Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/d6d07e8f-2d94-3390-a310-5c649e309887.roa
File:                     d6d07e8f-2d94-3390-a310-5c649e309887.roa (raw, json)
Hash identifier:          Bu/mzhi7tvZ3LxQQq7z4ebYCg/hFsnFRbZLxrQtAF6A=
Subject key identifier:   B4:07:D5:D9:44:CD:F6:1E:63:D0:BD:C0:FD:E5:6A:80:0E:94:31:76
Certificate issuer:       /CN=3f67eb88-a5d4-466c-9bba-adafc57cf4e6
Certificate serial:       010D0C9F432858458C6DD1CE5F078F68EB4AED00
Authority key identifier: BD:0D:FE:A8:F2:BC:A0:1C:A2:35:E2:8A:C8:A6:57:4A:C2:C5:36:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/d6d07e8f-2d94-3390-a310-5c649e309887.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     399568
IP address blocks:        2602:fc6f::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:d1:ce:5f:07:8f:68:eb:4a:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f67eb88-a5d4-466c-9bba-adafc57cf4e6
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=41a686cb-a3bc-4335-9155-2a85794de6bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:14:9c:7b:19:5a:37:0a:66:0c:ea:b9:55:54:
                    75:0a:6d:86:af:7e:8b:2a:06:77:ca:25:79:2c:bb:
                    22:1e:3e:a2:0a:b7:c7:90:61:90:6c:66:0a:2a:7e:
                    9a:cd:bd:ad:bf:91:f4:fe:28:b7:ee:db:a9:5b:48:
                    77:9a:69:ac:70:de:eb:3b:67:7b:6a:b1:6b:bf:92:
                    97:42:33:65:f2:bc:8c:3a:6f:1e:9b:33:c7:49:ab:
                    93:ec:ab:c4:75:c1:0b:03:fc:6e:07:20:ec:9c:a2:
                    99:db:02:2a:b1:ac:fe:56:8b:6b:98:45:40:99:bc:
                    23:f5:b7:5f:57:d7:75:d6:93:b1:23:4e:6b:80:95:
                    a8:a7:ea:71:59:c5:a6:86:ed:f0:c9:5b:1f:07:2f:
                    4b:28:0a:35:13:f4:77:c6:8f:08:39:d8:e9:8f:40:
                    db:66:66:9b:ed:9b:3c:d9:a1:99:d7:66:c6:08:22:
                    18:3c:8c:a1:4f:e0:2f:eb:32:8f:28:6a:6b:2e:a8:
                    5d:87:fa:6c:f4:4c:41:93:f4:0d:9a:42:4d:75:75:
                    01:17:a2:7b:e2:37:db:36:04:d2:32:49:73:84:3b:
                    cf:70:2c:62:f8:df:bc:34:7a:8a:ab:8d:3d:a0:b6:
                    4e:5d:83:ec:bb:5b:36:f5:62:3a:28:5e:8a:47:00:
                    cf:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:07:D5:D9:44:CD:F6:1E:63:D0:BD:C0:FD:E5:6A:80:0E:94:31:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/d6d07e8f-2d94-3390-a310-5c649e309887.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.crl

            X509v3 Authority Key Identifier:
                keyid:BD:0D:FE:A8:F2:BC:A0:1C:A2:35:E2:8A:C8:A6:57:4A:C2:C5:36:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc6f::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:86:4b:3c:5b:af:90:41:70:bd:cf:b3:d4:2a:0d:25:74:d9:
         78:e3:96:c3:f8:64:08:06:2c:ba:90:6e:44:14:71:48:c1:09:
         ed:c4:d1:29:3a:99:2f:64:fc:3b:2e:01:16:ad:60:00:7e:74:
         da:db:80:10:47:6f:c2:ee:01:9e:4b:cb:ae:e4:fc:80:bf:1a:
         11:3f:68:e6:9b:9d:12:13:df:a8:42:32:34:1f:aa:78:49:cc:
         80:72:d8:e4:d4:e0:54:f6:09:91:92:19:eb:28:f5:3c:c5:2b:
         4c:0c:c8:53:81:d7:f3:93:27:e8:1c:bf:54:e3:84:7b:66:75:
         98:00:9a:e4:23:17:c4:1d:5a:1b:ee:5b:72:88:a9:4a:28:0c:
         2b:3d:68:d0:eb:73:03:39:46:e0:4f:aa:ee:c9:39:dd:f3:25:
         7d:a6:f8:b6:92:74:f7:35:4f:b7:b7:35:37:a8:2e:c6:5e:b6:
         54:f6:f3:98:d9:8f:ba:c1:bb:3b:0a:11:90:25:78:b4:a7:96:
         d9:60:a5:a3:91:45:fa:bf:3b:fa:7c:bd:ef:cd:39:b5:3d:1a:
         e9:3e:0a:95:2c:34:74:4a:de:c6:c9:d7:c5:66:e3:02:32:87:
         67:df:a0:3b:d3:e3:08:20:30:94:42:c3:79:a7:d9:85:81:4f:
         0c:cd:96:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 01:46:35 2024 by rpki-client on console-ams.rpki-client.org