Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/d682a08c-ed26-3192-a295-d2293c2b5724.roa
File:                     d682a08c-ed26-3192-a295-d2293c2b5724.roa (raw, json)
Hash identifier:          bgLHIkDnB7ESXhX1avK13HM/HJSa9SwcLwXkzN67jRY=
Subject key identifier:   FD:EB:A6:07:83:02:BC:85:AF:E6:E2:AC:FE:A0:F4:5F:C4:6C:88:C2
Certificate issuer:       /CN=c7990a1d-1dec-4721-b9fc-a68ef45cb3c6
Certificate serial:       010D0C9F43285845F94E766D0F1E2453C9EB8420
Authority key identifier: DD:02:37:57:A2:47:56:D3:27:16:ED:37:0E:C5:18:21:7E:F7:0E:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/d682a08c-ed26-3192-a295-d2293c2b5724.roa
Signing time:             Fri 24 May 2024 01:00:25 +0000
ROA not before:           Fri 24 May 2024 01:00:25 +0000
ROA not after:            Thu 22 Aug 2024 01:00:25 +0000
asID:                     212895
IP address blocks:        2602:f95b:3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f9:4e:76:6d:0f:1e:24:53:c9:eb:84:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7990a1d-1dec-4721-b9fc-a68ef45cb3c6
        Validity
            Not Before: May 24 01:00:25 2024 GMT
            Not After : Aug 22 01:00:25 2024 GMT
        Subject: CN=7ead0bdb-2198-4133-8f6b-cdf854e714c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bf:cf:b0:37:7e:38:0f:c7:67:59:be:72:6d:
                    82:a2:1d:47:b6:c2:eb:b2:83:72:76:b3:63:33:99:
                    d7:95:9b:6c:e3:e1:84:1d:83:96:f7:b8:1a:a6:87:
                    9c:bc:ad:7f:0b:bc:ce:2a:04:91:b5:72:1d:e5:fc:
                    67:de:c7:c9:6b:5e:26:ac:fc:c1:17:c5:46:a4:0c:
                    8e:6e:b1:82:7a:60:3f:fa:b0:bd:30:44:f9:9d:8b:
                    c6:55:90:2b:0a:47:98:48:24:3d:60:43:66:ec:06:
                    d9:b3:fc:ee:29:a6:95:af:8c:19:02:12:49:9a:24:
                    0e:16:c7:f0:c6:9c:cf:0d:c9:2c:2b:c5:ee:45:24:
                    24:02:7b:c4:25:d0:0b:05:1e:f3:04:97:c2:02:f9:
                    e4:cc:6c:58:44:d6:f1:8d:73:d2:be:15:0e:a3:7f:
                    99:b2:88:09:37:26:c7:01:91:7e:1e:6e:da:24:b9:
                    25:6c:5f:7b:c3:cf:24:06:fc:e6:4f:75:e3:99:64:
                    8b:ad:9c:af:58:cd:ad:b8:bf:29:e1:a5:fb:af:5f:
                    00:a6:d2:14:2d:aa:ec:66:2a:62:25:81:42:9a:7d:
                    80:6d:10:37:c7:e6:8a:8c:88:ac:2e:d7:60:83:c7:
                    e7:e7:68:95:9a:b8:48:c3:4c:28:24:84:07:71:75:
                    fb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EB:A6:07:83:02:BC:85:AF:E6:E2:AC:FE:A0:F4:5F:C4:6C:88:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/d682a08c-ed26-3192-a295-d2293c2b5724.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.crl

            X509v3 Authority Key Identifier:
                keyid:DD:02:37:57:A2:47:56:D3:27:16:ED:37:0E:C5:18:21:7E:F7:0E:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f95b:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:d2:81:73:9b:81:3f:67:b3:cc:f6:78:96:26:cf:c2:1f:f1:
         19:d4:9b:36:e3:9e:d3:b1:75:52:df:b2:12:d4:c0:e3:55:de:
         ee:3f:5f:9e:8e:12:59:83:b6:9f:7c:75:5a:de:41:b4:3c:8b:
         f3:82:1d:81:5d:a3:ae:fd:2c:f6:c0:99:ab:50:a1:84:3f:8b:
         b6:e1:60:d5:32:1d:da:18:d4:ce:11:52:f7:b0:b4:22:24:9d:
         76:24:a5:48:9e:e9:45:df:71:4e:96:97:8f:d2:4b:e0:e0:1a:
         54:75:3c:b7:af:7c:af:d2:2b:30:6a:9f:67:ab:ea:7e:ab:db:
         97:a4:b0:9f:66:61:76:b6:10:82:1f:41:32:8e:09:51:51:52:
         59:46:e3:10:9d:b2:f0:af:8d:a7:17:9f:39:7d:f9:78:63:e1:
         3b:1f:54:28:ec:78:64:a8:59:da:40:6e:1f:60:fd:68:3f:09:
         78:4b:09:29:96:f3:80:d5:b5:d8:01:e8:40:4e:cf:7a:a4:c1:
         fe:48:d0:42:eb:ec:b2:51:8c:6f:cb:01:3f:9f:8a:05:17:20:
         9c:cc:85:f5:a2:93:ef:31:75:20:96:1f:cc:72:25:4e:72:70:
         dc:6e:0b:60:49:98:96:93:0d:34:05:56:12:1c:1f:c1:17:b4:
         c2:8e:6a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:25:06 2024 by rpki-client on console-ams.rpki-client.org