Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/ad21d0e5-9b1e-3eab-9a5b-b8298a2e71cf.roa
File:                     ad21d0e5-9b1e-3eab-9a5b-b8298a2e71cf.roa (raw, json)
Hash identifier:          Ftgz2Zc6Ivox98Uz1ltJykRaxfTWpQFOtMP4BZtM+2M=
Subject key identifier:   0A:7A:8B:4E:BA:5B:70:51:16:22:6D:6B:82:BA:26:6F:8C:79:03:7E
Certificate issuer:       /CN=04bd1965-5757-479c-b2af-44967b5e0539
Certificate serial:       010D0C9F43285844DE0FDD79A86E131050C98B00
Authority key identifier: B5:78:2D:55:7A:A0:51:AA:E0:15:64:BB:40:15:08:8D:34:54:FF:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/ad21d0e5-9b1e-3eab-9a5b-b8298a2e71cf.roa
Signing time:             Mon 12 Feb 2024 14:00:30 +0000
ROA not before:           Mon 12 Feb 2024 14:00:30 +0000
ROA not after:            Sun 12 May 2024 13:00:30 +0000
asID:                     400671
IP address blocks:        2602:fb7e::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/04bd1965-5757-479c-b2af-44967b5e0539.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/04bd1965-5757-479c-b2af-44967b5e0539.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:de:0f:dd:79:a8:6e:13:10:50:c9:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04bd1965-5757-479c-b2af-44967b5e0539
        Validity
            Not Before: Feb 12 14:00:30 2024 GMT
            Not After : May 12 13:00:30 2024 GMT
        Subject: CN=48a6f6be-13d0-40ee-80ea-a8cd2a27b1c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bf:f7:71:fa:67:c2:a6:d0:8a:94:dc:17:70:
                    c8:ec:56:35:91:a8:78:7e:20:7b:4c:04:3f:63:2a:
                    7d:3f:53:a2:cb:55:57:c2:9c:9e:cc:88:03:3c:fe:
                    cf:e2:a0:1f:23:9f:eb:40:fd:77:f0:e9:3c:7e:1b:
                    f4:97:51:47:eb:ed:7b:80:5e:b2:3d:1a:76:e5:35:
                    00:94:da:e7:d5:7b:ef:02:c6:46:de:72:db:35:2e:
                    6e:a2:e6:e6:45:a7:44:10:41:95:a7:b6:f0:d7:3c:
                    2a:85:62:64:6b:60:7c:31:d1:d2:2a:d1:b7:7b:25:
                    3e:81:bd:ae:c1:29:a0:99:77:ad:68:61:66:31:0a:
                    4c:ac:09:53:dd:2f:69:a1:65:c4:5c:a6:e0:d2:90:
                    ec:ae:fa:f8:7d:18:35:22:bc:96:4d:18:f0:27:9d:
                    b4:2c:c7:50:b2:f0:3b:6f:84:8d:a9:c6:ad:1a:dc:
                    98:df:79:5f:15:56:00:1c:fc:94:9e:28:d4:2a:49:
                    9c:e1:de:ff:ed:dc:10:da:6c:4c:3b:ce:3d:db:cd:
                    34:fe:d9:3d:a2:a1:24:36:b7:e5:c5:65:d7:f5:4d:
                    9a:52:1e:c8:ac:a6:73:b8:ed:02:2f:78:68:4c:58:
                    a1:31:03:da:37:58:d2:d2:b2:f8:84:b9:e7:f5:22:
                    57:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7A:8B:4E:BA:5B:70:51:16:22:6D:6B:82:BA:26:6F:8C:79:03:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/ad21d0e5-9b1e-3eab-9a5b-b8298a2e71cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/04bd1965-5757-479c-b2af-44967b5e0539.crl

            X509v3 Authority Key Identifier:
                keyid:B5:78:2D:55:7A:A0:51:AA:E0:15:64:BB:40:15:08:8D:34:54:FF:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb7e::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:a3:2e:d7:e1:b9:c5:d2:bd:3e:b4:58:89:ac:35:6c:96:98:
         ce:35:82:57:24:be:58:26:38:82:44:37:8d:80:ba:f3:0a:52:
         b2:92:50:e2:18:af:ff:96:f5:49:fd:fa:e6:e5:3e:ab:a9:30:
         37:0d:3e:e1:d2:f0:b7:96:1a:9a:87:e1:c2:10:66:30:aa:57:
         83:5a:09:94:02:a4:8d:37:c0:7c:3e:dc:60:0d:8f:c9:03:9f:
         ed:1e:d2:4b:f3:dc:b8:e0:7d:89:e2:e2:2d:11:f1:c0:c7:a6:
         82:37:02:a1:02:29:00:bf:0d:72:46:17:d1:9c:0d:25:df:3a:
         6a:55:53:87:cb:7f:f0:97:e7:05:99:bc:37:84:20:97:50:e6:
         26:8e:64:25:72:db:07:bb:2e:46:2d:e5:9e:ce:3c:36:dc:c0:
         61:66:f6:d4:05:e5:1e:1b:f6:3b:3c:b6:96:7e:54:b5:21:77:
         03:b3:d0:52:a3:e5:9a:12:bf:06:44:e5:80:f7:65:d4:d5:23:
         7c:ef:22:83:4b:2f:af:e4:ec:d1:ad:90:7b:1f:4b:2e:d5:e6:
         ec:82:59:b7:5d:2b:2d:1f:c8:1a:3a:ba:e5:b3:98:ae:49:0f:
         93:e2:db:a2:a3:01:6e:27:29:c9:97:6b:c3:57:ce:5f:34:9a:
         f7:f8:1d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:41 2024 by rpki-client on console-fra.rpki-client.org