Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/a29c28fc-fb21-391a-b82f-5b79a7d67677.roa
File:                     a29c28fc-fb21-391a-b82f-5b79a7d67677.roa (raw, json)
Hash identifier:          DOJTZHyqmxD2zRDVNL4ABysUTPzlIBI/huRv+5j9XpQ=
Subject key identifier:   75:51:B8:99:F0:F8:23:E4:D5:6B:51:E0:AE:5C:4C:D6:2A:15:78:F0
Certificate issuer:       /CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb
Certificate serial:       010D0C9F43285845E729247D28F6F8AD8B8D9980
Authority key identifier: 3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/a29c28fc-fb21-391a-b82f-5b79a7d67677.roa
Signing time:             Fri 17 May 2024 13:00:34 +0000
ROA not before:           Fri 17 May 2024 13:00:34 +0000
ROA not after:            Thu 15 Aug 2024 13:00:34 +0000
asID:                     32595
IP address blocks:        2602:f96c::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e7:29:24:7d:28:f6:f8:ad:8b:8d:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb
        Validity
            Not Before: May 17 13:00:34 2024 GMT
            Not After : Aug 15 13:00:34 2024 GMT
        Subject: CN=5c8b415d-560b-44b4-ad96-63b0c9e0c7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e5:cb:7a:95:53:44:7e:c1:ac:a8:fa:a6:83:
                    60:6b:59:fb:8f:1b:fb:b0:f8:e0:13:95:ee:a0:61:
                    6b:7d:f0:2a:be:a7:df:2f:8f:89:f8:ce:e4:dd:92:
                    e9:ce:9f:be:7e:d4:1b:40:2b:51:ce:56:a4:cc:89:
                    64:f3:98:36:74:3a:5a:21:0d:e2:28:a5:35:3c:4a:
                    71:6a:0f:28:0e:21:dc:e8:c3:4c:85:c4:18:5b:8b:
                    72:fc:61:29:fc:88:77:6b:8c:e5:fb:9d:44:b9:a4:
                    96:f6:37:40:33:36:08:0b:68:ce:15:5e:8a:3e:69:
                    14:5d:87:a0:75:e2:cf:6f:b0:e5:be:ee:05:44:8a:
                    68:83:a6:f0:3d:d9:be:88:20:cd:65:8f:3f:fa:70:
                    ad:d3:8e:26:01:37:bc:86:5b:37:d9:5f:3f:7d:2d:
                    5a:b4:01:a3:ee:84:78:cc:1f:be:66:7a:31:22:31:
                    b1:a4:f4:4e:e6:c6:8f:0d:78:4b:94:6d:dd:88:1e:
                    83:a6:ef:5b:ee:2f:02:24:5f:2c:1a:c0:a6:da:cc:
                    e4:51:52:f1:f1:8c:54:34:a6:84:03:d7:4c:76:49:
                    22:7a:a0:99:b5:83:79:42:86:ed:21:92:5d:36:c1:
                    39:98:2f:cd:e4:55:92:2e:85:c7:ce:ae:9b:a1:a3:
                    f8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:51:B8:99:F0:F8:23:E4:D5:6B:51:E0:AE:5C:4C:D6:2A:15:78:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/a29c28fc-fb21-391a-b82f-5b79a7d67677.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl

            X509v3 Authority Key Identifier:
                keyid:3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:97:6f:6b:50:8b:2f:52:94:b3:20:d4:14:88:c6:8c:90:ad:
         01:48:6c:2e:99:ea:6b:50:e2:73:61:5e:3f:83:fe:c1:c4:ba:
         e6:2b:e7:67:c8:60:42:70:ba:68:47:8e:dd:95:d7:4d:90:2b:
         63:21:8f:87:4d:fe:d5:59:de:17:de:56:ed:a6:8f:66:24:c9:
         77:07:83:71:3c:18:c9:1c:4f:57:03:60:0a:de:b3:99:b0:c7:
         53:0e:c9:71:59:1b:0a:31:ab:81:01:23:02:f4:d8:0e:b6:f5:
         4b:3a:ba:2b:79:69:8e:d4:40:71:84:fb:69:c8:1b:9d:5a:17:
         85:e5:c5:f0:6c:15:82:f7:4e:61:6a:57:85:9d:a9:bd:ec:bb:
         d0:fa:2b:65:6a:9f:27:10:6e:88:a1:bd:cc:b6:dd:ef:00:8d:
         fa:ff:66:4e:fb:d6:58:39:67:af:3d:54:0a:59:2e:50:c9:28:
         19:38:99:61:30:55:a6:c8:73:30:fc:59:de:4a:fc:77:f2:bf:
         09:71:09:2b:88:dc:53:5b:cf:a0:fd:5b:08:5f:c1:99:24:76:
         6a:d7:b5:ea:68:89:4d:0c:bc:e9:96:89:eb:10:f7:66:2b:46:
         98:ab:81:48:e9:c5:69:08:bf:58:ad:02:c9:26:d2:89:15:99:
         04:ca:7d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:05:34 2024 by rpki-client on console-ams.rpki-client.org