Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/62ba1b80-1750-30cc-ae03-0ad2e1c4fff3.roa
File:                     62ba1b80-1750-30cc-ae03-0ad2e1c4fff3.roa (raw, json)
Hash identifier:          0pkoykUaILmZanMnzoMMnarVE7X1kLL7rDotzsBe6mg=
Subject key identifier:   C7:76:D7:CC:5A:59:ED:04:94:F2:5C:A4:37:B8:AD:19:6E:1B:46:56
Certificate issuer:       /CN=ef1239e6-3ae7-43be-966b-2f5b9671c29d
Certificate serial:       010D0C9F43285846126EA28BA876C149F8D9A900
Authority key identifier: FC:BD:1B:B2:8A:59:ED:B6:BB:54:9D:83:C9:CC:BC:AC:43:B7:B4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/62ba1b80-1750-30cc-ae03-0ad2e1c4fff3.roa
Signing time:             Sun 02 Jun 2024 01:00:26 +0000
ROA not before:           Sun 02 Jun 2024 01:00:26 +0000
ROA not after:            Sat 31 Aug 2024 01:00:26 +0000
asID:                     399525
IP address blocks:        2602:fc9e::/40 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:12:6e:a2:8b:a8:76:c1:49:f8:d9:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef1239e6-3ae7-43be-966b-2f5b9671c29d
        Validity
            Not Before: Jun  2 01:00:26 2024 GMT
            Not After : Aug 31 01:00:26 2024 GMT
        Subject: CN=51527eea-e24f-42d7-a322-13e090336f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f7:50:be:93:40:3f:78:f0:b6:21:6c:cc:05:
                    08:c1:95:a3:1c:f7:a5:3b:b7:35:7d:05:0e:be:73:
                    a3:d4:b1:b1:1c:91:4d:b6:ac:68:d5:61:15:23:42:
                    b9:af:00:98:0e:8d:0b:13:4d:35:04:87:6e:65:02:
                    04:aa:cc:08:6a:cf:36:9a:10:04:0c:87:8a:aa:b5:
                    1e:83:11:33:ee:d8:da:05:09:a0:99:24:6a:c4:cc:
                    fe:66:3b:29:ea:d0:af:f8:25:22:61:b5:c2:95:3b:
                    b1:45:e2:c9:3c:11:92:e0:7b:79:8b:e9:b3:70:37:
                    e4:a3:68:31:1c:86:04:51:71:82:a4:9e:39:01:f1:
                    70:99:95:ae:0b:55:9f:bb:18:df:20:48:de:9d:87:
                    c5:54:55:ba:6d:c5:91:28:39:69:dd:a9:f3:b8:5e:
                    cf:b0:d5:fe:56:9a:c0:c1:40:be:aa:f0:f4:cf:64:
                    8a:f9:80:50:6b:6f:87:99:8a:93:a0:c5:d7:44:19:
                    4c:55:63:64:fb:41:bf:c8:d2:97:e8:c2:65:03:8e:
                    be:cd:bd:d4:0e:1e:8f:94:00:ea:9a:60:2d:bf:9e:
                    b3:46:b4:f0:39:e5:a6:dd:fe:4c:d0:ee:f4:ec:b6:
                    38:b5:78:dc:f2:0f:42:ac:eb:19:24:a7:23:ea:27:
                    82:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:76:D7:CC:5A:59:ED:04:94:F2:5C:A4:37:B8:AD:19:6E:1B:46:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/62ba1b80-1750-30cc-ae03-0ad2e1c4fff3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.crl

            X509v3 Authority Key Identifier:
                keyid:FC:BD:1B:B2:8A:59:ED:B6:BB:54:9D:83:C9:CC:BC:AC:43:B7:B4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc9e::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:e0:fa:96:e7:c2:78:f2:ce:c5:93:37:93:0a:91:11:72:25:
         f3:7c:f7:7a:f4:39:fe:61:f8:29:b2:33:5d:9a:6c:a8:c6:56:
         65:17:c8:11:75:09:ef:a2:1f:da:8b:7b:8a:d8:47:44:5c:00:
         9f:b4:8d:af:c1:9a:99:a9:0a:5c:94:93:37:dd:47:9e:96:72:
         6d:35:b2:5a:07:bd:8a:44:33:eb:66:7d:ec:9f:fd:66:92:3e:
         c3:6f:45:a6:d0:c2:70:0a:c8:9e:96:fc:24:11:56:92:f3:a6:
         e1:27:4a:b0:cd:8c:64:72:90:19:5e:f6:5c:72:94:f0:cf:18:
         89:eb:da:4d:22:7e:96:39:a8:dd:bd:12:3e:88:a4:b0:76:46:
         9c:27:b8:6c:79:ac:4b:2e:7f:67:92:f8:21:d2:a2:d8:60:3f:
         8e:4a:0c:03:e2:a3:5f:f2:9c:72:6c:1c:77:61:53:75:f1:ba:
         55:f6:b9:06:03:f3:b7:75:aa:b2:3b:5b:ee:6e:83:50:0a:8d:
         44:76:93:b5:25:34:f7:33:b1:70:b2:24:6a:b3:ab:71:73:c6:
         27:0a:89:fe:34:d4:56:eb:80:83:51:78:11:16:84:53:4f:a8:
         ad:2c:50:86:5d:f2:cb:75:b6:91:6d:64:73:07:21:28:33:d3:
         9d:09:45:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:25:07 2024 by rpki-client on console-ams.rpki-client.org