Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1/047e238a-b18f-3e51-b379-a0b66b8fc7ca.roa
File:                     047e238a-b18f-3e51-b379-a0b66b8fc7ca.roa (raw, json)
Hash identifier:          pixNw5ClevhiNNlD/V2Mh1nc4l1doBZMkB6YZWMANhk=
Subject key identifier:   A7:2C:8A:29:61:BD:03:EE:57:8E:24:BE:9C:80:9E:B8:89:51:8F:24
Certificate issuer:       /CN=725a4aca-8e03-4420-8745-329c8962b4d1
Certificate serial:       010D0C9F4328584620344F025552F7F795EC0380
Authority key identifier: 49:6F:54:A1:0B:DB:44:EE:36:B9:B9:6D:A2:13:78:5C:E8:68:4B:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1/047e238a-b18f-3e51-b379-a0b66b8fc7ca.roa
Signing time:             Thu 06 Jun 2024 23:24:16 +0000
ROA not before:           Thu 06 Jun 2024 23:24:16 +0000
ROA not after:            Wed 04 Sep 2024 23:24:16 +0000
asID:                     8075
IP address blocks:        2602:f9cf::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1/725a4aca-8e03-4420-8745-329c8962b4d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1/725a4aca-8e03-4420-8745-329c8962b4d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:20:34:4f:02:55:52:f7:f7:95:ec:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725a4aca-8e03-4420-8745-329c8962b4d1
        Validity
            Not Before: Jun  6 23:24:16 2024 GMT
            Not After : Sep  4 23:24:16 2024 GMT
        Subject: CN=ff534589-9a82-4e96-9abe-27f3d9881f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:94:10:38:63:02:59:b4:09:db:7e:aa:e4:cd:
                    2a:d4:d2:3e:4a:45:d0:48:3b:e3:6b:cf:47:63:9b:
                    85:69:32:a9:35:fe:6d:89:f9:18:82:dd:6b:72:38:
                    78:35:3d:ad:12:ce:26:e8:8c:05:4f:5e:47:78:86:
                    a7:17:08:f0:c0:fe:aa:53:e0:53:9c:9d:13:83:4e:
                    a9:ce:55:39:6d:76:98:97:9c:c0:ee:de:c4:af:2b:
                    9c:fe:91:46:f6:0a:1e:5a:6a:b2:88:d4:85:14:62:
                    66:e0:ac:7a:d4:91:d0:b1:a2:b3:71:e3:4c:df:a2:
                    12:12:3c:a6:56:9f:c5:a8:5c:fa:a4:cf:4e:43:ef:
                    f7:05:58:9a:ae:5e:79:be:b6:99:56:ee:93:dc:a0:
                    0e:18:32:70:38:f3:0a:c0:a3:31:7b:ea:e3:f2:fd:
                    9e:e1:96:39:30:87:db:96:68:b2:40:74:45:11:53:
                    e6:0c:9a:a5:af:f0:64:54:ed:28:16:78:20:06:ea:
                    ab:1f:f9:8a:2f:45:c5:00:cd:2e:6e:8d:49:e6:69:
                    f5:d4:45:49:59:e6:0a:83:48:ba:02:60:1c:c1:2c:
                    fa:e6:95:24:a7:39:a2:15:ab:30:8e:a1:fa:05:33:
                    5a:c2:e2:28:5a:e6:5a:5a:a3:5c:7b:16:ac:fb:6f:
                    8f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:2C:8A:29:61:BD:03:EE:57:8E:24:BE:9C:80:9E:B8:89:51:8F:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1/047e238a-b18f-3e51-b379-a0b66b8fc7ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1/725a4aca-8e03-4420-8745-329c8962b4d1.crl

            X509v3 Authority Key Identifier:
                keyid:49:6F:54:A1:0B:DB:44:EE:36:B9:B9:6D:A2:13:78:5C:E8:68:4B:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/725a4aca-8e03-4420-8745-329c8962b4d1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9cf::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:12:3b:c5:9f:ec:6e:22:bf:db:16:e3:c1:19:57:3a:cc:d0:
         e9:74:0c:d4:02:a3:f7:96:d1:c3:39:65:c6:9f:43:95:66:ee:
         d6:13:d4:fb:d3:27:dc:47:d4:a9:c7:96:f2:6c:c4:fe:95:61:
         79:56:ae:81:b8:7d:f8:a2:ec:e6:59:f4:31:ad:d9:56:0a:44:
         d7:44:51:8e:2e:28:ea:0d:96:cf:16:f5:13:b6:f2:69:cd:5a:
         63:3c:b2:46:a3:fe:5b:3a:e4:dd:ae:e8:83:10:e4:b7:b2:18:
         d4:ac:4f:25:2e:69:5c:22:36:f3:b5:bc:54:71:49:96:b4:e7:
         fb:e2:4c:b4:50:04:c2:b0:5e:12:aa:c0:b7:f2:8f:57:42:ae:
         0d:ec:1b:26:f0:78:5e:b7:4c:36:03:89:21:e7:97:7d:64:9a:
         de:95:df:49:54:67:55:a7:fe:3b:52:f4:71:2b:6d:d5:a1:75:
         b1:93:fd:63:de:90:96:07:86:6b:d4:46:49:e4:2c:90:89:7a:
         1d:35:a6:97:15:3a:b3:6e:0d:a8:0c:56:8c:1f:48:40:01:b9:
         15:f6:7c:60:47:67:36:b1:6b:0b:7d:90:9c:9b:9f:5b:66:86:
         2b:23:3c:14:89:3e:c9:b3:49:bb:13:39:d2:cf:1f:57:f9:aa:
         8e:6c:e7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:55:41 2024 by rpki-client on console-ams.rpki-client.org