Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/62ba1b80-1750-30cc-ae03-0ad2e1c4fff3.roa
File:                     62ba1b80-1750-30cc-ae03-0ad2e1c4fff3.roa (raw, json)
Hash identifier:          aYgHH4LPerukihvafxVJ8LgX+nt4iOBohKiNOHhwCds=
Subject key identifier:   46:9C:D8:DA:B8:B0:7F:B8:B8:87:BB:78:53:AE:B7:51:56:35:50:51
Certificate issuer:       /CN=ef1239e6-3ae7-43be-966b-2f5b9671c29d
Certificate serial:       010D0C9F432858453230DCCF13A04CAA7DE33580
Authority key identifier: FC:BD:1B:B2:8A:59:ED:B6:BB:54:9D:83:C9:CC:BC:AC:43:B7:B4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/62ba1b80-1750-30cc-ae03-0ad2e1c4fff3.roa
Signing time:             Wed 13 Mar 2024 17:14:57 +0000
ROA not before:           Wed 13 Mar 2024 17:14:57 +0000
ROA not after:            Tue 11 Jun 2024 17:14:57 +0000
asID:                     399525
IP address blocks:        2602:fc9e::/40 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:32:30:dc:cf:13:a0:4c:aa:7d:e3:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef1239e6-3ae7-43be-966b-2f5b9671c29d
        Validity
            Not Before: Mar 13 17:14:57 2024 GMT
            Not After : Jun 11 17:14:57 2024 GMT
        Subject: CN=7f26ba0f-6b2d-4d22-a781-6813bd1f6283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ec:f9:bc:0c:1b:56:bf:8d:c8:a4:46:b1:17:
                    6b:71:23:37:b6:85:53:62:2a:0c:ba:84:43:0a:70:
                    c1:29:f6:d2:fa:81:18:f2:bc:99:2b:3e:b1:ce:90:
                    45:50:28:18:e8:13:4d:16:b6:76:05:26:12:a0:7f:
                    57:f3:57:af:ce:98:4e:22:f0:60:df:0f:c7:17:b3:
                    12:09:70:17:a4:63:d3:8d:83:b8:f8:8e:67:70:ca:
                    ef:7f:53:96:90:77:51:16:65:0e:82:98:e6:5d:17:
                    14:a7:49:3e:f4:b8:b8:5b:49:30:15:9d:b6:4c:19:
                    a9:1b:43:4b:0a:a3:9c:b3:8c:c3:a1:fb:e1:7d:96:
                    9d:55:c9:68:cc:76:87:f5:fa:4e:fc:58:ae:c3:47:
                    4a:48:d2:57:ed:2a:41:13:83:ee:9a:ba:5a:20:07:
                    a5:f0:f4:8f:68:3a:d8:15:a3:c6:09:3a:c2:19:a3:
                    61:67:1b:66:ca:f3:f7:26:e5:7b:8d:f7:11:5f:14:
                    11:ea:c6:ed:dd:56:a7:0c:2b:ab:c6:57:18:28:79:
                    e6:aa:a4:63:67:c5:eb:1e:a1:1f:c6:07:70:d5:ad:
                    0e:7b:bf:66:0d:20:8c:33:54:e2:50:a1:61:7a:f5:
                    1c:36:d2:f4:04:37:9d:76:fb:6f:c4:5e:16:2c:56:
                    2a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9C:D8:DA:B8:B0:7F:B8:B8:87:BB:78:53:AE:B7:51:56:35:50:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/62ba1b80-1750-30cc-ae03-0ad2e1c4fff3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.crl

            X509v3 Authority Key Identifier:
                keyid:FC:BD:1B:B2:8A:59:ED:B6:BB:54:9D:83:C9:CC:BC:AC:43:B7:B4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc9e::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:6c:85:9a:f9:ea:e6:72:9a:2d:13:1c:51:02:49:a6:20:ef:
         a3:cf:66:b3:43:ce:de:ed:92:de:57:7e:4b:56:ef:d9:c7:dd:
         ca:a4:7c:92:31:08:57:e6:c4:c3:cf:0d:d9:03:f7:51:55:29:
         67:21:92:0d:29:7c:c8:2d:3e:e0:63:50:06:93:11:10:d8:7b:
         1c:54:f8:0d:3a:56:8b:01:2e:b3:05:b2:54:4d:4c:1a:1b:52:
         dc:02:4d:fd:de:5b:29:7e:23:98:1c:61:ba:02:e8:e8:1d:dc:
         f6:3f:50:93:e3:3f:f0:05:3b:a7:2b:4b:99:49:85:8c:fa:47:
         64:9e:51:2c:39:1e:9d:af:f7:bd:e9:a7:a9:de:f3:88:47:bf:
         80:ed:40:23:86:36:14:21:c6:23:6d:8a:b2:d6:f4:8d:4e:03:
         d1:59:7d:fd:e6:8f:be:a4:c1:82:ca:33:29:1e:b7:9a:66:85:
         77:27:88:cd:d8:7f:db:45:06:b8:1f:1f:92:c9:00:54:a6:01:
         c1:79:bb:87:27:e0:6f:00:69:bb:70:e7:36:20:4d:17:23:37:
         d3:db:97:56:ae:1e:35:35:9d:c8:05:98:91:ac:b8:9a:b1:21:
         ca:21:38:d0:df:64:f7:5b:44:16:53:d2:12:8d:20:35:91:a0:
         4b:0f:7f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:12:08 2024 by rpki-client on console-ams.rpki-client.org