Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/bf8f855d-79d9-359a-b716-f369f7368f3d.roa
File:                     bf8f855d-79d9-359a-b716-f369f7368f3d.roa (raw, json)
Hash identifier:          K7N62gQQlbb6SRmDVQio8y6KczCxdzn1EGoOzT89FYM=
Subject key identifier:   B9:5F:2E:6C:04:E5:11:2B:54:C9:1C:E3:D8:78:97:E9:D5:13:1E:82
Certificate issuer:       /CN=8baf6f06-4472-4c79-8a01-5c338d64c402
Certificate serial:       010D0C9F4328584622EE4DE2DEA00110FEF0DB50
Authority key identifier: 95:D3:B5:8C:0D:5D:5F:85:19:CD:8F:FA:39:F4:82:C2:33:BB:9D:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/bf8f855d-79d9-359a-b716-f369f7368f3d.roa
Signing time:             Fri 07 Jun 2024 22:50:39 +0000
ROA not before:           Fri 07 Jun 2024 22:50:39 +0000
ROA not after:            Thu 05 Sep 2024 22:50:39 +0000
asID:                     401082
IP address blocks:        2602:f8b4::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:22:ee:4d:e2:de:a0:01:10:fe:f0:db:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8baf6f06-4472-4c79-8a01-5c338d64c402
        Validity
            Not Before: Jun  7 22:50:39 2024 GMT
            Not After : Sep  5 22:50:39 2024 GMT
        Subject: CN=79953661-86b8-4cdf-ae6f-0337d93044a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:12:6d:3d:1d:a9:97:69:42:f8:6f:b1:ea:66:
                    57:16:60:e2:26:72:80:8f:27:f8:eb:94:64:ed:0a:
                    c8:6d:f4:3c:5c:7a:10:3e:45:6e:f8:3a:47:ee:03:
                    d8:5f:8c:97:33:bd:db:84:bb:c8:e3:60:b8:76:fe:
                    98:71:75:b7:cd:0f:69:46:b7:9a:72:59:30:dd:55:
                    31:f8:80:67:2a:2d:22:03:60:f8:ed:16:8e:35:01:
                    e4:d4:b3:7b:4b:1e:58:fd:7d:ee:ae:02:ca:9f:b2:
                    27:9c:e0:f3:ca:05:56:10:27:b5:b8:66:ff:86:33:
                    e7:fc:8d:83:4f:b3:2a:10:fb:64:13:89:98:5e:47:
                    7a:5c:f9:8b:a7:fd:3a:75:75:a3:bb:05:f0:20:5f:
                    27:1e:a4:fd:ce:f5:ff:c4:12:d0:fc:9d:7f:e1:7d:
                    a5:1b:39:94:61:f9:f4:0e:2d:9c:22:a5:e6:c1:05:
                    b0:04:2f:a3:f3:ca:d8:72:f6:72:78:15:9b:89:98:
                    fb:8f:af:7c:d8:6d:55:ba:47:95:e8:cd:7e:ba:90:
                    ef:bb:39:fc:0b:31:ba:40:7b:93:4f:24:9f:8b:29:
                    31:47:63:a1:84:5d:e4:1f:c5:5e:cc:f0:71:20:33:
                    2b:66:75:07:3f:78:27:35:1a:5c:71:c4:70:5b:b0:
                    de:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:5F:2E:6C:04:E5:11:2B:54:C9:1C:E3:D8:78:97:E9:D5:13:1E:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/bf8f855d-79d9-359a-b716-f369f7368f3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.crl

            X509v3 Authority Key Identifier:
                keyid:95:D3:B5:8C:0D:5D:5F:85:19:CD:8F:FA:39:F4:82:C2:33:BB:9D:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8b4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:b2:36:cb:be:80:2b:15:71:4d:89:39:e5:81:ee:c7:70:7f:
         c0:89:94:4f:c6:56:02:12:ea:b2:76:32:b7:c0:3e:12:8c:16:
         7e:cd:72:3a:17:24:11:17:de:20:08:3c:89:97:bf:41:4d:b4:
         6a:8f:5d:a4:c2:4f:ab:9f:b4:be:8a:c9:41:0f:07:01:71:e7:
         df:2c:3f:fc:f4:39:cf:5f:b0:fc:64:e6:fb:1a:3f:d7:a8:1a:
         7c:f3:f9:11:3b:c4:7a:fd:8f:df:64:55:d3:7f:6c:04:a5:50:
         d0:e6:3b:24:53:d5:a4:a6:05:6f:07:ce:3e:74:06:64:5a:44:
         f3:5e:72:f2:61:1c:e8:b7:57:5d:31:2e:41:11:bb:e1:96:a7:
         fe:ee:a7:6b:21:44:08:fb:ce:31:9a:93:12:53:e7:a8:cc:00:
         71:e5:20:f6:ba:2f:cd:06:22:ef:c1:da:29:49:85:56:e3:79:
         37:52:ec:95:f6:e6:d2:c4:3a:9f:b1:84:14:c9:40:ed:97:3e:
         73:bd:cd:74:69:6d:4c:a5:14:d4:7a:d5:a3:b6:e8:c5:3c:29:
         3f:6b:3c:77:83:b4:a3:5b:c5:1d:d9:c1:84:3d:df:b3:39:e8:
         06:84:a4:c1:18:70:ae:1f:f0:f6:af:62:87:eb:33:1c:f4:c3:
         7c:db:b7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:36:58 2024 by rpki-client on console-fra.rpki-client.org