Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/f30c9c21-4317-3091-8c73-74cf7dd4b318.roa
File:                     f30c9c21-4317-3091-8c73-74cf7dd4b318.roa (raw, json)
Hash identifier:          aFDNcrf8pdHbs6TuTYEDyuew0ZhLPOnoWmhimy/mAds=
Subject key identifier:   11:7B:F1:AB:92:24:1B:A9:18:56:9F:1B:4A:02:5E:74:01:83:42:33
Certificate issuer:       /CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7
Certificate serial:       010D0C9F43285844E66FE992DEA298983C8A4880
Authority key identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/f30c9c21-4317-3091-8c73-74cf7dd4b318.roa
Signing time:             Thu 15 Feb 2024 14:00:30 +0000
ROA not before:           Thu 15 Feb 2024 14:00:30 +0000
ROA not after:            Wed 15 May 2024 13:00:30 +0000
asID:                     400679
IP address blocks:        2602:fb82::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e6:6f:e9:92:de:a2:98:98:3c:8a:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7
        Validity
            Not Before: Feb 15 14:00:30 2024 GMT
            Not After : May 15 13:00:30 2024 GMT
        Subject: CN=278b7b55-963e-4af1-951f-2481156127f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b0:99:24:1b:0a:87:e5:dd:c6:cd:cc:30:4a:
                    ef:1e:30:72:e5:af:7f:cf:4b:a2:e0:8d:27:40:01:
                    66:d8:87:eb:92:af:6a:f3:3e:47:80:66:52:22:1a:
                    86:ca:1d:7b:06:bd:75:1e:0b:ba:8f:e3:9d:73:ca:
                    24:b8:bc:d9:f0:97:47:08:ee:2e:4c:3d:73:b3:f2:
                    c8:ee:3a:15:e3:e5:eb:3b:46:04:c3:c1:06:8f:22:
                    f4:62:cd:d0:ea:cb:7e:ed:8b:8c:29:c2:8d:7b:3b:
                    3b:ab:a9:d0:eb:a9:e5:36:dd:60:89:97:e1:f9:e5:
                    0d:80:7d:d4:cf:eb:7e:4b:c7:ab:79:f6:01:7e:17:
                    c2:50:bb:35:f6:68:4f:29:1c:31:6a:a3:86:58:d4:
                    52:6e:6c:cb:af:c7:f0:a1:f5:bf:b4:e8:30:f0:71:
                    28:5d:2d:c4:28:9a:f0:ed:fc:3c:9e:7a:3f:08:c5:
                    79:6b:20:a6:4a:8f:79:c3:a1:d5:f5:13:01:e3:35:
                    df:9c:e4:1c:65:b7:26:38:62:05:fc:91:a9:49:de:
                    23:dc:a6:31:f5:db:8d:23:10:dd:e5:03:b0:cd:12:
                    f1:62:7c:d9:ae:e3:83:dd:47:ce:f3:29:2c:5c:e2:
                    56:99:c2:4a:57:42:c5:fc:b9:22:0c:c2:3c:6c:94:
                    6f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:7B:F1:AB:92:24:1B:A9:18:56:9F:1B:4A:02:5E:74:01:83:42:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/f30c9c21-4317-3091-8c73-74cf7dd4b318.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl

            X509v3 Authority Key Identifier:
                keyid:41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb82::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:d2:88:76:ed:3c:e5:17:10:dc:37:f8:0b:8b:33:31:d5:d4:
         ea:50:bd:3a:e5:0d:d1:16:8c:59:7c:1e:be:58:0c:b4:8d:d4:
         37:0e:62:67:41:87:90:1c:d3:d5:89:20:48:0d:c1:25:fd:d1:
         72:fb:7f:75:a8:3c:ab:5c:b2:03:37:f1:13:89:de:d2:99:c8:
         13:8a:76:42:01:74:bc:c7:32:03:9c:a2:67:84:7c:27:ac:b5:
         b7:fd:f0:33:e7:3a:3c:28:d5:3d:90:9e:fb:78:4f:c0:ad:56:
         38:1f:74:88:28:68:f1:9a:0f:2e:59:a0:83:75:dd:51:41:50:
         a7:53:8b:8a:59:39:ab:6f:ba:7f:8d:7e:56:83:29:fa:86:f2:
         b0:a0:e5:aa:e8:89:d2:a2:b4:f8:7d:33:e8:a9:40:e4:8c:6c:
         b3:72:bb:45:fe:b4:17:f2:c8:fa:91:78:d6:df:9b:01:07:8b:
         68:b6:ff:ac:1e:0c:f9:e5:30:83:7b:c1:56:82:32:29:19:58:
         44:33:c5:51:3a:38:bb:6c:97:7a:20:c6:e2:18:bd:9d:47:5a:
         04:c5:61:1b:7d:82:8e:ad:0d:4d:70:bf:59:5a:23:e2:da:60:
         14:72:07:ca:8a:73:f1:92:83:22:80:a4:18:6c:cb:85:3c:33:
         cd:c4:c0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:49:12 2024 by rpki-client on console-ams.rpki-client.org