Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7dc3020d-633c-4147-90a4-2daf4afdc33d/b7f37f46-3ddb-33eb-bb56-0c05b06f48be.roa
File:                     b7f37f46-3ddb-33eb-bb56-0c05b06f48be.roa (raw, json)
Hash identifier:          l2xKtgLT9EjHuvY9X9zkjHcdkSeFhcgv5F2NIk715Xc=
Subject key identifier:   39:A1:5E:DA:D1:B2:FC:72:0C:4B:6A:6A:3B:62:E7:28:F0:42:E7:2C
Certificate issuer:       /CN=7dc3020d-633c-4147-90a4-2daf4afdc33d
Certificate serial:       010D0C9F43285846864A268FA9C43334EE14CF80
Authority key identifier: 1C:4F:8C:B2:CF:AB:FC:C4:D2:08:9B:7C:AF:0C:87:3F:0E:89:83:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7dc3020d-633c-4147-90a4-2daf4afdc33d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7dc3020d-633c-4147-90a4-2daf4afdc33d/b7f37f46-3ddb-33eb-bb56-0c05b06f48be.roa
Signing time:             Sat 13 Jul 2024 13:00:33 +0000
ROA not before:           Sat 13 Jul 2024 13:00:33 +0000
ROA not after:            Fri 11 Oct 2024 13:00:33 +0000
asID:                     401024
IP address blocks:        2602:f910::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7dc3020d-633c-4147-90a4-2daf4afdc33d/7dc3020d-633c-4147-90a4-2daf4afdc33d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7dc3020d-633c-4147-90a4-2daf4afdc33d/7dc3020d-633c-4147-90a4-2daf4afdc33d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7dc3020d-633c-4147-90a4-2daf4afdc33d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Sep 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:86:4a:26:8f:a9:c4:33:34:ee:14:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc3020d-633c-4147-90a4-2daf4afdc33d
        Validity
            Not Before: Jul 13 13:00:33 2024 GMT
            Not After : Oct 11 13:00:33 2024 GMT
        Subject: CN=9030c89b-8a83-4d78-9616-16d9f517c548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:44:08:8b:77:e0:6a:a4:aa:18:b2:3a:e7:f6:
                    87:b7:8a:aa:44:aa:a2:b6:95:e5:dc:e5:82:95:02:
                    96:96:8d:6c:88:ae:c4:8d:f9:e6:c5:06:e6:06:99:
                    2f:c9:02:68:fc:63:3e:0e:37:80:63:ea:ef:bd:87:
                    f9:dc:10:6e:99:c7:83:a6:38:13:98:05:b2:12:db:
                    ea:19:b5:cc:93:b0:21:f3:4f:9f:93:10:55:71:00:
                    e7:67:04:56:4c:3c:54:13:62:d9:8b:73:b6:50:7a:
                    49:24:f3:71:5b:d8:39:66:e0:d2:52:a1:93:3b:15:
                    ef:36:d1:4f:f8:7d:84:44:2b:92:18:42:d2:64:33:
                    77:51:63:6f:a4:f9:2c:af:08:00:21:c4:0a:90:95:
                    12:64:a2:7e:b1:37:2e:f6:d3:d1:fd:a0:3d:2e:0d:
                    09:21:21:04:f8:4c:4a:66:79:77:85:b9:1c:bd:d6:
                    0b:23:cb:2a:14:3a:d6:30:80:e2:4b:ca:07:e9:e0:
                    d0:65:ac:48:cf:5c:a3:b1:82:d8:cb:00:19:37:c7:
                    b8:c2:8a:97:6a:40:21:50:4b:9d:40:79:74:14:88:
                    6d:cb:c8:d0:02:a8:4f:a4:40:c9:42:d3:b4:24:2b:
                    b1:a4:3b:60:b3:d4:96:92:b3:46:a2:9a:fd:c0:ea:
                    8e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A1:5E:DA:D1:B2:FC:72:0C:4B:6A:6A:3B:62:E7:28:F0:42:E7:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7dc3020d-633c-4147-90a4-2daf4afdc33d/b7f37f46-3ddb-33eb-bb56-0c05b06f48be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7dc3020d-633c-4147-90a4-2daf4afdc33d/7dc3020d-633c-4147-90a4-2daf4afdc33d.crl

            X509v3 Authority Key Identifier:
                keyid:1C:4F:8C:B2:CF:AB:FC:C4:D2:08:9B:7C:AF:0C:87:3F:0E:89:83:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7dc3020d-633c-4147-90a4-2daf4afdc33d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f910::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:ba:6f:3a:26:12:5f:50:c9:7a:a4:a6:89:6d:e3:84:ab:ed:
         83:c4:c4:53:5f:c5:dd:2f:32:aa:31:04:45:c1:3d:7c:ba:f6:
         83:a8:ca:05:7b:4e:d7:06:ad:87:61:53:98:77:b2:8b:9e:87:
         6e:ea:17:43:22:df:2e:9c:07:ef:7e:6b:c0:37:fc:fb:63:2c:
         53:29:24:b1:a1:4e:39:5b:51:fc:49:dd:2e:c1:59:1f:d2:d0:
         23:86:ff:79:18:a8:eb:8f:4b:30:ec:03:ef:16:f6:bc:fd:db:
         2b:f5:5f:0c:fd:58:7a:5d:79:0c:b4:32:ec:99:18:7c:71:23:
         b7:5e:be:a1:08:25:2c:3a:c6:7f:ee:14:e9:6b:2a:f9:8b:20:
         16:2f:e6:ba:17:16:c6:8f:15:78:d6:76:31:2f:7d:3e:67:28:
         5a:42:7d:46:83:36:4c:27:d1:a2:a2:70:b4:90:a7:e0:e8:02:
         e5:0d:0f:db:57:d0:df:15:fe:08:72:70:42:0f:a7:c5:5c:f4:
         de:42:1a:b3:61:3c:f3:8d:b0:e7:c5:0d:42:b6:a4:b5:90:05:
         3b:6e:3b:bb:98:13:77:bb:ee:6d:57:c4:78:ce:fe:26:73:72:
         64:49:25:a8:92:7a:ad:4f:0e:f1:19:da:50:5d:d3:11:4b:6c:
         1c:bb:f9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:18:23 2024 by rpki-client on console-ams.rpki-client.org