Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/1f9b0a21-4e53-3251-bedd-62da810defe6.roa
File:                     1f9b0a21-4e53-3251-bedd-62da810defe6.roa (raw, json)
Hash identifier:          83Qr73C7VmKUJhOTtk0O88pimxCaS/qc7otferxKB8Q=
Subject key identifier:   A3:B9:87:27:02:D9:1C:08:4A:06:96:60:F5:8E:3E:B1:D8:78:34:F0
Certificate issuer:       /CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7
Certificate serial:       010D0C9F43285845C5A8F180E73811639C603E00
Authority key identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/1f9b0a21-4e53-3251-bedd-62da810defe6.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     398419
IP address blocks:        2602:fb82::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:f1:80:e7:38:11:63:9c:60:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=f6980c1d-6741-48c4-b845-b02624613d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:be:04:3a:4a:c3:9d:5e:48:e8:1e:9e:d5:4c:
                    42:cb:99:bb:7c:a6:51:81:20:58:d2:dc:e2:fb:a4:
                    cf:a2:c0:f0:d5:e3:d3:1a:3a:a8:05:b5:a0:7c:35:
                    3a:c1:9a:1a:87:d6:17:7b:0d:52:4e:67:3e:b7:1f:
                    ea:d5:1c:32:83:c5:9b:81:76:b8:d8:2a:bd:54:b6:
                    55:83:06:5a:28:db:c0:f4:9d:49:6a:d4:37:20:da:
                    6c:00:94:53:d4:5d:0c:ef:8f:db:c6:01:43:dd:25:
                    6b:72:1c:5d:d1:fd:27:7b:2d:f1:93:fa:f1:a3:14:
                    64:e8:fb:86:41:78:2f:54:28:e1:5c:1a:72:a2:91:
                    42:31:7d:0d:4c:11:af:8c:d0:e3:10:51:23:45:7c:
                    88:ce:d9:e8:71:4c:30:8c:01:25:da:1d:51:11:d7:
                    ee:42:f3:5b:db:68:70:a8:3e:54:26:6e:6b:c5:56:
                    69:b2:8d:60:96:50:6d:3a:de:67:ca:6a:52:da:58:
                    29:e2:ee:5f:46:ce:b5:a4:0b:29:b5:e4:f4:6c:70:
                    73:c3:bf:44:47:91:75:6e:c9:b5:dc:88:29:ad:53:
                    f6:ee:6c:05:d6:8e:f4:88:63:b4:f7:de:ed:31:e6:
                    91:77:e6:d2:21:14:d1:3c:5e:3b:8c:b5:ea:18:0a:
                    64:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B9:87:27:02:D9:1C:08:4A:06:96:60:F5:8E:3E:B1:D8:78:34:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/1f9b0a21-4e53-3251-bedd-62da810defe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl

            X509v3 Authority Key Identifier:
                keyid:41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb82::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:11:02:67:55:f4:fd:11:66:d9:a8:9e:1a:6e:52:06:3e:a1:
         bb:f7:9f:94:e4:f4:25:99:27:1c:28:0c:54:6a:76:01:c2:76:
         fa:d8:dc:a1:cb:66:c8:12:ed:24:8e:35:3b:2e:fc:8c:80:ca:
         2d:7b:13:58:09:c0:da:91:72:73:da:95:ec:34:8d:a0:41:f6:
         9e:c7:f7:61:a7:f7:40:b4:ca:c7:fa:d1:8c:0a:ec:91:ef:21:
         7b:de:83:ea:c9:9d:2c:ff:5b:58:12:b6:fd:c9:48:3c:a4:95:
         54:cc:38:83:b8:1f:19:a3:b5:48:05:21:ff:74:fd:3f:23:90:
         b2:46:3a:2e:8c:b9:5c:81:e7:fe:86:b2:0d:f6:a3:5d:d9:f7:
         87:96:ab:c3:b2:15:03:41:e5:6e:71:3b:f1:f1:da:1f:1c:0f:
         6e:26:ac:fb:cd:a1:49:d8:14:11:0e:5a:5c:28:55:8b:29:63:
         2d:6b:59:2f:f6:7d:b0:7e:a7:05:c8:9d:54:75:eb:40:79:fe:
         91:ab:c7:d9:91:e0:1d:21:4f:e3:d8:28:95:c2:c6:67:05:49:
         42:02:b1:3d:34:89:fc:0e:de:e8:ea:1b:f9:25:7c:19:3b:8b:
         1a:68:6c:3f:5e:d0:38:4a:ec:94:e2:d0:6a:7b:b0:48:7d:90:
         de:94:c0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 01:54:24 2024 by rpki-client on console-fra.rpki-client.org