84:d1:a1:40:e8:9d:
         2d:4f:90:aa:50:68:66:de:c9:7d:83:61:4d:19:a8:f5:d0:0f:
         c2:cf:85:84:a9:aa:70:4f:60:5f:57:11:6d:84:69:37:08:45:
         9f:be:8b:7c:01:e0:db:18:e4:8e:3d:1a:e4:e0:bb:9a:a7:da:
         5c:81:b0:9f:f3:5c:25:a3:f4:e0:7b:7a:d4:0d:19:88:5d:06:
         3e:d2:e4:cd:78:0d:0c:fa:b2:3e:44:e1:a0:ce:78:6b:4c:59:
         0b:79:48:4e:8b:78:c8:cd:41:f2:56:28:4f:2a:5d:6c:66:b2:
         2e:1a:70:fb:c0:11:7e:69:3a:6a:6a:a3:4a:f5:8d:24:7c:a4:
         2f:70:e2:e1:89:76:e9:b4:fc:ab:12:ac:2e:94:6a:75:d3:fa:
         be:ba:eb:9e:d8:44:4d:8c:94:c4:a3:04:a5:32:ed:83:08:1f:
         b0:97:1e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:45:58 2024 by rpki-client on console-ams.rpki-client.org