Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/b39ed084-6335-3303-91cb-d4bd54f999ee.roa
File:                     b39ed084-6335-3303-91cb-d4bd54f999ee.roa (raw, json)
Hash identifier:          04gcyzmdytGa9BlMZZDyrSVJNzDfIVYZ5fSnbIubI/M=
Subject key identifier:   AF:2F:56:3A:BB:38:8B:D5:3B:CF:D1:AD:5E:6A:AE:06:6A:53:B1:65
Certificate issuer:       /CN=2fea4f6a-bb4e-46be-b327-330bf8f7e209
Certificate serial:       010D0C9F43285841E46D901BDD89F630B482BC80
Authority key identifier: 46:B8:BD:76:5E:8D:0E:C9:9A:1D:62:0D:0B:0E:2D:E8:BE:4E:D7:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/b39ed084-6335-3303-91cb-d4bd54f999ee.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Mon 03 Jul 2023 08:22:58 +0000
asID:                     20473
IP address blocks:        2602:810:6008::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 May 2023 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:90:1b:dd:89:f6:30:b4:82:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fea4f6a-bb4e-46be-b327-330bf8f7e209
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul  3 08:22:58 2023 GMT
        Subject: CN=5d3a13ac-9c40-4c72-a523-cff1abca1e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ee:f0:8e:57:50:50:5e:ab:75:b2:44:41:7b:
                    40:30:04:2e:a6:e4:4c:90:17:a2:d5:75:23:d8:9c:
                    cc:fe:b5:96:21:6f:0b:21:34:04:35:f9:55:79:64:
                    9d:af:6e:e0:ee:b0:21:ab:2a:5c:41:01:d5:10:32:
                    84:4a:fb:5c:d1:1f:83:b7:76:48:02:7a:a7:e3:1d:
                    4e:7c:06:e6:36:1f:e9:f8:50:8b:44:8d:11:bb:36:
                    9a:33:10:59:22:ee:f3:3a:12:d3:ee:21:9d:92:59:
                    8a:b5:e9:63:82:a5:a1:33:07:2b:d1:ad:27:60:3a:
                    56:31:45:5b:d4:39:30:2e:0e:46:3e:bb:9f:f5:36:
                    e1:00:67:c1:d7:86:52:0a:86:f2:c4:66:35:45:76:
                    2f:b9:19:cf:51:1a:dd:09:33:6a:a6:20:39:9d:fc:
                    ca:d0:52:55:f9:de:c2:51:4b:72:42:9c:9d:6a:2c:
                    53:99:a7:26:50:8e:a8:0e:40:05:ad:fc:7f:b4:ae:
                    c9:a2:91:68:15:9c:9c:70:39:c3:2d:68:30:bc:7e:
                    d3:da:95:a2:25:74:37:56:c5:05:69:99:0f:49:c1:
                    11:b3:7d:5b:0a:64:9e:40:a5:85:2a:55:e1:c7:82:
                    2d:18:86:74:07:9f:94:45:11:0f:a1:22:1a:db:4a:
                    34:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                AF:2F:56:3A:BB:38:8B:D5:3B:CF:D1:AD:5E:6A:AE:06:6A:53:B1:65
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/b39ed084-6335-3303-91cb-d4bd54f999ee.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.crl

            X509v3 Authority Key Identifier: 
                keyid:46:B8:BD:76:5E:8D:0E:C9:9A:1D:62:0D:0B:0E:2D:E8:BE:4E:D7:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:810:6008::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:bd:d1:fa:f9:ef:1b:5c:69:90:09:7c:41:ff:15:11:17:18:
         30:c2:28:d4:7c:96:ae:17:72:17:94:9a:04:25:72:5b:18:55:
         08:74:a5:a8:e5:48:34:7d:fe:0f:43:12:23:da:61:1d:04:bf:
         ae:94:de:2c:3b:e3:bb:f0:3d:f8:bb:bc:dc:90:c2:af:6d:17:
         ce:0e:4b:b0:57:90:4d:a1:93:c9:9d:7f:d8:db:c5:de:0f:3d:
         80:99:e0:eb:f0:cc:e7:e6:ea:3b:50:4f:80:d5:91:96:cb:e7:
         6c:5c:35:f5:62:cb:e3:64:11:fd:48:d2:90:06:82:17:57:c9:
         fe:3d:2a:44:f1:41:6d:7e:ae:b6:f5:ef:e2:e8:77:1b:a4:36:
         9a:0b:d1:5b:a2:b7:ce:48:10:0a:93:1e:ef:17:6b:0a:bf:39:
         5c:93:e6:89:34:c7:db:b4:31:c0:6c:3f:5b:07:36:d2:6a:30:
         62:a0:b8:dc:14:18:24:eb:c4:41:99:57:e0:4e:e7:57:cc:4f:
         39:9f:e3:64:7a:15:eb:48:b0:de:0a:1e:e5:f2:89:0c:71:ab:
         18:de:13:35:5a:48:95:ce:86:99:61:73:97:f2:1b:85:1c:57:
         a7:ee:1a:02:02:6d:fa:8d:9a:dd:f7:a6:88:0e:f7:67:30:bb:
         af:ee:2b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 15 18:56:43 2023 by rpki-client on console-ams.rpki-client.org