Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/26125667-09fc-3849-ad03-b3300d2580a2.roa
File:                     26125667-09fc-3849-ad03-b3300d2580a2.roa (raw, json)
Hash identifier:          cg3O/LwgGVXXtJ3iQoWPvfmZAvjaFzdVL/jWDjmposM=
Subject key identifier:   6A:FB:BD:57:82:3F:CE:DD:9E:34:D1:90:0D:34:5B:5C:97:6A:BF:37
Certificate issuer:       /CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
Certificate serial:       010D0C9F4328584579B44E8925C6ED4FC479A5C8
Authority key identifier: 8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/26125667-09fc-3849-ad03-b3300d2580a2.roa
Signing time:             Mon 08 Apr 2024 08:02:11 +0000
ROA not before:           Mon 08 Apr 2024 08:02:11 +0000
ROA not after:            Sun 07 Jul 2024 08:02:11 +0000
asID:                     30690
IP address blocks:        2602:f99b:3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:79:b4:4e:89:25:c6:ed:4f:c4:79:a5:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
        Validity
            Not Before: Apr  8 08:02:11 2024 GMT
            Not After : Jul  7 08:02:11 2024 GMT
        Subject: CN=60454720-ac98-43f8-bb21-d61c3d6c3567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:93:5c:6b:7f:64:60:e5:02:19:57:9d:a7:90:
                    5d:9d:96:26:8c:e8:79:1a:ac:41:98:7f:75:af:06:
                    32:5e:46:1e:e6:3b:24:6b:95:60:49:1a:f5:17:c5:
                    05:eb:05:23:87:e5:f0:f2:c0:dc:a5:71:d4:02:5b:
                    4a:ca:84:12:48:98:59:65:c8:8e:7f:51:1e:5d:7c:
                    0f:07:60:be:0a:d0:d6:4a:10:48:79:8f:28:bf:ac:
                    53:4d:98:3f:35:36:99:df:29:bc:a6:88:9f:a9:99:
                    b9:6a:aa:29:1e:41:b8:a8:8d:50:50:08:a1:67:9c:
                    da:5b:90:f6:21:00:03:dd:ab:f4:a5:65:a7:d2:07:
                    3a:e2:49:bc:97:b6:3f:a1:aa:7e:bc:82:c1:73:b7:
                    99:97:31:88:a5:95:02:f9:f7:57:9f:c3:8b:f7:68:
                    00:5e:30:f7:b2:25:df:38:c2:ab:e5:e2:a1:e8:b3:
                    61:c8:86:47:9f:6d:d2:a7:20:8e:58:c4:a8:25:1d:
                    d7:b5:7a:4c:19:4b:3e:a1:a5:77:41:e1:d5:bc:45:
                    ad:4f:56:17:c7:37:1c:4e:32:e2:ca:ff:66:d8:8d:
                    4e:02:44:c8:36:cd:93:72:93:bf:c8:ef:96:38:c7:
                    71:4b:5f:27:e6:2c:79:3c:a4:c0:60:ae:3b:70:fb:
                    10:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:FB:BD:57:82:3F:CE:DD:9E:34:D1:90:0D:34:5B:5C:97:6A:BF:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/26125667-09fc-3849-ad03-b3300d2580a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl

            X509v3 Authority Key Identifier:
                keyid:8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f99b:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:7c:ff:b0:f3:06:6a:2f:d7:85:64:66:c4:c9:52:25:d9:8a:
         eb:2a:c2:42:39:c8:e0:b1:74:9d:29:11:0b:25:af:ca:7b:45:
         6a:24:e6:94:99:31:d4:54:91:ed:22:46:9d:30:f7:8b:5b:80:
         2b:b4:3f:35:22:06:e8:10:e9:7a:37:a3:1a:4c:f8:8b:df:5f:
         40:f3:b4:6b:3a:ec:50:bf:11:de:d9:5a:fa:8e:d7:03:16:76:
         a0:f9:02:42:2a:33:06:d8:47:75:15:92:39:de:09:7f:ad:9f:
         87:5c:62:04:27:65:a8:81:e2:d4:73:6e:45:3e:e3:f1:24:55:
         67:b4:52:2d:ab:45:2f:86:4e:f5:53:5d:aa:40:ed:ce:c3:7e:
         e5:01:f5:7e:e2:8f:df:eb:14:5a:75:81:1e:3f:48:f5:ad:f5:
         12:b3:b6:60:ba:96:62:3f:0c:ea:a8:a1:ff:4c:09:d5:ba:8e:
         4b:7f:1f:bf:a2:2a:98:a1:7d:bf:17:72:a6:41:65:de:3b:4c:
         0d:82:a9:0d:20:b8:34:ad:b8:60:fa:a2:cf:a3:54:fd:75:c9:
         44:c6:0b:c5:d5:71:51:55:0e:20:32:8d:96:fd:ec:e7:33:44:
         2f:ed:cd:8c:4e:e0:26:88:82:b3:2f:0c:19:78:d5:30:7b:1a:
         77:96:03:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 01:32:58 2024 by rpki-client on console-fra.rpki-client.org