Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/fad125e5-060b-3c92-a785-7f6a4c6c4c5c.roa
File:                     fad125e5-060b-3c92-a785-7f6a4c6c4c5c.roa (raw, json)
Hash identifier:          e/njaK1/J96mhJSh8AnulFGAZ8GuPVRORw6ygkpZ4Ek=
Subject key identifier:   50:A2:76:FD:A8:25:92:C3:78:81:3E:C1:F9:73:EC:1C:55:B7:AA:DE
Certificate issuer:       /CN=5599678a-c6a8-4921-aa0a-62a64b2f1631
Certificate serial:       010D0C9F43285845B5F98306346A2F7D094FAD80
Authority key identifier: A7:57:A4:B1:32:85:CF:43:2E:0E:54:6F:2F:1A:B3:97:5E:12:40:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/fad125e5-060b-3c92-a785-7f6a4c6c4c5c.roa
Signing time:             Mon 29 Apr 2024 22:10:07 +0000
ROA not before:           Mon 29 Apr 2024 22:10:07 +0000
ROA not after:            Sun 28 Jul 2024 22:10:07 +0000
asID:                     398437
IP address blocks:        2602:fd39::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/5599678a-c6a8-4921-aa0a-62a64b2f1631.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/5599678a-c6a8-4921-aa0a-62a64b2f1631.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b5:f9:83:06:34:6a:2f:7d:09:4f:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5599678a-c6a8-4921-aa0a-62a64b2f1631
        Validity
            Not Before: Apr 29 22:10:07 2024 GMT
            Not After : Jul 28 22:10:07 2024 GMT
        Subject: CN=189472f1-a0ed-495b-94bd-04624bcb1124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:15:b1:29:94:85:55:99:8b:83:27:2a:26:a6:
                    a0:62:65:38:70:07:4b:86:62:49:42:59:1b:c1:48:
                    5c:c7:97:91:b5:27:6f:f3:10:74:1f:f1:0c:44:f3:
                    ec:37:27:e4:52:15:f5:30:66:13:ac:9d:2b:24:3f:
                    57:88:c3:3e:eb:3f:15:c7:db:4c:bf:16:26:97:ac:
                    af:29:a6:b2:c4:b2:04:8f:ec:d4:70:ba:7f:7c:f9:
                    4d:e5:81:63:06:76:6e:f0:79:a5:ea:95:3f:49:d1:
                    71:8a:d9:cd:03:ee:49:e5:f1:c5:d0:88:c7:99:a6:
                    53:b1:67:47:f0:42:04:e6:93:8f:ef:aa:96:bb:ab:
                    14:2b:85:d5:2a:57:8d:73:cc:0d:21:a7:a4:f1:6e:
                    bf:64:7a:47:ae:7c:3c:13:7f:0b:e8:8a:9b:53:b3:
                    91:99:f1:18:d8:fb:16:52:9f:4a:5d:83:ba:63:0e:
                    14:56:97:a5:a9:ce:92:33:ce:7c:f7:4e:79:98:df:
                    7a:79:32:f5:ad:8a:6a:cb:96:af:0e:0a:c3:e3:c8:
                    45:4d:2b:7d:b3:6b:c2:db:32:93:6b:c5:cd:02:88:
                    f8:ba:d2:d9:6a:10:62:ab:d1:21:de:14:c4:e8:37:
                    3c:f7:9d:cb:70:c6:4e:b3:04:86:50:8c:16:72:50:
                    15:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A2:76:FD:A8:25:92:C3:78:81:3E:C1:F9:73:EC:1C:55:B7:AA:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/fad125e5-060b-3c92-a785-7f6a4c6c4c5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/5599678a-c6a8-4921-aa0a-62a64b2f1631.crl

            X509v3 Authority Key Identifier:
                keyid:A7:57:A4:B1:32:85:CF:43:2E:0E:54:6F:2F:1A:B3:97:5E:12:40:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd39::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:78:ba:37:23:1e:9d:ea:9e:72:57:55:85:3a:08:bc:61:d2:
         2f:ff:c8:dc:49:09:b9:45:20:d0:86:0b:8f:9a:dc:9c:a3:ff:
         cf:6d:fa:5d:d8:8f:b3:42:68:91:7c:e3:a7:5c:39:39:9f:14:
         12:e7:e5:7c:a9:c7:e1:74:32:f7:23:08:a7:90:ba:e9:25:d2:
         b9:fa:bd:cb:64:67:c5:71:c8:8f:dd:47:9d:03:7b:ef:3f:f8:
         06:f8:60:48:8e:2f:a8:68:ef:77:96:27:d2:b4:2d:27:e0:6f:
         bb:91:9e:d8:63:ac:d9:1b:e1:9b:9a:67:40:1f:d2:52:4c:cc:
         12:19:f9:9d:cb:32:cd:3d:d5:6c:2e:73:d0:56:ff:ee:00:f4:
         d7:dd:0c:0c:3c:db:29:32:4a:92:8c:b5:ec:59:18:af:31:12:
         df:63:15:f0:1f:65:5d:02:6d:ba:27:f8:73:e6:73:6e:d3:a2:
         1c:2a:e1:e6:b6:32:32:dd:23:8a:05:6a:76:74:e0:5e:56:d7:
         50:c4:a6:88:31:32:41:8b:27:84:ee:91:07:e5:16:7e:31:9a:
         a5:ce:ce:b0:64:60:1f:d7:69:56:fa:a7:46:5e:0a:64:e8:8f:
         6f:68:cb:22:85:b2:12:ac:45:82:4f:37:99:38:25:fa:1d:39:
         84:bd:a5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:42:59 2024 by rpki-client on console-fra.rpki-client.org