Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/643dea32-ad94-36d9-a6c5-90366af478b2.roa
File:                     643dea32-ad94-36d9-a6c5-90366af478b2.roa (raw, json)
Hash identifier:          IJTjlhnK0WPlI26xFWCEr9ONDozpeMTwoPDyJshMCzs=
Subject key identifier:   6E:6D:9D:4D:EF:D5:6E:A1:12:9B:57:9F:9C:29:A7:28:DF:13:58:7D
Certificate issuer:       /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Certificate serial:       010D0C9F43285845D668FF3DD3FF1D54CEC3BA00
Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/643dea32-ad94-36d9-a6c5-90366af478b2.roa
Signing time:             Sat 11 May 2024 13:00:34 +0000
ROA not before:           Sat 11 May 2024 13:00:34 +0000
ROA not after:            Fri 09 Aug 2024 13:00:34 +0000
asID:                     40249
IP address blocks:        2602:fb78:40::/44 maxlen: 48
                          2602:fb78:30::/44 maxlen: 48
                          2602:fb78:20::/44 maxlen: 48
                          2602:fb78:10::/44 maxlen: 48
                          2602:fb78:60::/44 maxlen: 48
                          2602:fb78:70::/44 maxlen: 48
                          2602:fb78:50::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d6:68:ff:3d:d3:ff:1d:54:ce:c3:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
        Validity
            Not Before: May 11 13:00:34 2024 GMT
            Not After : Aug  9 13:00:34 2024 GMT
        Subject: CN=bf125d32-3d96-4d01-88a9-e69bac07d7f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ea:e5:09:97:7d:8a:5b:67:ed:a3:18:51:00:
                    78:b3:87:07:de:01:bf:ae:c1:99:5d:b7:a5:2f:ea:
                    f8:d3:be:d3:67:e3:03:73:a9:4d:e6:29:30:34:8e:
                    9f:6a:c5:a9:86:d2:1b:91:c8:f6:e2:af:71:c4:eb:
                    33:9c:22:80:d6:da:02:fc:4b:ee:60:12:8c:9e:6c:
                    ad:2a:53:67:28:49:b6:02:ab:e5:62:2f:6e:87:43:
                    ea:e6:6f:72:f3:91:d4:3f:81:31:56:39:47:82:95:
                    66:03:4d:be:d1:c2:92:ec:f9:7e:62:2e:41:a0:e9:
                    fc:fc:28:59:38:32:f8:8f:f4:6f:a9:71:b7:bb:27:
                    9b:83:7f:c6:3b:53:9e:42:11:83:3b:80:5d:69:5f:
                    6e:f1:05:dc:c5:33:ee:c0:bd:55:52:68:90:a3:6b:
                    9c:ef:a8:0b:1a:70:aa:22:78:63:e8:0e:51:e0:a5:
                    d2:15:67:85:b3:b4:89:9c:91:18:22:81:5c:14:91:
                    e8:39:d8:f9:fb:cc:dc:76:ae:37:7c:68:3e:8c:56:
                    47:b9:78:e5:f0:78:10:f8:05:9a:c0:ae:66:63:5e:
                    63:ae:56:02:29:ae:25:f6:d4:71:0b:c4:19:20:dd:
                    a1:56:94:46:d6:b4:c0:06:c7:3c:53:7b:ed:07:14:
                    ec:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6D:9D:4D:EF:D5:6E:A1:12:9B:57:9F:9C:29:A7:28:DF:13:58:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/643dea32-ad94-36d9-a6c5-90366af478b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl

            X509v3 Authority Key Identifier:
                keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb78:10::-2602:fb78:7f:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:bd:e6:da:cf:92:25:20:f2:13:cc:52:2a:79:3e:1e:ab:de:
         94:44:e0:8f:7a:c6:1e:2a:3e:b8:b1:ce:72:42:6c:9d:ca:4a:
         58:80:1b:88:68:3b:bc:1a:2a:3a:86:d8:c9:38:85:eb:9b:c7:
         ed:44:18:c7:0b:13:66:b9:8f:6e:d5:46:10:a8:71:a2:06:ea:
         7d:32:2c:dd:0b:2b:28:47:41:2b:1c:e4:22:61:dd:9b:3b:67:
         da:dd:e7:6d:f3:a1:47:36:83:5e:12:f3:6f:99:2b:aa:40:28:
         a3:2e:5b:02:b1:8e:58:6e:29:31:ce:5d:47:aa:f7:96:3a:30:
         78:50:d5:c7:d7:da:f0:8c:9a:fd:03:34:e3:ae:5f:4b:94:a7:
         27:3a:3e:fb:d6:cf:55:96:7b:ed:d2:8f:36:d4:de:e4:89:b8:
         b2:d4:25:b3:88:93:6e:c1:94:c3:5a:52:30:98:03:8a:fa:57:
         f2:46:0e:c1:70:a6:42:d7:11:11:10:f8:a6:42:5c:6e:4e:43:
         91:3e:1a:1a:cf:7d:5b:f1:6c:c9:6c:bd:42:0c:9b:99:57:67:
         a1:64:32:18:b0:26:22:3f:1e:70:04:8b:49:01:20:91:84:b9:
         49:d0:13:05:f4:0a:42:ae:9e:4b:c0:42:05:cc:c5:d0:ec:b2:
         e9:ec:5c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:10:18 2024 by rpki-client on console-ams.rpki-client.org