Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/6cd0bba9-129b-39b1-b942-efb9d16b311f.roa
File:                     6cd0bba9-129b-39b1-b942-efb9d16b311f.roa (raw, json)
Hash identifier:          +v7AUVr/dGy6fL9+9BgY6v5sikMxSQG2t1kVxykeA2M=
Subject key identifier:   9F:A8:2E:BB:B1:BE:5B:FE:FE:0F:C2:85:21:F7:EA:EA:16:69:58:39
Certificate issuer:       /CN=0de37d17-2664-4c85-9be4-a35baf0fd2b3
Certificate serial:       010D0C9F43285844E0DA8A655C1DCA225B8C2540
Authority key identifier: 4D:73:9C:88:EF:4B:17:58:90:09:43:09:76:8C:0E:3B:F8:65:EB:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/6cd0bba9-129b-39b1-b942-efb9d16b311f.roa
Signing time:             Tue 13 Feb 2024 14:00:29 +0000
ROA not before:           Tue 13 Feb 2024 14:00:29 +0000
ROA not after:            Mon 13 May 2024 13:00:29 +0000
asID:                     400490
IP address blocks:        2602:fbc2::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e0:da:8a:65:5c:1d:ca:22:5b:8c:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0de37d17-2664-4c85-9be4-a35baf0fd2b3
        Validity
            Not Before: Feb 13 14:00:29 2024 GMT
            Not After : May 13 13:00:29 2024 GMT
        Subject: CN=936cfd3c-e998-4431-ade6-b155c36e0bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8f:18:bd:6a:23:f9:58:22:8d:a7:72:dd:3c:
                    be:1a:eb:4c:8c:0c:63:a4:b9:ed:4f:3a:8a:c8:d7:
                    73:74:07:e0:b4:0c:e5:03:9b:6f:22:64:83:84:86:
                    bc:76:c7:e3:d1:ea:07:c5:d3:09:af:75:76:6f:05:
                    91:00:5f:a1:28:65:c7:5c:0a:0f:90:8c:38:f7:a4:
                    fe:cb:b1:64:d3:4a:26:ae:b3:cc:5b:18:70:8b:67:
                    e6:75:f6:bf:07:ba:fe:0f:57:ee:2d:1b:52:d7:16:
                    d9:7a:56:20:fb:78:8c:07:13:d8:75:59:5e:bc:a8:
                    1c:5b:3f:20:ad:6e:d3:ba:33:ed:ef:93:e6:a8:50:
                    14:06:73:a3:fe:9c:3e:34:f2:e7:d9:6f:d4:99:ff:
                    17:85:06:ae:1d:4f:d6:8a:c6:84:7b:2d:ec:51:01:
                    33:f7:a2:e8:db:a2:e2:1b:0d:36:63:d1:13:7b:84:
                    1b:94:e9:d2:7b:06:36:9f:21:52:ea:79:bc:da:3c:
                    40:78:41:86:7b:7e:09:c5:5b:41:f7:45:b4:2b:94:
                    c8:3a:68:3b:34:79:8d:33:66:4b:3b:57:f5:46:ff:
                    db:2f:f0:4f:ab:64:97:8d:17:79:e6:83:f3:6f:4e:
                    57:a7:7c:22:93:b3:82:26:d7:bb:00:8a:19:bf:9e:
                    c5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A8:2E:BB:B1:BE:5B:FE:FE:0F:C2:85:21:F7:EA:EA:16:69:58:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/6cd0bba9-129b-39b1-b942-efb9d16b311f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.crl

            X509v3 Authority Key Identifier:
                keyid:4D:73:9C:88:EF:4B:17:58:90:09:43:09:76:8C:0E:3B:F8:65:EB:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbc2::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:3b:10:cd:52:79:05:28:0c:b3:56:2a:d3:44:30:c8:eb:57:
         a7:ae:4c:d8:7b:9f:32:fc:eb:8c:d6:0d:45:e3:cb:f9:81:1a:
         8f:37:c6:94:e2:b4:9d:78:27:2d:05:c3:46:fc:d8:a3:85:10:
         b2:93:18:fe:a7:a9:de:94:c0:20:18:cc:7e:fd:1d:2c:98:2a:
         db:c8:f2:cc:08:52:86:db:95:29:a5:85:27:78:9c:63:8f:a2:
         3c:e4:44:5c:e2:c8:b5:33:42:0e:4e:68:0b:17:63:ba:ba:76:
         b1:19:9f:66:78:15:29:fd:2b:85:1e:d5:ab:fa:dc:45:bc:f8:
         07:6a:1f:db:53:73:35:52:04:9a:da:f9:b7:fc:1d:51:a3:6c:
         44:13:04:b2:10:e8:13:7e:bb:54:5d:81:e4:70:b7:95:ec:c1:
         1b:91:a9:20:a7:d5:0d:cc:95:28:d7:e9:ac:32:01:96:fb:38:
         90:03:6c:63:ec:6f:d5:d8:74:a2:b1:b8:3c:1e:bd:09:c8:e5:
         1b:96:09:a6:ea:92:7c:1d:9c:0c:ac:a6:0c:75:b9:7d:ee:93:
         0d:16:df:92:65:f4:a2:09:62:00:47:64:25:e8:48:42:fb:34:
         64:ce:a7:44:4d:25:d1:20:92:44:33:58:d1:df:b4:4a:9c:34:
         66:63:6d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 06:39:43 2024 by rpki-client on console-fra.rpki-client.org