Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a/e45b10d4-fe87-3370-ba20-d4f02f5d93f0.roa
File:                     e45b10d4-fe87-3370-ba20-d4f02f5d93f0.roa (raw, json)
Hash identifier:          VwCaLRSjxAzNTSU2HcMIXRekhe07Ya3TumVpA0EPvGs=
Subject key identifier:   CB:2D:7C:B9:59:2A:4D:79:3F:C8:87:31:60:BD:CA:30:5C:E2:18:EC
Certificate issuer:       /CN=fc4f47a4-5d19-4615-bc02-3360aba2322a
Certificate serial:       010D0C9F43285844EECFF80391C59AD80486AC80
Authority key identifier: A1:B5:FF:00:D7:55:06:57:CE:6A:7C:7D:5D:50:1C:C3:D5:93:1B:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a/e45b10d4-fe87-3370-ba20-d4f02f5d93f0.roa
Signing time:             Sun 18 Feb 2024 14:00:30 +0000
ROA not before:           Sun 18 Feb 2024 14:00:30 +0000
ROA not after:            Sat 18 May 2024 13:00:30 +0000
asID:                     212276
IP address blocks:        2602:fb40::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a/fc4f47a4-5d19-4615-bc02-3360aba2322a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a/fc4f47a4-5d19-4615-bc02-3360aba2322a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ee:cf:f8:03:91:c5:9a:d8:04:86:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc4f47a4-5d19-4615-bc02-3360aba2322a
        Validity
            Not Before: Feb 18 14:00:30 2024 GMT
            Not After : May 18 13:00:30 2024 GMT
        Subject: CN=a1635b91-e6a1-471d-a128-b9daf34671af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d5:a7:62:86:84:ca:cd:9e:08:39:aa:9e:b1:
                    f5:e4:32:b7:98:f4:32:13:1a:55:bc:88:ec:ab:c4:
                    d4:e0:54:a6:96:76:7f:40:f3:86:87:e8:bd:da:21:
                    23:51:6f:ba:a6:1d:ca:dc:ec:33:0b:8d:e2:a5:a7:
                    29:01:b9:7d:cd:a3:32:20:ed:a2:b4:c1:a4:56:4a:
                    e4:d6:c3:4a:a4:11:13:d3:2e:d4:3c:82:2a:5c:ea:
                    83:ba:2a:75:a1:a3:50:a4:a4:00:2b:13:38:b8:ba:
                    aa:66:bd:a8:7f:29:62:78:db:e0:3c:aa:b5:ea:c6:
                    f0:21:84:24:05:ee:fc:2f:54:8d:eb:02:24:60:0c:
                    6e:1a:5d:f1:c5:58:d2:54:a5:03:7e:d8:30:aa:89:
                    fc:05:46:50:f4:55:ec:b4:f3:fc:a1:54:62:11:d5:
                    b9:40:4c:80:f4:3a:ea:1c:47:40:c6:a6:bf:c6:39:
                    12:f7:b7:3b:ef:7e:3a:3c:41:cc:2f:77:3a:87:6b:
                    df:4c:0e:f5:8c:48:50:5c:53:81:92:80:a0:07:dc:
                    c1:da:bd:05:10:f7:68:1e:86:48:f7:12:e5:54:0f:
                    8e:4d:c6:62:33:f5:f9:08:dd:6b:00:81:9d:f4:6d:
                    5b:12:1e:22:83:e8:cb:1a:df:fa:d8:9e:e9:6b:9e:
                    83:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:2D:7C:B9:59:2A:4D:79:3F:C8:87:31:60:BD:CA:30:5C:E2:18:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a/e45b10d4-fe87-3370-ba20-d4f02f5d93f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a/fc4f47a4-5d19-4615-bc02-3360aba2322a.crl

            X509v3 Authority Key Identifier:
                keyid:A1:B5:FF:00:D7:55:06:57:CE:6A:7C:7D:5D:50:1C:C3:D5:93:1B:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb40::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:cd:29:90:a6:73:3c:c2:ca:5e:34:bf:bc:34:42:71:15:c6:
         74:5a:71:48:8f:86:ed:bd:80:04:67:94:5a:94:34:86:55:ed:
         a6:c0:da:32:5c:97:0d:5f:e4:27:e2:4c:ce:d1:4a:1f:29:9d:
         ec:c0:37:08:94:ea:dc:ff:95:1a:57:62:5d:db:6c:40:55:ef:
         3e:73:e9:ba:10:d3:ed:78:db:62:76:ca:7c:97:e9:7d:19:42:
         e0:60:e5:79:81:94:19:bb:72:59:c6:d1:1f:cf:dd:2b:12:e3:
         25:38:33:c0:a2:8f:86:b6:70:70:9a:62:7e:0c:02:ec:2e:2e:
         14:cd:4b:dc:5a:1c:9e:14:11:2b:c3:47:80:be:82:fb:55:6e:
         4f:47:54:ee:6a:f8:ae:d5:12:bf:1a:64:8e:de:17:5d:ae:62:
         c5:1f:00:f2:68:74:78:a8:73:c9:ef:77:34:df:a9:ee:ad:f7:
         82:95:e8:57:7c:d9:01:a9:93:83:38:d4:ec:04:d1:5b:0b:7e:
         db:0a:90:a3:40:0d:58:56:2d:5d:16:6e:6f:0b:a4:6a:37:d9:
         75:9d:87:1e:a2:fb:46:e4:00:0a:62:2b:3b:a7:78:3a:f7:3b:
         0f:5b:e4:2e:fd:ec:59:c3:ad:18:92:9a:e7:25:ba:25:c9:d5:
         14:b8:b7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:06:04 2024 by rpki-client on console-ams.rpki-client.org