Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/0b8209f0-781b-3505-b708-fdde1fbf3db3.roa
File:                     0b8209f0-781b-3505-b708-fdde1fbf3db3.roa (raw, json)
Hash identifier:          D8K+89RJCHBjeC/iv5XYiyThAccT6yLww5eR5f0B4wY=
Subject key identifier:   60:E8:6C:C0:59:B2:1D:F6:10:FC:76:6F:23:AE:47:86:43:C4:AD:2B
Certificate issuer:       /CN=69ff55bc-4da3-4dc8-9a15-35e5786aabf2
Certificate serial:       010D0C9F4328584620C6A171452C884F1F4D8880
Authority key identifier: 88:E0:2E:A8:96:E6:D9:25:9C:05:46:AB:F8:5E:5E:67:69:7C:37:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/0b8209f0-781b-3505-b708-fdde1fbf3db3.roa
Signing time:             Fri 07 Jun 2024 04:19:06 +0000
ROA not before:           Fri 07 Jun 2024 04:19:06 +0000
ROA not after:            Thu 05 Sep 2024 04:19:06 +0000
asID:                     27485
IP address blocks:        2602:f8c5::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:20:c6:a1:71:45:2c:88:4f:1f:4d:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69ff55bc-4da3-4dc8-9a15-35e5786aabf2
        Validity
            Not Before: Jun  7 04:19:06 2024 GMT
            Not After : Sep  5 04:19:06 2024 GMT
        Subject: CN=dba3e5c3-a650-4f4d-96ea-f696ba153b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ca:52:30:18:33:e2:41:76:e5:86:8d:2a:fb:
                    f7:0f:f1:e0:14:cc:62:43:41:a8:75:0f:bb:5a:63:
                    25:12:bd:2a:74:8b:8a:ff:ef:04:5c:6d:91:87:23:
                    62:61:86:ba:10:47:6b:4e:0c:1a:41:32:14:2d:ca:
                    50:2a:a0:6e:b8:83:63:db:ea:b8:20:c7:27:91:e3:
                    5a:55:7a:9b:b6:13:c7:85:79:ba:b3:15:79:31:a4:
                    63:af:ef:53:c2:19:8a:63:b5:98:0b:54:1a:22:4d:
                    67:a0:2c:0c:f8:03:a1:b1:7c:71:d6:b8:d8:1d:1c:
                    1a:27:3c:fc:bc:5b:fa:e0:8c:be:89:da:6c:2d:b3:
                    2b:0b:a7:79:81:ef:c1:2b:23:80:bc:d2:24:fe:0b:
                    f8:35:92:f7:87:b2:57:83:25:31:e7:a3:56:fe:00:
                    dd:04:3b:73:63:b1:6b:5f:49:be:0f:22:cd:a8:b5:
                    ed:88:62:2a:e5:9d:4c:b6:1f:d0:7d:5d:70:c2:8f:
                    42:13:b9:f0:36:a3:52:4e:04:06:f8:47:e3:36:9b:
                    2b:3b:37:ca:a3:e8:62:74:21:2e:6a:1b:2c:0e:4d:
                    ce:6e:2b:8b:05:d4:0b:89:e5:33:a4:0d:25:ee:4e:
                    9a:d6:c0:02:2d:ac:61:51:7b:38:00:42:ea:c5:ec:
                    41:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E8:6C:C0:59:B2:1D:F6:10:FC:76:6F:23:AE:47:86:43:C4:AD:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/0b8209f0-781b-3505-b708-fdde1fbf3db3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.crl

            X509v3 Authority Key Identifier:
                keyid:88:E0:2E:A8:96:E6:D9:25:9C:05:46:AB:F8:5E:5E:67:69:7C:37:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8c5::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:fa:5a:25:53:97:ac:16:5d:0e:32:b1:ad:ba:51:35:9c:b7:
         d9:39:1c:56:27:36:4e:5a:32:28:ae:cf:67:92:73:6b:82:a3:
         03:44:09:82:9b:47:91:68:55:55:36:19:ae:81:09:b8:91:a7:
         0c:db:da:06:b8:95:6a:b3:b2:f0:90:2b:c4:ba:9c:f1:53:8d:
         22:f7:d9:9e:73:70:68:82:fa:24:e9:52:c5:a6:f9:57:bd:06:
         c2:99:66:bf:9e:ba:56:e8:69:b0:60:95:8b:7f:b5:1f:b5:c0:
         2c:6d:1e:9b:ca:d2:92:6b:ab:54:6e:84:12:1f:fa:5d:51:cf:
         e7:c8:19:81:40:97:f4:31:1b:ee:dd:8e:e8:92:ac:2d:7a:f1:
         c9:f2:7d:08:0a:86:43:29:0f:a3:a0:c3:36:9b:63:3d:69:5c:
         d6:f4:e6:86:8e:e0:59:63:2f:04:b5:ac:73:ad:9a:21:20:6c:
         50:4b:3a:26:36:50:01:81:82:1e:3f:65:1c:33:a1:d1:7a:f2:
         cd:58:a1:37:e2:f1:bc:a6:c1:45:86:c1:7f:b3:89:48:11:ca:
         3e:2e:2f:1b:b7:fc:f6:3b:f5:eb:98:92:a1:21:e7:0e:c7:d3:
         61:46:2a:cf:ec:fb:35:d4:38:e2:c3:79:94:8d:72:e2:42:b0:
         89:4b:87:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:55:41 2024 by rpki-client on console-ams.rpki-client.org