Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/7c21021d-b3c6-3128-89cf-35ee6d572d09.roa
File:                     7c21021d-b3c6-3128-89cf-35ee6d572d09.roa (raw, json)
Hash identifier:          OrxlxDdS6mnv6aX/zVAmS4jGelUmMSoGU7ajbB+Yi10=
Subject key identifier:   60:21:C6:93:38:52:13:50:EC:21:B7:9C:BA:9C:F9:1E:BA:3F:C0:59
Certificate issuer:       /CN=0ae79a05-4455-41de-a4a5-312c5d617c94
Certificate serial:       010D0C9F4328584589A31D372A624007D72C75EB
Authority key identifier: 7D:08:94:80:BC:CF:85:CB:69:22:7A:85:48:0B:DC:1E:E9:C9:D9:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/7c21021d-b3c6-3128-89cf-35ee6d572d09.roa
Signing time:             Sun 14 Apr 2024 01:00:24 +0000
ROA not before:           Sun 14 Apr 2024 01:00:24 +0000
ROA not after:            Sat 13 Jul 2024 01:00:24 +0000
asID:                     400918
IP address blocks:        2602:f999::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/0ae79a05-4455-41de-a4a5-312c5d617c94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/0ae79a05-4455-41de-a4a5-312c5d617c94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:89:a3:1d:37:2a:62:40:07:d7:2c:75:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ae79a05-4455-41de-a4a5-312c5d617c94
        Validity
            Not Before: Apr 14 01:00:24 2024 GMT
            Not After : Jul 13 01:00:24 2024 GMT
        Subject: CN=62c75835-37b3-4ad3-a7b0-2d84116ea8e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cf:1f:50:90:20:a3:c5:92:c5:9a:80:5d:f2:
                    66:83:dc:1d:d3:5f:40:4b:fb:5f:1f:c3:0e:2c:11:
                    e5:39:98:e8:7e:7d:ff:0b:d5:db:5d:83:07:c8:ae:
                    e1:c5:1e:b8:e9:6d:1d:00:6c:8e:30:70:ce:0a:e8:
                    97:93:fd:e5:15:d0:9f:d9:be:45:de:46:56:e1:fa:
                    03:8c:a8:40:97:7b:1b:65:c2:49:1b:c3:b5:37:2c:
                    38:7f:a4:65:ff:39:e4:5c:dd:11:be:3f:01:31:62:
                    25:8f:e9:7f:99:cb:6d:90:df:5a:56:ab:05:9a:d0:
                    99:7e:5b:c9:e7:da:24:7c:e4:8a:02:78:ea:8a:f4:
                    cc:e0:90:b6:8d:72:ae:f9:88:00:bc:e6:66:c8:1c:
                    70:df:3a:13:05:9e:e6:8b:38:8d:b6:c1:14:06:8a:
                    f2:77:e6:08:ef:e3:1f:47:68:77:cb:ca:97:d9:d9:
                    e2:60:8d:4d:4c:8e:25:2b:29:61:df:16:e2:c7:0a:
                    5e:47:3a:c9:dc:b9:8e:2f:99:a0:bd:a9:ca:41:d0:
                    34:cb:4e:c0:ff:4d:1d:f3:3f:24:de:3f:d3:57:b2:
                    cb:85:03:8c:40:87:3a:bf:49:3e:1f:6c:ae:0a:f6:
                    55:22:b1:61:94:7d:92:83:39:cc:bc:4d:b5:c4:e7:
                    a6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:21:C6:93:38:52:13:50:EC:21:B7:9C:BA:9C:F9:1E:BA:3F:C0:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/7c21021d-b3c6-3128-89cf-35ee6d572d09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/0ae79a05-4455-41de-a4a5-312c5d617c94.crl

            X509v3 Authority Key Identifier:
                keyid:7D:08:94:80:BC:CF:85:CB:69:22:7A:85:48:0B:DC:1E:E9:C9:D9:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f999::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:bb:70:64:6b:b7:7c:9c:48:5a:54:9b:7d:a5:f6:e1:b9:ff:
         7b:5f:38:ff:9b:d3:8d:64:57:f3:7c:c9:3a:13:8a:f0:73:ed:
         07:2c:71:1f:c9:c3:f6:f7:e7:82:07:85:a9:9a:4c:76:bf:af:
         ba:5f:4f:e8:79:33:16:4f:17:db:8f:51:63:94:5d:1f:4b:d3:
         e2:8f:19:67:5e:8e:e3:b3:5f:48:66:4f:e5:d9:ce:91:00:53:
         ef:fc:f6:58:6f:13:53:8a:fc:5b:dc:e7:f2:95:a8:23:d9:fd:
         7f:f1:09:ca:0d:c3:4f:43:ed:2a:15:87:d4:2c:83:94:cd:96:
         40:d7:0a:05:38:37:5b:fe:43:d9:e8:a7:db:ff:28:aa:20:b0:
         d9:80:eb:5f:f3:21:12:52:be:54:49:6b:43:9d:34:92:07:70:
         f6:4e:db:b6:c3:f3:14:86:be:b3:cd:a9:c2:7c:b4:62:79:bf:
         82:56:b3:e9:e7:13:3b:89:e1:ab:de:a5:1d:3b:c9:f7:ee:83:
         35:d6:53:80:85:db:83:33:42:d8:92:d6:24:ca:42:e8:66:bf:
         58:1c:df:6b:a0:6b:c6:5c:0f:55:8c:20:f6:45:88:12:17:c6:
         af:64:f9:aa:b9:00:04:bb:11:1d:b9:e1:35:58:8c:9c:c4:a5:
         b8:aa:d1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 17:30:58 2024 by rpki-client on console-ams.rpki-client.org