Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/7b10d9a5-8c6f-3592-b138-29e238ff65e0.roa
File:                     7b10d9a5-8c6f-3592-b138-29e238ff65e0.roa (raw, json)
Hash identifier:          HhnADEMmF+aQf0h90AVoE1BkeVkHiYQ8YuEcdYowP7g=
Subject key identifier:   FC:6A:4E:8A:D7:47:FB:B2:BD:29:01:9D:D8:D2:57:F1:98:1D:EC:05
Certificate issuer:       /CN=ba339105-0dc8-4e13-ab0d-3279a6b58f97
Certificate serial:       010D0C9F43285845A9BE0A9DDA9C6FE2BEB32180
Authority key identifier: 90:B8:5A:EE:92:C4:9A:6D:E8:77:45:60:0F:2D:77:2A:26:11:83:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/7b10d9a5-8c6f-3592-b138-29e238ff65e0.roa
Signing time:             Thu 25 Apr 2024 13:00:33 +0000
ROA not before:           Thu 25 Apr 2024 13:00:33 +0000
ROA not after:            Wed 24 Jul 2024 13:00:33 +0000
asID:                     7720
IP address blocks:        2602:fc1d::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/ba339105-0dc8-4e13-ab0d-3279a6b58f97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/ba339105-0dc8-4e13-ab0d-3279a6b58f97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:be:0a:9d:da:9c:6f:e2:be:b3:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba339105-0dc8-4e13-ab0d-3279a6b58f97
        Validity
            Not Before: Apr 25 13:00:33 2024 GMT
            Not After : Jul 24 13:00:33 2024 GMT
        Subject: CN=eef39149-0205-4a9b-b796-86d10bc7fa0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c7:49:33:f4:72:52:42:83:5e:3f:9e:38:46:
                    9c:79:ab:91:77:a8:c4:ca:bc:19:4b:08:cc:22:26:
                    ea:71:d0:73:00:39:fb:0c:bc:b1:6a:c7:25:4a:41:
                    96:e8:c2:ec:8d:db:3e:e1:f0:fd:91:2c:d6:32:aa:
                    ce:9f:dd:06:b0:f2:67:34:36:0a:96:71:2e:9c:47:
                    54:60:fb:ee:38:55:60:20:77:42:fe:0a:eb:59:dd:
                    3b:4f:5f:86:90:bf:43:d4:24:be:83:c4:56:06:59:
                    1e:e6:bf:e2:02:d0:12:21:ed:a7:bf:96:ba:4a:d3:
                    14:62:50:71:c6:e6:6d:6e:77:4b:f4:83:28:5b:1f:
                    69:18:af:c5:9c:bf:f7:28:33:aa:1a:17:f4:32:ed:
                    68:44:bc:6a:3c:6a:94:72:ac:a5:8e:d9:fc:90:9d:
                    57:91:e1:6d:6e:6d:a2:a7:1f:91:af:a8:c0:9a:be:
                    cc:b3:69:9e:42:4e:b5:b8:88:2b:61:2f:64:c4:3e:
                    af:16:c4:19:92:93:17:10:16:72:4d:5a:d4:e1:1a:
                    92:84:d9:54:4f:f0:4e:da:f4:7a:f0:52:08:50:72:
                    06:3d:f3:0a:d8:c8:fa:fb:31:d6:4b:2e:d1:c8:ee:
                    19:56:7a:3b:6f:32:f8:14:6f:0c:4c:32:23:13:d1:
                    2c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6A:4E:8A:D7:47:FB:B2:BD:29:01:9D:D8:D2:57:F1:98:1D:EC:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/7b10d9a5-8c6f-3592-b138-29e238ff65e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/ba339105-0dc8-4e13-ab0d-3279a6b58f97.crl

            X509v3 Authority Key Identifier:
                keyid:90:B8:5A:EE:92:C4:9A:6D:E8:77:45:60:0F:2D:77:2A:26:11:83:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc1d::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:84:63:b9:96:14:d4:5e:e6:5c:d1:ef:51:d0:8f:f5:64:26:
         ba:0f:b7:a2:38:5a:a5:98:91:28:5f:60:14:a4:91:fc:d1:dc:
         7e:7f:bc:d6:d9:53:fd:9c:9a:30:12:4a:93:3e:e6:d2:1b:fd:
         69:94:8c:78:82:be:f2:84:cc:9f:d2:df:5e:a1:5f:62:d1:04:
         8c:08:b9:9a:2a:5e:88:1b:a2:17:c1:40:7a:44:e6:c7:10:3d:
         a9:eb:c1:b9:af:5b:4d:6f:c4:6a:90:c6:8b:d6:62:32:bb:9e:
         72:ed:e1:c2:86:72:04:1c:19:05:63:02:30:4c:64:0f:da:8a:
         a6:24:cf:a0:ee:28:dc:ed:0a:32:77:bf:89:ee:42:f4:50:b4:
         bd:27:19:c0:15:86:3e:9a:8b:0e:f7:12:bf:a0:c4:e2:f3:ff:
         f4:54:f7:80:62:a7:6a:a6:df:5a:39:6b:e2:e8:74:06:f5:8c:
         92:61:f5:ae:75:c7:f4:1b:09:f2:22:18:85:73:fd:a5:53:c9:
         00:56:06:0e:ae:a8:46:4a:f2:f6:dc:29:e7:35:f7:f8:ef:70:
         a0:d4:3f:ad:51:4a:38:68:e3:c6:81:48:0a:c9:68:36:9b:0d:
         c2:72:fe:86:23:9b:93:4f:02:b0:92:07:be:a8:9d:40:2d:16:
         67:7e:28:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:55:21 2024 by rpki-client on console-fra.rpki-client.org