Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/abb857cf-60e4-323e-bd82-a61588882d93.roa
File:                     abb857cf-60e4-323e-bd82-a61588882d93.roa (raw, json)
Hash identifier:          jqiT4pghTul8ORa9FQKIZhslvUlMNrE9BaxhpbvTTPs=
Subject key identifier:   64:BC:DA:1C:45:AB:23:02:46:13:58:FB:B8:B6:F1:F5:C4:36:8E:64
Certificate issuer:       /CN=c5c851da-daf3-4388-8104-40baa3dc3939
Certificate serial:       010D0C9F43285845B449ED6AA53614C8DB01C480
Authority key identifier: A6:C4:8B:86:65:14:F3:B2:66:77:64:A4:DE:C5:2C:8D:CB:35:13:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/abb857cf-60e4-323e-bd82-a61588882d93.roa
Signing time:             Mon 29 Apr 2024 07:40:32 +0000
ROA not before:           Mon 29 Apr 2024 07:40:32 +0000
ROA not after:            Sun 28 Jul 2024 07:40:32 +0000
asID:                     23459
IP address blocks:        2602:f90f::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/c5c851da-daf3-4388-8104-40baa3dc3939.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/c5c851da-daf3-4388-8104-40baa3dc3939.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:49:ed:6a:a5:36:14:c8:db:01:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5c851da-daf3-4388-8104-40baa3dc3939
        Validity
            Not Before: Apr 29 07:40:32 2024 GMT
            Not After : Jul 28 07:40:32 2024 GMT
        Subject: CN=1d61c41b-de0d-4bd1-be00-4739a2657db6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:36:74:01:c0:3d:92:2e:fa:90:50:0b:01:e0:
                    cf:91:14:51:a8:f6:4e:49:00:80:29:e6:e6:84:4d:
                    50:d8:8a:24:fe:56:22:ea:30:8b:05:19:5c:1d:b6:
                    50:11:9a:08:2c:5b:c8:6b:ee:96:1e:11:1a:a3:d6:
                    8c:23:c9:6d:e4:e9:e2:60:10:c4:85:8a:9b:e1:d6:
                    c0:76:52:fa:90:66:1d:7a:6c:01:fe:63:f2:b5:2d:
                    07:7d:d8:53:b5:56:5e:e4:e1:3d:17:04:38:48:d9:
                    2c:19:a5:49:91:d9:4e:89:2b:ce:9f:a9:af:5c:07:
                    dc:4f:cd:e7:f8:8f:0a:b7:4b:ee:1f:e8:77:e1:89:
                    7e:b6:3b:c1:0a:79:34:3b:4c:d4:51:64:bb:1b:a5:
                    b2:0d:b0:96:34:b6:2f:70:db:22:af:79:2f:62:1a:
                    6f:e7:ee:ac:71:c0:34:8a:b5:45:1c:e4:cb:59:f8:
                    1c:dd:f3:35:32:75:77:dc:53:86:11:8c:5e:df:e8:
                    c4:70:a8:7d:80:35:df:cb:af:7c:82:8a:cc:e1:77:
                    43:ec:47:df:55:a8:38:4e:7c:f7:13:79:88:f7:f3:
                    26:ab:72:7f:f8:79:43:2e:57:b9:4f:bd:a0:2b:e0:
                    4f:1e:0e:d2:cc:73:0e:18:7f:6d:a4:a2:55:ed:64:
                    65:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BC:DA:1C:45:AB:23:02:46:13:58:FB:B8:B6:F1:F5:C4:36:8E:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/abb857cf-60e4-323e-bd82-a61588882d93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939/c5c851da-daf3-4388-8104-40baa3dc3939.crl

            X509v3 Authority Key Identifier:
                keyid:A6:C4:8B:86:65:14:F3:B2:66:77:64:A4:DE:C5:2C:8D:CB:35:13:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c5c851da-daf3-4388-8104-40baa3dc3939.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f90f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:9c:65:9e:8a:c3:4b:82:58:15:ae:2e:b3:c9:23:f1:a1:9d:
         72:b7:33:87:a0:9a:78:6b:1d:44:f8:10:18:72:74:e7:49:09:
         d1:f9:8d:87:ab:61:05:ce:0d:52:32:c8:82:f9:ce:7a:c7:34:
         cf:7a:a0:3e:ed:71:63:95:be:29:88:d5:92:1e:fd:f8:9e:f7:
         38:e0:d0:12:d3:24:0d:3f:7a:96:3b:a3:d1:20:67:42:02:f2:
         bb:2c:fd:3c:ae:fd:c0:a3:9e:b3:6e:81:f3:82:89:a0:03:6c:
         6c:6c:a4:85:d6:fc:d0:3d:e0:d0:47:bf:85:be:44:3e:52:29:
         a3:36:27:d0:a7:d3:3d:ad:fa:31:68:ed:02:6b:da:45:f7:f6:
         31:71:32:5a:55:b8:bb:2f:78:d7:27:72:80:a5:a2:4f:7f:bc:
         c4:9b:1d:91:1e:e5:8d:83:e4:d0:8f:02:3c:ba:8a:b3:3d:c9:
         5f:ea:64:b1:3a:89:d5:51:d5:30:0e:84:1a:72:5f:c2:c1:b5:
         b3:66:b0:0c:29:95:97:38:1f:25:67:f1:2a:b1:f2:51:e0:f8:
         40:98:fc:0a:9f:93:20:a8:60:c8:f3:f1:c2:85:d7:c2:12:04:
         95:a2:91:95:87:1c:5c:04:af:71:69:86:4c:3d:49:9a:f5:28:
         68:7f:b4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:23:44 2024 by rpki-client on console-ams.rpki-client.org