Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/bdd3d443-3917-38eb-8d15-a0fc55930f02.roa
File:                     bdd3d443-3917-38eb-8d15-a0fc55930f02.roa (raw, json)
Hash identifier:          W4SgONog9DIng7fe7s/XtS33GDKBzxbotDf+xKT4tkA=
Subject key identifier:   B4:A9:CA:36:4F:7A:40:48:20:58:B0:8A:CB:2B:E2:8A:3C:9E:2C:8C
Certificate issuer:       /CN=46369a04-d9fc-4dd8-bc96-cf22af084843
Certificate serial:       010D0C9F43285844D9DFCC9F8FD78A8E32476BC0
Authority key identifier: B9:68:B7:2D:27:25:1F:8B:2F:08:14:1E:50:FE:82:74:A6:BB:C0:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/bdd3d443-3917-38eb-8d15-a0fc55930f02.roa
Signing time:             Sun 11 Feb 2024 02:00:25 +0000
ROA not before:           Sun 11 Feb 2024 02:00:25 +0000
ROA not after:            Sat 11 May 2024 01:00:25 +0000
asID:                     400550
IP address blocks:        2602:fb9e:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/46369a04-d9fc-4dd8-bc96-cf22af084843.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/46369a04-d9fc-4dd8-bc96-cf22af084843.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d9:df:cc:9f:8f:d7:8a:8e:32:47:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46369a04-d9fc-4dd8-bc96-cf22af084843
        Validity
            Not Before: Feb 11 02:00:25 2024 GMT
            Not After : May 11 01:00:25 2024 GMT
        Subject: CN=fc7b191b-c545-4126-b557-c3890b485059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d9:40:55:c9:62:66:b4:bf:7e:3b:37:a3:fd:
                    9d:ba:fb:b9:e4:bf:29:ef:81:a0:07:85:7e:16:54:
                    b1:a4:07:f8:2b:90:fe:59:23:88:3d:c5:4f:04:67:
                    6b:e1:8c:6f:a0:b3:3e:0d:03:9c:0a:54:65:86:fe:
                    32:8e:4d:6a:5c:a3:79:d9:5e:aa:26:28:46:53:f6:
                    98:6f:94:1a:e9:b8:b7:d2:52:4b:46:40:05:6e:00:
                    0e:af:14:eb:c6:6e:3c:92:ba:d9:ec:cc:1e:c2:b8:
                    78:d0:72:75:61:d6:d0:8b:7e:57:4e:ad:c5:f6:28:
                    cb:91:6a:80:8f:33:c6:ae:fc:04:25:b7:c8:f5:1d:
                    7d:56:0b:83:3d:d9:c7:cf:12:66:fb:d8:96:be:bd:
                    91:85:9c:a2:bd:70:da:df:9f:eb:61:5a:b6:c8:f7:
                    a3:b2:8e:7f:ea:26:70:ce:62:aa:2c:64:e1:ff:c5:
                    33:b2:10:45:dc:6c:c4:57:ba:c5:f8:4d:30:bc:37:
                    2a:54:89:34:cc:5a:06:f1:42:d0:c4:78:e6:76:20:
                    19:aa:74:60:c6:9b:34:10:21:62:0f:1f:be:8a:11:
                    77:68:b7:3f:21:39:19:3b:2c:9e:b3:a5:4f:ca:07:
                    26:02:60:6f:77:85:57:8d:d3:d3:13:f0:59:03:95:
                    92:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A9:CA:36:4F:7A:40:48:20:58:B0:8A:CB:2B:E2:8A:3C:9E:2C:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/bdd3d443-3917-38eb-8d15-a0fc55930f02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/46369a04-d9fc-4dd8-bc96-cf22af084843.crl

            X509v3 Authority Key Identifier:
                keyid:B9:68:B7:2D:27:25:1F:8B:2F:08:14:1E:50:FE:82:74:A6:BB:C0:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb9e:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:01:c1:a0:70:9e:ee:f6:51:0b:8d:cd:dc:16:4b:42:0c:a7:
         03:0e:ee:6b:c7:bb:e1:50:ab:ac:4a:40:a7:27:7c:a0:6b:40:
         53:ce:95:f3:75:2a:8d:2a:78:b1:63:98:1b:b1:30:ac:d6:44:
         ba:75:8c:be:43:56:9c:29:f2:7b:5b:b4:28:1a:fb:c8:6f:f8:
         0e:5c:dd:5a:4a:be:7d:91:69:85:dc:0c:46:f7:47:0c:5b:7e:
         ed:cd:66:d1:f9:86:59:b1:30:33:b5:6c:db:e8:e1:73:1f:40:
         b4:ce:9c:ef:4d:5c:b8:67:8d:a9:94:0c:33:56:d0:53:68:f2:
         b4:23:b9:21:93:5e:48:2c:a7:ab:e1:44:c9:26:5b:e6:4c:f5:
         55:e4:bd:5a:b9:fc:2d:dc:7a:3b:bc:2f:67:a3:d9:e0:ea:3a:
         75:8e:39:06:57:e3:ca:d6:df:47:51:18:e9:a4:47:17:9c:35:
         56:00:11:bf:72:4f:90:49:e3:54:27:77:37:ea:f7:8d:c4:13:
         0b:ff:4c:70:dd:0b:dd:af:5a:3f:24:f4:17:2c:9a:ef:d9:e4:
         ca:f1:63:1d:d7:d7:58:38:43:ae:5a:e9:21:0c:d6:8c:dd:3a:
         24:ad:30:14:35:32:f5:61:f2:f8:2c:c8:2d:3a:cd:87:bb:dc:
         31:04:1c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 18:57:56 2024 by rpki-client on console-ams.rpki-client.org