Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/43d41a34-62e7-3694-95c2-94d2452f5f65.roa
File:                     43d41a34-62e7-3694-95c2-94d2452f5f65.roa (raw, json)
Hash identifier:          RuSS0JG6Ckj8lT28QksAJ9IMNKr0aQFGpuQ7J8Dhgm8=
Subject key identifier:   A1:DC:4E:E9:AD:93:EA:46:DC:50:89:68:5D:7C:5D:EF:5F:4F:56:90
Certificate issuer:       /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial:       010D0C9F43285846055299A4AF72A89D423AF040
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/43d41a34-62e7-3694-95c2-94d2452f5f65.roa
Signing time:             Tue 28 May 2024 08:18:29 +0000
ROA not before:           Tue 28 May 2024 08:18:29 +0000
ROA not after:            Mon 26 Aug 2024 08:18:29 +0000
asID:                     401009
IP address blocks:        2602:f919::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:05:52:99:a4:af:72:a8:9d:42:3a:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
        Validity
            Not Before: May 28 08:18:29 2024 GMT
            Not After : Aug 26 08:18:29 2024 GMT
        Subject: CN=e1c2fb2d-82b1-498c-b524-c69933890702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:56:a8:39:b8:66:32:04:5f:85:60:bd:3a:29:
                    22:d6:80:86:4b:f7:4b:ab:65:be:23:48:0f:3e:e7:
                    c7:ed:37:f1:7a:94:11:78:69:82:f0:48:5a:ac:61:
                    ff:93:99:d3:f5:8b:80:bd:e1:47:2b:e4:5a:1e:3a:
                    4f:16:56:a5:44:68:08:b6:fe:28:dc:49:2a:05:54:
                    1d:33:45:83:3f:60:5d:3e:e3:65:24:d6:a5:b4:f6:
                    47:56:03:70:d8:a7:b4:c9:59:28:0a:48:7b:6d:a2:
                    bf:2d:e7:29:85:d7:3e:35:b9:84:6a:ae:a2:10:d3:
                    1f:ab:a9:0d:dd:3d:8a:af:83:7b:92:08:fb:fc:81:
                    8d:ba:4a:f5:7f:a9:b3:73:d7:6e:c4:5a:64:19:13:
                    51:ea:b0:60:27:03:c5:4a:19:24:de:3c:7a:78:fa:
                    81:9f:fc:65:f8:b2:ab:ef:df:f7:96:6e:28:89:c8:
                    63:94:fd:c7:58:52:cd:b2:95:12:b3:e3:d2:ed:65:
                    4f:0a:64:ec:e4:88:a1:06:a3:d7:23:b0:ff:6f:d9:
                    7d:11:bc:ef:bf:24:43:b8:06:cc:a5:28:3f:20:63:
                    58:af:0c:14:e7:d2:4b:eb:36:93:82:f8:07:1b:06:
                    a9:ad:22:1e:cf:32:a2:f1:2f:65:1f:10:bc:9f:99:
                    d8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DC:4E:E9:AD:93:EA:46:DC:50:89:68:5D:7C:5D:EF:5F:4F:56:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/43d41a34-62e7-3694-95c2-94d2452f5f65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl

            X509v3 Authority Key Identifier:
                keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f919::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:08:c8:97:22:ae:22:1f:68:b7:ad:14:d8:76:eb:ee:a4:31:
         f5:e8:96:45:48:45:7c:c8:11:e6:50:ec:f1:56:09:0b:05:da:
         f8:20:4e:e2:84:1d:d7:16:53:88:9c:70:ec:d3:ca:a8:16:66:
         e3:a4:06:92:73:cb:8e:83:8f:5a:99:0d:30:83:89:a8:ee:16:
         de:1f:a4:c4:af:e9:07:9c:11:4a:85:62:2a:4f:fd:34:17:c5:
         d2:f3:7b:25:39:41:3b:53:e6:96:ad:bb:7a:81:95:43:8f:12:
         94:f4:a7:98:d5:b0:30:26:da:e6:32:dd:f1:c1:08:06:bf:99:
         0f:65:d1:65:3c:a6:8d:3c:79:ef:63:91:79:7a:6c:fa:73:92:
         f5:49:5c:5e:a7:9c:23:b5:44:54:22:f6:ff:97:ca:7f:d9:cb:
         92:24:71:a7:17:c5:39:8c:8d:c2:12:b0:e5:1d:52:92:20:f5:
         67:86:c3:eb:a2:f1:1d:1c:60:bc:33:90:4d:5b:13:a3:16:fc:
         0f:43:a4:21:d1:c8:da:c7:6f:4d:50:11:2d:9c:7b:a2:52:0b:
         56:e3:e0:53:53:cc:51:0c:7a:f3:70:7d:41:0b:12:78:12:ed:
         fb:f5:7c:00:3b:4a:ac:e2:b1:bc:bd:e8:68:df:0d:91:f7:ee:
         17:dd:50:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:36:55 2024 by rpki-client on console-fra.rpki-client.org