Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/143d5548-5b18-3916-9539-1111067737f0.roa
File:                     143d5548-5b18-3916-9539-1111067737f0.roa (raw, json)
Hash identifier:          txiundMnV2i84iV+cp6HYU/skDfOu0Imu6fjhFplTqQ=
Subject key identifier:   40:9B:34:20:DE:07:A6:3D:68:C8:F9:E7:F3:D0:BE:E3:19:F4:80:D6
Certificate issuer:       /CN=5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9
Certificate serial:       010D0C9F43285845B7B3763E78A158EF8DC7C340
Authority key identifier: 07:C5:C9:90:64:E9:87:65:CD:5C:91:C6:D0:5D:61:35:4F:69:23:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/143d5548-5b18-3916-9539-1111067737f0.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     399135
IP address blocks:        2602:fcc3::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:76:3e:78:a1:58:ef:8d:c7:c3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=07129b04-6471-4b3d-8830-a093c1ce7e47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:38:12:3b:6d:f7:1f:a1:84:64:71:0d:25:a4:
                    d3:fb:a9:41:a8:77:0b:b9:f5:04:52:97:76:9e:1a:
                    6d:1b:9c:69:45:fb:b2:3b:9a:83:4c:dc:b8:91:7d:
                    43:94:b7:29:03:f1:eb:6f:0f:df:ee:57:ea:3b:36:
                    aa:eb:db:62:41:e8:c5:ce:b0:36:26:a0:95:38:57:
                    23:c7:8d:c8:d8:38:c9:82:fc:85:cc:0d:52:6b:57:
                    67:58:d2:b9:04:39:6e:ad:6c:84:50:70:cb:4c:25:
                    e7:9f:09:ed:dd:f9:5f:0f:9c:a9:ce:cb:d2:f8:72:
                    55:06:31:b6:f0:7c:30:ce:7b:03:1e:3b:09:e1:fe:
                    1b:cd:6e:c8:4a:71:35:6e:6d:4d:6c:1c:74:3e:01:
                    ba:0c:e0:de:67:b4:f7:59:ef:83:8a:c2:dd:70:f1:
                    e1:9c:c1:1b:39:b5:72:11:31:4e:ec:3b:17:74:fa:
                    a0:d0:fd:25:f3:e8:1a:c9:43:90:4d:fe:c9:b5:29:
                    83:a8:7f:3c:8b:85:33:c7:f2:7c:e9:a6:60:4e:ce:
                    74:27:7a:35:66:df:14:9c:a0:82:95:67:04:6a:7a:
                    4a:57:53:cf:b4:55:37:b5:3d:b4:95:62:17:71:df:
                    b6:94:83:a3:49:3d:0e:ee:83:4a:0e:54:56:e6:69:
                    7b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:9B:34:20:DE:07:A6:3D:68:C8:F9:E7:F3:D0:BE:E3:19:F4:80:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/143d5548-5b18-3916-9539-1111067737f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.crl

            X509v3 Authority Key Identifier:
                keyid:07:C5:C9:90:64:E9:87:65:CD:5C:91:C6:D0:5D:61:35:4F:69:23:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcc3::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:70:0d:93:c9:2c:61:23:13:c4:3e:10:73:a7:d3:0e:af:ab:
         0d:b0:dd:6d:22:10:2b:2b:db:82:ea:8a:e0:7b:83:1f:66:cf:
         85:8c:46:3d:af:91:b3:8d:6b:88:fe:be:22:f9:aa:ad:19:65:
         46:32:35:bb:f4:fb:9b:58:df:b7:11:07:c8:18:0d:71:ce:d1:
         93:9f:64:0c:02:a7:64:af:04:e5:50:87:c0:53:f8:f5:60:56:
         f4:bf:f9:ae:b8:82:02:49:a5:24:13:fe:b1:60:a8:26:2e:d5:
         ca:9b:2b:0d:60:5b:5c:26:d0:a9:30:cb:b5:1c:5e:41:f3:e2:
         55:28:4d:55:aa:54:41:cf:3a:27:9a:ef:95:63:92:37:de:d6:
         c0:36:c8:e7:96:53:f9:5f:73:9b:12:4b:06:56:91:06:0d:6f:
         4d:53:b9:1e:b2:cf:40:36:a9:f9:15:a7:cc:8e:0b:88:a9:45:
         1d:85:3d:71:64:df:03:86:08:db:44:98:e8:76:39:85:f6:55:
         8f:97:7b:8a:c3:16:d3:0a:4a:5b:89:c4:85:83:a0:58:ef:e6:
         16:0e:a3:5f:d2:56:bc:6f:90:e6:5a:5c:2d:30:d4:2f:44:db:
         0d:25:fa:8b:0a:dc:3b:be:ed:d1:ea:40:8e:2b:40:33:6d:93:
         c4:79:2d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:43:19 2024 by rpki-client on console-fra.rpki-client.org