Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/9f6a0027-0e86-3da2-9591-0db2a316fa1f.roa
File:                     9f6a0027-0e86-3da2-9591-0db2a316fa1f.roa (raw, json)
Hash identifier:          2gK2g3v3eP+KbhZiwieovmJjizKT1Hie+gyLal0gkGs=
Subject key identifier:   68:34:8E:AD:53:BF:1B:2B:0D:BE:AB:73:D0:D0:85:96:4F:00:38:43
Certificate issuer:       /CN=38e671ad-3e19-48ff-801c-f18f3c194278
Certificate serial:       010D0C9F432858450EEACB4F338FCD3C5B31A640
Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/9f6a0027-0e86-3da2-9591-0db2a316fa1f.roa
Signing time:             Fri 01 Mar 2024 02:00:27 +0000
ROA not before:           Fri 01 Mar 2024 02:00:27 +0000
ROA not after:            Thu 30 May 2024 01:00:27 +0000
asID:                     62563
IP address blocks:        2602:fec3:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0e:ea:cb:4f:33:8f:cd:3c:5b:31:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278
        Validity
            Not Before: Mar  1 02:00:27 2024 GMT
            Not After : May 30 01:00:27 2024 GMT
        Subject: CN=43b51c1e-107f-4f48-883f-14ed839232a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:db:a5:4e:65:89:38:e4:9b:90:39:1b:d9:77:
                    3e:23:0a:c1:ad:a4:2b:1f:a2:af:7c:18:1d:3a:31:
                    57:55:02:f5:6a:13:d9:0d:f5:79:ed:ae:b5:2b:06:
                    76:56:4c:dc:dd:a1:d9:86:b5:a3:aa:e5:49:a9:4d:
                    45:69:4c:e3:f9:06:7c:10:cb:9d:8f:db:7c:98:c9:
                    39:18:1e:4e:10:1d:7f:f0:11:fa:fd:1e:bd:62:e7:
                    10:5a:6e:98:eb:32:b7:50:5d:c6:32:60:ca:c4:70:
                    88:62:3b:9f:b0:31:9a:67:26:72:62:d1:9b:92:b7:
                    67:9e:70:99:a7:01:56:18:80:55:a4:fb:2f:65:3f:
                    24:8c:7c:66:b8:0e:9f:3b:c7:57:d5:50:be:25:f1:
                    89:e1:22:54:07:4f:a4:6a:10:e3:ea:ef:72:92:73:
                    36:c3:a0:73:3f:66:29:3f:b0:a4:4d:73:e0:bc:84:
                    29:fc:f7:e7:d4:72:d2:a0:2e:d4:1e:91:be:2e:fd:
                    7e:50:f1:82:5f:57:49:85:37:82:49:41:53:bb:a1:
                    23:b5:f8:1d:66:b6:b7:76:0a:e0:a1:c3:1e:f9:da:
                    5c:1e:2f:cb:07:41:0d:3b:4b:58:81:9e:b1:63:2e:
                    2e:04:d5:c1:9e:05:af:92:51:16:fa:1b:ef:27:bd:
                    08:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:34:8E:AD:53:BF:1B:2B:0D:BE:AB:73:D0:D0:85:96:4F:00:38:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/9f6a0027-0e86-3da2-9591-0db2a316fa1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl

            X509v3 Authority Key Identifier:
                keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fec3:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:6e:1a:cb:d9:a8:3a:95:1b:4c:c7:c0:0e:9d:04:2e:56:be:
         0a:22:62:f5:89:5a:59:3e:4e:00:a2:fd:59:d7:87:14:2f:1a:
         af:e3:d2:5b:7c:8e:87:22:bc:66:48:75:9b:c0:99:08:43:81:
         cd:40:1c:d5:98:ff:86:90:3b:c2:23:f6:61:9a:1d:fc:b1:7b:
         e2:43:81:07:0d:a9:7b:f6:25:db:8a:27:1c:5c:17:36:5b:44:
         83:0c:05:7f:6b:22:c5:ac:34:3b:32:9c:42:d0:ef:5f:e7:3e:
         48:b2:9a:6f:5b:52:e4:dc:42:cc:d2:30:31:8b:62:ad:28:f9:
         37:29:8a:a9:a1:9b:fa:9b:57:9c:0e:98:7d:4f:67:30:59:ab:
         9a:d2:d0:25:a3:9e:b3:9d:7e:90:05:fd:70:a9:19:49:64:49:
         4b:4c:a3:4f:9a:ee:8f:b6:77:2e:4c:11:5e:6f:40:a8:4d:5e:
         a0:8b:eb:e2:92:df:09:26:22:90:01:2a:2a:2f:32:c7:1a:78:
         c5:00:a5:2f:d5:52:08:c7:04:d7:09:58:87:21:78:88:8a:cf:
         c2:30:df:ea:d0:57:ef:6d:96:01:5f:9b:24:b2:30:ed:3d:d0:
         b9:ec:51:b3:a4:3e:c7:64:ce:6b:71:8c:03:44:d7:c1:b7:35:
         a2:e2:82:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:09:00 2024 by rpki-client on console-fra.rpki-client.org