Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d8d99b-a004-4011-89bd-bfc5c1709d9a/c46ef484-a4b8-3596-aad0-fee2ec2d1d6d.roa
File:                     c46ef484-a4b8-3596-aad0-fee2ec2d1d6d.roa (raw, json)
Hash identifier:          w+Lhnn0YeKfj0qQn5ijVPeQy8MHmLsF/rULxrS5Dd6U=
Subject key identifier:   DB:A3:16:F0:74:27:54:83:16:5E:86:74:EA:17:11:2E:C9:4F:D2:CA
Certificate issuer:       /CN=73d8d99b-a004-4011-89bd-bfc5c1709d9a
Certificate serial:       010D0C9F4328584546A2B25E4D5117F82AD8A800
Authority key identifier: F6:68:03:82:50:89:9C:81:94:76:77:EC:F8:CE:C7:8F:6B:DE:28:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d8d99b-a004-4011-89bd-bfc5c1709d9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d8d99b-a004-4011-89bd-bfc5c1709d9a/c46ef484-a4b8-3596-aad0-fee2ec2d1d6d.roa
Signing time:             Thu 21 Mar 2024 01:00:25 +0000
ROA not before:           Thu 21 Mar 2024 01:00:25 +0000
ROA not after:            Wed 19 Jun 2024 01:00:25 +0000
asID:                     400513
IP address blocks:        2602:fbb1::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d8d99b-a004-4011-89bd-bfc5c1709d9a/73d8d99b-a004-4011-89bd-bfc5c1709d9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d8d99b-a004-4011-89bd-bfc5c1709d9a/73d8d99b-a004-4011-89bd-bfc5c1709d9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d8d99b-a004-4011-89bd-bfc5c1709d9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:a2:b2:5e:4d:51:17:f8:2a:d8:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d8d99b-a004-4011-89bd-bfc5c1709d9a
        Validity
            Not Before: Mar 21 01:00:25 2024 GMT
            Not After : Jun 19 01:00:25 2024 GMT
        Subject: CN=0ca83053-0550-4878-8723-7a9eb5c0b62c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:30:2b:c9:c6:2d:97:90:52:5b:85:f4:08:c9:
                    a5:d5:04:73:b2:0b:b8:2e:8c:f3:0e:cd:a4:f8:f8:
                    44:eb:83:3a:9e:5f:f4:87:c0:75:2e:43:bf:c7:23:
                    3f:f5:18:56:e2:be:1c:bc:37:7b:cf:fb:87:c0:14:
                    d2:84:cd:32:a7:31:d0:f1:c1:56:7a:10:c0:6b:83:
                    1c:72:ba:7c:cf:eb:0b:e9:f7:79:7e:f3:95:17:54:
                    e1:8a:c0:7d:b0:a7:bf:e1:5e:75:8b:7f:9d:8a:7e:
                    fd:30:04:fa:66:f2:25:6f:88:8b:c5:ca:4b:3d:c8:
                    11:01:5d:5a:ad:66:a8:5d:da:c6:fd:98:6f:c3:18:
                    db:15:89:be:91:23:eb:6a:e8:5c:03:9d:79:4e:cf:
                    55:ff:8a:25:04:28:b2:91:75:81:3a:39:7c:87:67:
                    ce:f3:fa:94:98:97:ca:e4:02:64:9d:59:87:c9:1f:
                    71:a1:ac:35:76:78:5b:3e:cf:c0:d9:e3:7f:8d:f2:
                    b0:13:03:48:a2:f0:54:a6:d7:8b:3e:64:a1:6c:46:
                    5b:a2:8a:46:66:86:4b:0a:f0:83:1f:a4:f0:16:0d:
                    3f:21:1e:a4:a0:99:e5:a7:30:6e:0b:18:ff:e2:99:
                    f1:17:a2:86:8f:e5:13:60:17:2c:85:a4:ef:f7:e2:
                    41:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A3:16:F0:74:27:54:83:16:5E:86:74:EA:17:11:2E:C9:4F:D2:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d8d99b-a004-4011-89bd-bfc5c1709d9a/c46ef484-a4b8-3596-aad0-fee2ec2d1d6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d8d99b-a004-4011-89bd-bfc5c1709d9a/73d8d99b-a004-4011-89bd-bfc5c1709d9a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:68:03:82:50:89:9C:81:94:76:77:EC:F8:CE:C7:8F:6B:DE:28:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d8d99b-a004-4011-89bd-bfc5c1709d9a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbb1::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:40:c8:06:85:8d:3a:a7:62:32:0e:15:75:c4:53:e3:30:89:
         29:84:2a:1b:08:33:06:ef:d6:58:37:62:8a:0f:6f:58:a6:fb:
         d9:b8:83:c8:5d:29:be:ca:28:fa:f6:40:2c:e2:f6:18:e3:2b:
         9a:ef:4e:8b:f4:a1:c5:22:01:95:f3:8f:23:2e:17:13:d2:8d:
         c7:f4:e7:82:7a:5c:0c:cb:ea:53:40:74:ec:1f:09:98:02:39:
         0d:04:4d:5b:57:87:42:d0:19:87:85:49:03:37:f9:ce:71:22:
         02:35:3e:38:78:4a:ed:e4:e9:16:cc:cb:47:d2:6e:90:6d:22:
         71:0e:c5:d6:bf:fc:c6:ca:86:c8:63:21:c7:f4:11:e7:e4:37:
         52:3f:5e:aa:d1:35:7e:08:c2:04:c1:21:09:a4:68:c2:d3:d2:
         fa:21:25:56:9c:7e:ad:28:9d:ac:e8:dd:ea:46:3b:fc:d5:19:
         14:2f:19:76:24:d2:3a:12:12:3b:2b:93:f3:b1:2d:97:02:cc:
         b8:a1:b1:f5:a5:55:b1:a4:ba:a6:a2:4e:cc:80:57:50:02:d7:
         aa:65:45:cc:2d:99:9c:62:6b:df:c4:d6:db:a5:28:15:13:4e:
         e9:8b:dc:34:45:a1:5e:2f:e3:77:0f:e6:9a:55:17:09:f5:48:
         db:64:0d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 18:21:56 2024 by rpki-client on console-ams.rpki-client.org