Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd/6fe58120-1aa8-34c6-8645-7871b6333cc8.roa
File:                     6fe58120-1aa8-34c6-8645-7871b6333cc8.roa (raw, json)
Hash identifier:          i9Ye2rwouwoicw+crO3rSfHydMrhX+Lv2klOQuGM0XA=
Subject key identifier:   7A:C3:0C:AB:E4:80:0B:ED:00:CD:BA:EB:22:9C:92:89:32:FF:BF:CD
Certificate issuer:       /CN=d2de1f15-6014-4202-aea6-3c118c783bfd
Certificate serial:       010D0C9F43285845DF19A986BAC23E387ADB0C00
Authority key identifier: 7E:F0:3C:0F:9E:1A:35:89:24:A8:BC:FC:64:3C:AF:E7:64:2E:D9:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd/6fe58120-1aa8-34c6-8645-7871b6333cc8.roa
Signing time:             Tue 14 May 2024 15:43:03 +0000
ROA not before:           Tue 14 May 2024 15:43:03 +0000
ROA not after:            Mon 12 Aug 2024 15:43:03 +0000
asID:                     16509
IP address blocks:        2607:b4c0::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd/d2de1f15-6014-4202-aea6-3c118c783bfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd/d2de1f15-6014-4202-aea6-3c118c783bfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:df:19:a9:86:ba:c2:3e:38:7a:db:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2de1f15-6014-4202-aea6-3c118c783bfd
        Validity
            Not Before: May 14 15:43:03 2024 GMT
            Not After : Aug 12 15:43:03 2024 GMT
        Subject: CN=ed3fd16c-3281-445b-8ebf-50e84ffb6edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9a:77:5d:34:d8:09:04:51:59:19:f2:1f:bd:
                    44:71:be:e3:d1:64:92:80:5b:50:ee:bc:0c:cf:a4:
                    53:7e:21:29:3e:cb:eb:6e:e5:c4:fe:52:10:d9:82:
                    f8:52:f6:d3:ce:c1:72:e7:a4:1c:40:e8:51:24:46:
                    84:8f:d1:b1:b4:11:5a:30:ae:07:de:56:00:93:8b:
                    a2:69:f1:cf:d4:c9:60:c0:9e:ba:c0:47:42:c8:73:
                    f5:23:15:4d:0f:65:f0:88:0f:d3:b7:65:20:b2:a2:
                    5a:0a:bb:bf:e9:93:87:6e:09:37:74:44:6c:ef:8e:
                    d9:93:18:ff:e2:d2:ae:22:8c:4b:81:a5:04:e4:0b:
                    ad:d0:49:65:5c:55:4a:71:9e:12:90:f6:6b:83:80:
                    45:cb:da:1c:a9:d5:d5:c0:50:e5:47:66:4e:e3:a1:
                    43:f6:ef:c7:25:24:eb:a9:7a:ae:68:f1:dc:ae:17:
                    63:d7:88:04:95:9e:bf:9a:54:de:c4:c8:34:a9:2a:
                    10:eb:d5:00:67:38:12:e2:24:ce:64:3f:05:b2:04:
                    ce:f9:55:3d:cd:1a:8c:62:79:af:20:9f:81:7f:35:
                    07:6d:d3:fd:4b:6a:b6:17:e0:77:8e:f6:cf:1d:be:
                    2f:f9:12:b9:32:6e:97:c5:c1:ae:93:de:ae:2d:2f:
                    00:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C3:0C:AB:E4:80:0B:ED:00:CD:BA:EB:22:9C:92:89:32:FF:BF:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd/6fe58120-1aa8-34c6-8645-7871b6333cc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd/d2de1f15-6014-4202-aea6-3c118c783bfd.crl

            X509v3 Authority Key Identifier:
                keyid:7E:F0:3C:0F:9E:1A:35:89:24:A8:BC:FC:64:3C:AF:E7:64:2E:D9:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b4c0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:55:2b:f8:d8:ae:5b:ad:16:c7:9e:bf:b6:c7:14:fc:47:bb:
         46:ad:a0:3b:e7:98:ee:f3:97:b6:e9:e9:26:2c:29:b6:1c:43:
         7c:d5:5f:02:31:a6:f4:98:5f:f8:fb:97:ef:b6:9f:59:3a:54:
         e5:32:ec:83:22:62:d5:a6:f2:27:f4:c6:15:c9:16:b3:48:c7:
         76:58:ad:73:c7:3d:d0:ae:ae:5b:35:09:4c:8d:ca:c3:9f:80:
         f6:0d:e0:22:b8:cb:ba:8e:f4:9b:f4:12:6b:58:02:27:dd:41:
         be:d1:73:54:7e:58:fe:a6:25:e6:c9:fc:d0:d6:c0:49:09:8c:
         f4:f8:97:ba:dc:2b:19:db:50:64:be:99:d0:c1:51:14:98:c8:
         33:b8:5a:ba:4f:14:7a:1c:68:62:06:93:4a:59:d3:92:7e:bc:
         4d:f6:b7:cf:86:6e:88:86:3b:a3:81:ba:99:fc:7e:45:70:7c:
         6b:5f:96:56:15:47:ea:54:96:d6:c6:0e:f8:83:2d:09:56:16:
         29:52:4b:31:b5:59:ee:b6:94:ff:15:55:38:5b:ba:1a:64:f8:
         fe:69:94:2f:d2:4f:78:96:d6:da:d4:90:8a:9b:f8:12:0a:8a:
         76:6f:f6:0c:31:1d:bd:1f:60:43:74:76:7c:e4:87:75:04:9a:
         0c:4d:66:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:43:02 2024 by rpki-client on console-fra.rpki-client.org