Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/83588ae3-b763-413d-9823-3d3c20081120/e2e71179-b531-32ad-9701-e10a5cc7e8c4.roa
File:                     e2e71179-b531-32ad-9701-e10a5cc7e8c4.roa (raw, json)
Hash identifier:          yq6DRDT6swc6jguc4BvMJrGjDyAMfniGBD8LsCdMtLo=
Subject key identifier:   13:31:5E:CB:C5:2A:E9:40:B9:0C:AC:7F:8C:D3:D4:57:3C:BD:83:C2
Certificate issuer:       /CN=83588ae3-b763-413d-9823-3d3c20081120
Certificate serial:       010D0C9F43285846351605E0C5DFE7345F029080
Authority key identifier: 3A:49:26:96:EF:02:4B:DB:23:E4:53:05:7B:77:A5:A8:B1:78:19:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/83588ae3-b763-413d-9823-3d3c20081120.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/83588ae3-b763-413d-9823-3d3c20081120/e2e71179-b531-32ad-9701-e10a5cc7e8c4.roa
Signing time:             Fri 14 Jun 2024 10:55:14 +0000
ROA not before:           Fri 14 Jun 2024 10:55:14 +0000
ROA not after:            Thu 12 Sep 2024 10:55:14 +0000
asID:                     13866
IP address blocks:        2602:fff8::/36 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/83588ae3-b763-413d-9823-3d3c20081120/83588ae3-b763-413d-9823-3d3c20081120.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/83588ae3-b763-413d-9823-3d3c20081120/83588ae3-b763-413d-9823-3d3c20081120.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/83588ae3-b763-413d-9823-3d3c20081120.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:35:16:05:e0:c5:df:e7:34:5f:02:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83588ae3-b763-413d-9823-3d3c20081120
        Validity
            Not Before: Jun 14 10:55:14 2024 GMT
            Not After : Sep 12 10:55:14 2024 GMT
        Subject: CN=5d2fbb59-fd26-4794-b74e-9608abaea950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1d:4c:4f:b4:f7:54:0f:57:da:70:83:78:e4:
                    d7:29:dd:9f:96:8f:99:de:38:b6:c2:3e:6a:ef:80:
                    04:2c:07:91:c8:dc:6d:c4:99:9b:ae:e9:76:3a:bf:
                    b2:2a:42:ea:62:cd:c0:20:b6:80:23:28:c7:47:fa:
                    fb:99:e8:bb:26:3f:d7:c4:c4:4f:8f:c6:56:04:86:
                    21:d7:f2:0c:fa:af:7b:06:18:45:a6:d6:8a:03:09:
                    dc:2f:25:a5:39:2a:17:a8:1b:c8:5d:29:02:61:a2:
                    d4:f1:ae:7f:14:7d:bd:c6:49:e9:9f:f2:31:8a:2b:
                    cd:4c:c3:ba:46:e1:60:09:c1:e3:86:98:75:85:65:
                    69:19:4e:38:db:cf:78:05:c0:d4:97:5d:3d:45:57:
                    15:c0:29:58:39:3b:cd:64:ad:cf:5b:14:37:14:56:
                    ea:c6:96:b6:b6:7b:90:13:11:1a:1c:b2:6b:e3:9f:
                    cb:90:36:25:7a:66:54:67:88:33:d6:9e:75:df:c7:
                    2b:c8:fc:7f:95:be:25:e4:5a:b1:fb:36:e8:8b:3e:
                    f9:dd:02:47:e3:25:08:60:79:1d:4d:e8:1b:9c:f9:
                    1c:ac:ea:2d:33:3c:29:15:70:6d:20:9c:32:74:0e:
                    12:af:04:1e:ee:8d:1b:dd:43:cb:c4:80:c8:01:63:
                    2b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:31:5E:CB:C5:2A:E9:40:B9:0C:AC:7F:8C:D3:D4:57:3C:BD:83:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/83588ae3-b763-413d-9823-3d3c20081120/e2e71179-b531-32ad-9701-e10a5cc7e8c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/83588ae3-b763-413d-9823-3d3c20081120/83588ae3-b763-413d-9823-3d3c20081120.crl

            X509v3 Authority Key Identifier:
                keyid:3A:49:26:96:EF:02:4B:DB:23:E4:53:05:7B:77:A5:A8:B1:78:19:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/83588ae3-b763-413d-9823-3d3c20081120.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fff8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:91:cd:30:71:6c:68:c0:73:8c:30:fc:3d:c2:5b:d9:48:ba:
         08:38:c5:ef:41:ec:f1:c9:ef:8a:3d:5c:23:5c:a0:09:3c:b2:
         af:b7:30:f0:11:23:29:9b:c5:97:88:bc:00:bf:77:3f:dd:47:
         27:76:49:25:e8:f2:9c:1b:84:08:61:95:bc:9e:bc:5f:e5:48:
         3e:98:33:24:7e:bd:8c:52:a3:3f:a1:86:5d:04:b1:d5:4e:18:
         e8:c1:73:b1:4d:19:b4:9f:9a:a4:0e:ec:64:bc:f9:9f:ae:07:
         b5:98:dc:2c:2f:4d:c4:58:fa:2a:55:2e:08:e8:60:fa:2d:0a:
         2d:02:75:22:5e:5e:48:40:8b:7f:f8:9d:17:f7:4f:e7:9e:5b:
         53:a2:5e:7c:ea:a2:e3:23:16:d9:c6:1a:e4:1b:0f:4a:4d:34:
         e4:27:02:9e:28:07:ca:48:48:e2:ed:19:ec:0d:94:96:6c:05:
         f4:d3:7b:bd:eb:86:1f:c4:19:e0:0e:6c:93:af:34:25:4f:a9:
         20:dc:4c:09:db:c1:34:6c:78:03:68:44:85:bc:be:82:6a:3e:
         80:d2:29:b9:8d:ce:16:02:80:6b:33:12:cc:94:19:47:c7:1d:
         fc:8b:5d:a7:af:68:26:7f:e8:83:48:ad:a1:74:3d:85:fb:2e:
         76:dc:19:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:36:58 2024 by rpki-client on console-fra.rpki-client.org