Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/206a6c78-95a4-3e58-8974-0fb73c0c5bf1.roa
File:                     206a6c78-95a4-3e58-8974-0fb73c0c5bf1.roa (raw, json)
Hash identifier:          kuFbvVCao6b2u161N9qRUW/X4HnuPcfMDPUATErQ29Y=
Subject key identifier:   B7:D6:46:3B:B8:43:73:77:EA:43:73:20:52:B9:6E:CD:50:EF:9D:4B
Certificate issuer:       /CN=58fcef31-bc61-4217-a648-2d5bb00c93a9
Certificate serial:       010D0C9F43285845C5A8E0477647E49BF199AE00
Authority key identifier: 54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/206a6c78-95a4-3e58-8974-0fb73c0c5bf1.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     19281
IP address blocks:        2602:807:e000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:e0:47:76:47:e4:9b:f1:99:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58fcef31-bc61-4217-a648-2d5bb00c93a9
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=3f0fa01b-6968-41db-93da-ea869409519f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:81:3c:ea:7a:81:e1:98:1f:4f:30:ee:a8:57:
                    7f:52:fe:a2:5e:99:91:ae:20:65:d4:68:53:aa:64:
                    5e:84:ae:ee:36:d4:b8:29:24:79:ef:41:c4:a2:95:
                    51:ee:fa:a6:ab:3d:85:86:76:17:8b:31:29:8a:b6:
                    a7:26:f2:07:86:72:0f:1c:c0:a2:59:49:a3:7a:b3:
                    9f:b7:c1:c2:cd:92:c6:bd:f2:e6:f9:82:5c:9c:a0:
                    b4:c5:24:47:9a:63:dc:48:7d:2d:bf:06:0a:2c:70:
                    f4:58:37:cf:74:ad:cc:73:4f:13:8d:4f:b0:c9:04:
                    fc:0a:d0:95:83:28:45:3a:25:e1:c8:f1:0a:47:13:
                    98:17:94:8d:3c:42:4d:56:a9:ea:07:5a:dc:65:d3:
                    35:3d:4a:13:e9:6f:fe:ba:a4:92:33:c1:26:86:e0:
                    89:9a:3d:58:f1:2d:fe:b5:86:92:1b:72:47:c1:38:
                    5f:57:fb:e2:cd:03:09:14:e6:11:d3:3f:3b:b3:a5:
                    3d:e5:0d:95:b0:40:0a:b2:f0:f8:e0:38:72:36:bd:
                    3c:fc:70:8c:57:06:26:0e:ba:62:ca:d7:fb:69:a4:
                    e0:e0:53:d6:4b:cb:cd:b3:a9:4f:3f:8d:01:73:5a:
                    0e:71:b0:3e:2b:ce:80:10:2d:4e:f0:04:f3:c5:0e:
                    6b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D6:46:3B:B8:43:73:77:EA:43:73:20:52:B9:6E:CD:50:EF:9D:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/206a6c78-95a4-3e58-8974-0fb73c0c5bf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl

            X509v3 Authority Key Identifier:
                keyid:54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:807:e000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:5e:b9:ad:a7:a5:3a:5a:1a:7b:1b:48:7c:25:31:70:91:a8:
         a5:24:1d:df:b0:d7:45:a2:90:b3:6a:9f:57:91:ec:5e:f4:21:
         a8:8d:f9:1e:02:25:4b:37:da:72:54:c9:3a:6c:a1:88:da:8b:
         f7:05:ba:19:ce:c8:81:69:c5:99:0e:f6:16:07:ca:6e:c4:c6:
         a8:61:71:09:72:da:ee:53:65:24:63:19:ad:cd:74:24:99:d1:
         84:6c:fc:b4:9c:08:ab:43:08:a0:28:4b:f0:a5:c1:53:fa:4b:
         85:18:50:bf:e5:a8:d0:23:ae:d1:59:6b:73:d8:7c:c1:9a:eb:
         0e:1d:cb:20:17:6e:8e:2b:59:01:e9:90:48:ba:35:af:f8:20:
         72:18:25:cc:c7:89:c7:9d:a2:e6:45:1d:4d:50:0e:b5:8b:55:
         7c:81:47:bb:e1:76:9a:c2:84:b1:a1:88:4d:28:73:b7:12:76:
         be:40:64:c8:57:3d:8a:bd:38:04:78:d0:04:d4:c1:da:39:97:
         83:ad:ab:3c:3d:33:a7:64:91:93:de:05:ef:b2:ff:6b:50:8a:
         0e:1a:2b:57:82:0a:0c:0c:78:1f:29:5b:7f:7b:f6:18:5f:b9:
         b2:89:34:b2:b5:53:09:2f:82:82:be:4b:6f:ad:d7:06:2b:ba:
         3a:e6:cf:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 21:04:13 2024 by rpki-client on console-fra.rpki-client.org