Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/de6ac4e0-602c-3d24-a14d-ba651d4d7c1c.roa
File:                     de6ac4e0-602c-3d24-a14d-ba651d4d7c1c.roa (raw, json)
Hash identifier:          d60Sn3spPsh2+p2HNZn0GJTCnUUTNlCYJbaw1aL+9QE=
Subject key identifier:   03:D7:71:93:B6:0A:C5:75:A5:BC:F2:92:3C:68:C1:DC:23:D3:D7:B1
Certificate issuer:       /CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
Certificate serial:       010D0C9F43285845840DC9F417ABE2425BF5B590
Authority key identifier: 60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/de6ac4e0-602c-3d24-a14d-ba651d4d7c1c.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     399532
IP address blocks:        2602:fd5f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:c9:f4:17:ab:e2:42:5b:f5:b5:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=7eabbcf0-7df1-42d1-bf43-6fcc58a6be79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:eb:22:d0:fe:c8:46:8c:47:c6:37:51:9f:77:
                    d6:95:0a:91:c1:bd:44:8c:aa:9a:d7:14:1f:e2:09:
                    82:1d:39:f1:f3:6c:09:fb:1e:0e:f3:c1:1c:ba:49:
                    3a:9c:ca:da:ed:ba:8e:2b:4c:6f:9c:67:70:35:ad:
                    2b:86:4a:ef:cd:c9:39:fa:94:57:ec:cb:a1:a4:f3:
                    e0:6e:34:72:ea:85:7f:7b:68:8e:44:63:52:c9:64:
                    51:4f:c9:58:5f:aa:33:5c:71:81:21:09:1b:d2:99:
                    01:11:40:db:bb:9f:16:aa:33:75:65:b7:ba:27:97:
                    4c:b0:4a:70:8f:5b:28:f1:ae:4d:ea:c0:83:04:9f:
                    49:19:b1:10:36:2b:01:87:a7:c1:ed:71:82:4a:11:
                    93:10:74:be:10:ae:38:43:a0:e6:cd:5f:e0:56:39:
                    a1:71:57:d9:5f:4a:52:f6:b2:92:66:7c:6e:61:04:
                    89:25:05:d3:06:9f:5a:ee:91:19:68:b1:e0:d2:95:
                    e0:95:e8:92:ca:a4:81:7e:22:e2:10:3b:19:3d:eb:
                    66:f8:e7:d7:b0:2a:9f:ed:49:21:d1:8a:63:c6:ea:
                    5b:07:5a:07:24:67:ea:50:f4:3e:0f:ae:7f:3b:8b:
                    44:f5:05:27:6a:8b:42:d9:85:0e:8f:76:67:d0:42:
                    96:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D7:71:93:B6:0A:C5:75:A5:BC:F2:92:3C:68:C1:DC:23:D3:D7:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/de6ac4e0-602c-3d24-a14d-ba651d4d7c1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl

            X509v3 Authority Key Identifier:
                keyid:60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd5f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:b3:b6:a1:b6:1c:0f:fd:dd:25:a0:04:8c:26:17:fb:83:42:
         15:a3:60:1a:a0:61:bb:01:b6:08:c8:a2:d7:98:11:83:5b:8e:
         fc:0e:26:a5:ee:d1:1f:4d:08:8e:8b:d8:4c:03:b2:bb:98:20:
         39:c9:dc:71:6a:e4:9f:30:b2:64:61:48:77:e9:1c:a9:c0:5d:
         22:0f:92:3d:9b:4f:0e:ec:a4:f2:74:2f:b2:45:08:9b:8b:c2:
         ac:36:02:f0:f5:8e:f1:42:9f:d5:61:78:bb:2e:28:e8:22:a3:
         c0:cd:78:0c:42:4e:45:f1:62:97:ef:59:31:c4:c3:ff:aa:51:
         63:7c:ab:bb:80:7b:d3:80:ec:cc:7d:84:c3:ca:8f:d8:cc:6a:
         a5:0a:3c:77:4b:30:88:d3:04:27:87:b4:1c:fa:66:bc:35:7e:
         f6:8c:c9:b2:e4:5c:cc:4f:fc:d4:29:68:39:53:36:9d:35:a2:
         16:5c:4d:31:68:cf:47:d2:6a:fd:21:ef:f9:0a:d7:56:85:0e:
         d9:c5:27:c6:77:f3:49:a1:29:a3:ba:ed:b1:c2:fe:3f:77:64:
         90:5e:a6:01:3c:df:b3:8e:31:f3:78:53:ed:e0:74:f0:10:38:
         74:1a:3a:57:b2:af:02:0d:e4:a3:e4:32:f9:db:39:68:c5:0c:
         ce:13:ba:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 17:04:45 2024 by rpki-client on console-fra.rpki-client.org