Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/354bf946-e3f4-3d26-a260-46ab86a7cd2c.roa
File:                     354bf946-e3f4-3d26-a260-46ab86a7cd2c.roa (raw, json)
Hash identifier:          rB3VGN8U0E17CRhmJJvMmkwiVqBaqrSUNqGu12GfXSg=
Subject key identifier:   28:03:43:22:D0:A9:A5:56:8D:55:A2:E8:DE:20:18:B5:E0:28:F8:49
Certificate issuer:       /CN=467861ee-0aa8-4688-af94-7d540e2ddc56
Certificate serial:       010D0C9F4328584566BDBBBFBAD3D4FE4AD55380
Authority key identifier: 13:2F:0E:EA:62:B5:B7:C7:AA:EF:09:D5:3E:54:5B:4D:53:FA:FD:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/354bf946-e3f4-3d26-a260-46ab86a7cd2c.roa
Signing time:             Mon 01 Apr 2024 13:00:36 +0000
ROA not before:           Mon 01 Apr 2024 13:00:36 +0000
ROA not after:            Sun 30 Jun 2024 13:00:36 +0000
asID:                     400529
IP address blocks:        2602:fabf::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/467861ee-0aa8-4688-af94-7d540e2ddc56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/467861ee-0aa8-4688-af94-7d540e2ddc56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:bd:bb:bf:ba:d3:d4:fe:4a:d5:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=467861ee-0aa8-4688-af94-7d540e2ddc56
        Validity
            Not Before: Apr  1 13:00:36 2024 GMT
            Not After : Jun 30 13:00:36 2024 GMT
        Subject: CN=52ed8d45-08c7-44c2-8b99-ba79877f76b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:23:d9:f8:56:4b:1c:62:74:7d:96:3f:27:23:
                    80:33:2f:30:49:14:93:f3:3c:97:22:25:e9:0d:60:
                    5a:fb:05:01:ee:e7:8b:f1:9b:a5:49:9a:e2:b6:3a:
                    c3:c5:b7:ed:7d:ea:16:eb:73:d0:10:05:05:be:76:
                    9d:3b:a2:02:94:54:df:86:92:3a:22:04:21:85:1e:
                    d0:49:27:bf:4b:9e:a5:be:ba:58:ff:74:66:5b:64:
                    ad:c9:d8:b5:34:91:5a:a6:ff:85:9a:37:15:63:f7:
                    8c:6d:f8:ea:9e:68:f6:c7:a9:e2:e4:5f:1e:c5:fb:
                    b6:36:28:97:3f:6a:93:5d:d7:cc:36:50:76:f0:9a:
                    ce:3f:41:8a:cb:53:22:8b:4a:c1:01:7d:e3:53:51:
                    11:ad:b7:28:16:34:6a:99:a6:34:eb:5f:b3:a3:1b:
                    b0:f6:e6:1c:18:e5:aa:4c:34:5d:4f:a1:60:87:5d:
                    4b:22:8e:17:46:aa:4b:87:91:9b:4e:c7:71:42:6b:
                    7a:07:f4:5f:45:a0:cc:fc:c6:86:7b:a2:c9:c5:fd:
                    ef:b9:97:72:f4:7e:2d:f6:db:c4:d8:ae:ee:d5:60:
                    d2:76:1a:e0:39:ea:30:65:72:f9:0a:8f:85:89:d1:
                    ec:b9:f6:d9:6f:a7:a1:bc:4b:fc:cb:31:7d:68:62:
                    81:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:03:43:22:D0:A9:A5:56:8D:55:A2:E8:DE:20:18:B5:E0:28:F8:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/354bf946-e3f4-3d26-a260-46ab86a7cd2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/467861ee-0aa8-4688-af94-7d540e2ddc56.crl

            X509v3 Authority Key Identifier:
                keyid:13:2F:0E:EA:62:B5:B7:C7:AA:EF:09:D5:3E:54:5B:4D:53:FA:FD:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fabf::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:23:a4:d6:c9:c1:82:78:04:90:e3:42:51:a3:6b:06:ec:7c:
         2c:83:d5:2e:34:5d:af:f0:b2:0d:c2:df:2d:e1:f7:3c:6c:ea:
         82:e7:59:fa:37:7e:f2:7e:35:6e:7d:91:b1:9a:02:91:d9:8c:
         7f:2a:66:66:86:f2:e0:17:5c:16:76:52:ea:18:55:e9:d0:2f:
         fe:6a:99:2f:31:1d:98:f9:99:10:a4:10:ef:ed:96:01:27:94:
         86:45:84:2a:bf:69:ab:7a:07:1d:a3:80:43:d8:25:b2:2e:07:
         0c:45:9b:0e:d7:19:f6:cd:ba:76:71:f4:cd:5b:1b:53:90:dc:
         0a:e7:74:b6:0c:31:dd:5a:ec:79:25:94:c6:8b:fa:e1:e5:d1:
         ca:1c:0c:fc:ca:0b:1f:1d:88:24:29:87:80:ab:fb:89:3b:1f:
         3d:13:aa:40:68:4b:73:01:61:3e:d3:d1:46:b9:04:a2:cf:ab:
         6f:f5:2c:91:e3:c3:34:8e:4e:10:e3:89:cb:b5:0e:45:82:70:
         b3:85:7d:a6:0d:2a:64:80:59:30:e6:46:8e:f2:33:97:ae:2e:
         56:16:04:be:af:fb:dd:95:c5:c4:fb:81:c3:95:f1:9f:f6:50:
         93:05:97:2e:23:b7:17:0e:54:19:02:22:8a:61:7e:44:5c:92:
         67:c7:d7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 02:04:33 2024 by rpki-client on console-ams.rpki-client.org