Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/d2ec0f89-702d-3867-814a-6ca9bcc2bcf3.roa
File:                     d2ec0f89-702d-3867-814a-6ca9bcc2bcf3.roa (raw, json)
Hash identifier:          Ow0lwFXvSnnr85znUnnkZUfsaY3sv7A7qcOdWkZCrkE=
Subject key identifier:   4E:1D:AB:DE:73:10:5C:73:38:66:12:10:9D:50:76:AB:0A:F0:B2:BF
Certificate issuer:       /CN=a24ab18f-7bd4-439d-a6af-f2605cf8130e
Certificate serial:       010D0C9F43285845F7942186BC6F2B9845D518C0
Authority key identifier: 39:1B:BF:E7:09:A9:F5:C4:B0:EB:5F:F3:8F:5D:DC:74:FB:F6:55:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/d2ec0f89-702d-3867-814a-6ca9bcc2bcf3.roa
Signing time:             Thu 23 May 2024 10:09:12 +0000
ROA not before:           Thu 23 May 2024 10:09:12 +0000
ROA not after:            Wed 21 Aug 2024 10:09:12 +0000
asID:                     396226
IP address blocks:        2602:fefe::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/a24ab18f-7bd4-439d-a6af-f2605cf8130e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/a24ab18f-7bd4-439d-a6af-f2605cf8130e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f7:94:21:86:bc:6f:2b:98:45:d5:18:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a24ab18f-7bd4-439d-a6af-f2605cf8130e
        Validity
            Not Before: May 23 10:09:12 2024 GMT
            Not After : Aug 21 10:09:12 2024 GMT
        Subject: CN=6f1e03b7-a462-40ab-8942-a4bf35717515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:27:d7:70:1f:37:a4:52:9e:e4:16:35:de:40:
                    35:ba:fb:05:31:6e:59:d1:3d:9b:f7:93:08:0e:cb:
                    3c:9f:8e:fb:59:cc:05:8d:bd:1e:84:da:f7:98:4b:
                    af:a6:6c:2a:e0:95:a7:58:41:33:13:35:08:26:8f:
                    13:bc:92:e9:88:5c:60:50:55:cd:7c:19:b2:33:8d:
                    f7:88:86:30:16:32:9d:01:c5:dd:61:cc:cb:0b:06:
                    5b:e1:9d:96:31:2f:c3:af:a2:01:93:62:3d:60:aa:
                    45:69:9d:cf:fa:29:ed:03:d3:b0:40:dc:01:ee:b5:
                    da:f7:04:8b:08:d0:f2:79:3f:92:eb:28:11:f8:cc:
                    20:31:95:ab:2e:e8:64:31:43:5f:e3:66:cd:59:7d:
                    0a:6a:df:92:31:b9:d7:4c:31:8f:fd:cd:ba:f3:d2:
                    7a:dd:e4:61:c9:8b:01:b2:be:bb:70:44:a9:83:a3:
                    4f:00:c4:32:0d:2f:b2:be:31:45:63:2b:b6:23:32:
                    40:64:ae:0d:a4:03:0d:7b:5c:65:e3:57:00:2d:1d:
                    1a:5b:52:97:48:65:d3:36:90:d7:3d:49:f4:ce:7c:
                    b3:f2:9f:21:bb:f5:87:14:06:d8:08:6a:dd:e6:12:
                    09:85:6a:eb:9f:3d:b9:ba:b4:c7:3c:75:00:e2:d4:
                    17:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:1D:AB:DE:73:10:5C:73:38:66:12:10:9D:50:76:AB:0A:F0:B2:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/d2ec0f89-702d-3867-814a-6ca9bcc2bcf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/a24ab18f-7bd4-439d-a6af-f2605cf8130e.crl

            X509v3 Authority Key Identifier:
                keyid:39:1B:BF:E7:09:A9:F5:C4:B0:EB:5F:F3:8F:5D:DC:74:FB:F6:55:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fefe::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:38:35:de:fd:f0:c3:56:6b:9f:3d:b4:f9:a9:6a:bc:96:94:
         aa:83:a4:41:4a:04:19:d2:e3:9a:8a:41:ba:fe:67:29:68:ae:
         01:32:fb:68:b9:a0:64:16:5d:3c:f1:8d:27:c2:6a:4b:bc:94:
         e9:a7:51:4c:88:2c:65:cb:2b:de:61:a9:aa:7c:af:83:36:37:
         07:bc:50:32:e1:48:17:fa:03:c4:4c:cf:74:a3:71:3a:98:29:
         63:9d:3a:ab:20:43:db:08:65:19:a3:d9:df:19:a7:09:68:d8:
         a9:d3:bf:bf:b0:96:fe:47:38:69:f4:98:45:70:e3:49:98:9b:
         b6:26:1a:36:25:f0:c1:13:53:7b:09:c5:7d:1f:3d:f0:03:7d:
         c3:c0:d8:ee:4e:27:b4:92:39:e1:c9:eb:ad:29:dc:66:0f:4d:
         4c:8e:d0:8b:a7:17:30:df:f6:28:8d:2d:94:94:c7:a2:3b:83:
         e9:2b:5c:9d:1b:d0:ff:f0:69:43:cc:21:eb:89:4c:85:e2:24:
         9a:34:c8:47:80:a7:53:a8:f4:9f:60:19:17:50:d5:10:41:e6:
         1a:3c:3e:c6:5c:7b:d5:80:57:1f:85:2e:d6:43:90:e3:c1:13:
         f6:28:7b:5c:e3:20:e3:63:fe:29:4e:53:b0:4f:94:16:ac:b5:
         85:1b:57:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:43:01 2024 by rpki-client on console-fra.rpki-client.org