Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/f30c9c21-4317-3091-8c73-74cf7dd4b318.roa
File:                     f30c9c21-4317-3091-8c73-74cf7dd4b318.roa (raw, json)
Hash identifier:          XV2BIZYxicwnnTv+Uqw4AMc3QFubRcdRIsG8D4gwTUQ=
Subject key identifier:   C5:6E:82:82:C8:B2:AB:D2:EB:59:CF:6F:FC:71:98:4C:49:CD:9A:B0
Certificate issuer:       /CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7
Certificate serial:       010D0C9F43285845C5A8F198C51B28EFDA15F440
Authority key identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/f30c9c21-4317-3091-8c73-74cf7dd4b318.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     400679
IP address blocks:        2602:fb82::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:f1:98:c5:1b:28:ef:da:15:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=18f8ae91-5151-48c6-a50c-00fe437c81fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:77:57:87:1d:2c:83:13:98:b6:5a:60:cf:96:
                    b4:30:31:53:dc:58:32:6d:de:70:33:43:00:ba:77:
                    fc:5a:3e:d5:20:89:7f:14:a4:3a:d3:b9:15:27:08:
                    d8:d9:5a:a9:c5:76:34:db:a6:cb:c3:ef:47:ae:42:
                    90:65:bf:58:62:59:a8:e3:1a:a5:c4:71:e4:1c:ea:
                    4a:5d:56:d3:87:92:57:e1:11:27:52:63:a2:fa:0e:
                    b8:f3:9b:9b:f3:79:86:f0:e5:8e:8d:f2:af:ae:4e:
                    71:8e:90:5c:e4:88:65:e5:ad:7f:ae:44:a7:51:4d:
                    20:e4:45:f6:37:63:01:bd:98:ac:f0:37:e5:e8:07:
                    70:6e:b1:c0:d1:76:e1:c1:0d:a4:0d:23:63:b2:96:
                    13:b9:df:28:a2:af:af:0e:53:f5:cf:1d:bc:ac:98:
                    8f:63:46:3f:fa:df:ac:56:2a:43:cd:cf:4a:64:5f:
                    5f:35:f8:00:db:cf:e6:9a:9e:59:b0:4d:6b:f0:4a:
                    14:f8:ff:ae:92:25:89:1f:f3:1d:2e:fc:38:18:4a:
                    fb:8d:64:11:36:7d:53:88:fa:ba:f6:d2:26:3e:93:
                    93:50:55:59:d4:88:25:32:ea:cf:34:57:e5:b7:fc:
                    ce:b4:23:e2:13:37:9f:ac:86:04:43:a9:33:5a:fa:
                    34:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6E:82:82:C8:B2:AB:D2:EB:59:CF:6F:FC:71:98:4C:49:CD:9A:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/f30c9c21-4317-3091-8c73-74cf7dd4b318.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl

            X509v3 Authority Key Identifier:
                keyid:41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb82::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:40:f8:61:4d:c1:61:e6:27:9c:5f:3a:0e:7b:12:94:54:7a:
         65:ec:06:43:b6:29:cb:55:2f:30:65:20:53:4d:30:8b:56:94:
         5a:be:55:f2:70:af:5d:d0:62:76:45:68:f0:c4:f1:2c:9a:e5:
         5d:ea:d6:0c:36:e6:1d:49:77:13:2f:6b:6f:ff:d8:81:9a:fa:
         22:f3:c3:40:49:7e:7c:b5:01:2c:87:ad:d3:a9:11:20:82:a9:
         a9:eb:f0:95:ce:82:de:b1:49:f5:e8:57:09:0e:b3:77:08:9b:
         93:f9:ca:12:31:49:9b:4a:61:46:aa:72:43:9e:aa:36:56:fb:
         f7:db:98:71:43:62:b5:92:2d:b4:04:5f:b1:ba:f0:65:17:a0:
         9d:90:b8:9c:7e:20:15:ed:af:6e:69:f2:08:bd:37:8e:61:dc:
         d1:41:58:c8:f9:57:ee:e3:bf:0d:ad:56:af:6f:ed:6e:82:97:
         a6:86:0c:b7:70:2f:ec:9e:3e:cc:60:e3:5b:ba:49:c9:3a:e6:
         f2:de:b1:85:bf:b5:b6:b0:d0:f7:3c:39:14:eb:0c:87:94:b2:
         f5:df:cf:ea:2d:26:0e:7f:eb:9d:a8:69:4e:4a:35:79:02:04:
         80:e3:a9:33:3e:ac:a1:28:b1:45:10:65:9f:a6:a4:67:41:20:
         e7:50:c2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 15:52:00 2024 by rpki-client on console-fra.rpki-client.org