Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8b57606b-37f5-3717-8c61-f7e9dd2e3925.roa
File:                     8b57606b-37f5-3717-8c61-f7e9dd2e3925.roa (raw, json)
Hash identifier:          gcxyZb5Xzcub+Z6CcDZH75pZdKbpaPFBJ6q/1f/Vc3o=
Subject key identifier:   09:79:ED:A2:DE:5C:51:55:CE:FE:DE:DB:78:F8:99:17:1A:CE:67:DD
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F432858456CCE1088CF3BEF519E412580
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8b57606b-37f5-3717-8c61-f7e9dd2e3925.roa
Signing time:             Wed 03 Apr 2024 17:08:34 +0000
ROA not before:           Wed 03 Apr 2024 17:08:34 +0000
ROA not after:            Tue 02 Jul 2024 17:08:34 +0000
asID:                     0
IP address blocks:        2602:107:2c00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:ce:10:88:cf:3b:ef:51:9e:41:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Apr  3 17:08:34 2024 GMT
            Not After : Jul  2 17:08:34 2024 GMT
        Subject: CN=ba31ea90-7226-4308-b584-8face2996db6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c3:35:d0:67:02:6f:cb:a9:a8:bd:d4:06:a9:
                    41:06:59:ba:b8:80:dd:45:14:c3:04:ca:ef:85:90:
                    30:ae:65:52:26:36:d1:11:43:d9:ca:dd:f6:ee:d4:
                    60:a1:86:42:a4:e7:45:f4:26:7b:50:43:38:78:be:
                    2a:c3:a4:80:7e:9f:6f:86:27:db:82:cb:38:5a:dc:
                    d6:1a:36:6c:ab:ff:58:d7:26:5d:01:9b:ad:d3:25:
                    27:86:b9:49:99:b8:d4:7e:c5:16:2f:3f:6c:ee:b0:
                    a1:8f:fc:f5:3c:29:48:4c:6b:8c:73:6c:99:7b:60:
                    a3:af:f2:7e:02:a9:e7:cd:b9:47:68:04:d8:63:71:
                    62:8b:51:23:27:7c:e3:e6:88:f9:c1:9b:9f:04:62:
                    e0:25:a1:29:cd:64:43:90:69:4f:4c:e5:50:f3:44:
                    d6:6e:5d:54:e6:a2:50:0f:ee:65:2c:9b:3c:55:f7:
                    d0:3b:f8:8e:a5:60:b9:78:b0:06:25:92:61:18:d4:
                    00:57:c3:dd:8d:8c:00:0a:df:e9:8b:89:ca:ed:6c:
                    d9:19:09:70:c6:3b:77:2e:1e:06:ae:82:3c:10:21:
                    48:e5:4c:9b:b2:8f:5a:dc:61:bd:f3:0b:a3:80:4e:
                    e9:e7:d1:e0:fe:9c:41:b5:42:05:d2:2a:93:87:5f:
                    ab:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:79:ED:A2:DE:5C:51:55:CE:FE:DE:DB:78:F8:99:17:1A:CE:67:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8b57606b-37f5-3717-8c61-f7e9dd2e3925.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:2c00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:e3:41:77:a5:fa:e5:b3:09:43:33:bc:c6:3f:9f:6b:6c:ac:
         14:34:5f:5b:6e:66:81:12:d4:70:a4:64:50:30:5c:d0:f0:72:
         15:b2:83:c4:06:ec:35:b3:cd:87:41:df:88:da:1f:e9:de:b1:
         4c:34:06:52:6a:29:40:91:35:30:ad:d8:c4:6c:de:61:5c:0c:
         7a:d0:f7:c5:ba:00:55:22:40:bd:43:e5:da:e2:9d:9a:6d:e5:
         4b:1a:ed:62:08:8e:81:ec:8a:60:58:a7:06:a8:9d:62:e1:72:
         a3:13:bd:e3:4e:af:f2:48:93:63:20:a7:c9:14:09:46:12:80:
         5c:11:6e:b8:c3:25:26:b4:d8:7d:1d:73:cd:44:c3:72:1b:37:
         6c:bd:ed:b2:88:e6:69:de:24:9e:62:c9:08:0a:b3:4a:69:60:
         bd:24:7d:f5:6a:bf:ab:85:5e:84:4a:c7:e1:3e:9f:0a:cd:c9:
         9c:e4:68:f9:b7:fe:5d:e1:35:2a:07:ab:bd:b2:fe:31:69:b4:
         c4:c0:2a:fd:ff:91:57:e2:74:c8:e0:2c:4a:d4:bd:ab:c9:f4:
         03:2c:23:f3:b0:65:8f:06:0d:4f:06:6f:26:37:33:28:9c:c9:
         7d:7f:e0:5f:9a:fa:ab:0a:77:86:78:c4:51:7e:cb:58:13:5e:
         7c:c0:4a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:47:17 2024 by rpki-client on console-fra.rpki-client.org