Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/2778d088-5874-3305-bfcd-92bfb1243d0a.roa
File:                     2778d088-5874-3305-bfcd-92bfb1243d0a.roa (raw, json)
Hash identifier:          bVCxjD4jJPMhD74fu/tjLVsIR150kRhbKdL5bqVBSDE=
Subject key identifier:   77:B3:EB:D2:40:CB:D5:C8:99:74:F2:9A:C3:78:87:A2:EA:C4:EF:5F
Certificate issuer:       /CN=de848e16-b429-4505-9234-f6d889fd1438
Certificate serial:       010D0C9F43285841E46D910F4021E0AD3C7D1000
Authority key identifier: 1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/2778d088-5874-3305-bfcd-92bfb1243d0a.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Mon 03 Jul 2023 13:40:36 +0000
asID:                     399820
IP address blocks:        2602:fc2f::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 May 2023 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:91:0f:40:21:e0:ad:3c:7d:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de848e16-b429-4505-9234-f6d889fd1438
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul  3 13:40:36 2023 GMT
        Subject: CN=479c117f-4985-4719-ac73-70ab6ef28538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:62:f3:ac:23:79:fc:9e:0f:dc:a4:17:34:f0:
                    ca:2b:a0:b1:3c:ea:a4:9e:50:fb:5d:68:e1:96:84:
                    17:e4:68:38:03:77:9f:a1:1b:f0:b3:62:99:f4:60:
                    2f:35:45:dc:92:83:86:bd:42:38:79:a9:07:17:6e:
                    30:a3:5c:ef:07:e7:ff:5f:fd:bd:5c:d4:35:9a:b4:
                    47:8d:62:7e:ab:4a:f4:b2:fd:eb:6c:45:b7:af:56:
                    f7:ba:73:e1:4a:f7:9e:a2:d3:3b:79:cf:90:66:ae:
                    bf:ca:87:63:e1:8b:65:2d:d3:2a:a6:44:c5:bf:e4:
                    82:b9:cc:27:24:44:3c:7d:8b:6b:fd:27:8b:ae:b8:
                    1c:3a:72:7a:a7:80:7a:da:85:d9:e9:af:05:40:2c:
                    cf:67:ea:c0:3c:47:c6:27:64:c8:db:7c:6e:89:24:
                    0e:63:a2:95:ac:32:fc:56:29:20:7b:9b:91:c7:5f:
                    b8:17:96:13:20:3d:b0:22:fc:00:65:92:4a:b7:d9:
                    ab:8d:08:3c:35:c5:59:29:e0:18:8a:fa:06:24:ce:
                    a6:4e:7a:90:22:08:11:44:5d:36:28:8a:52:0c:58:
                    31:f3:69:f8:0f:46:95:60:33:df:ef:3c:e4:3c:15:
                    c7:5e:78:bf:67:af:ff:6b:a7:0c:cc:71:15:95:34:
                    7f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                77:B3:EB:D2:40:CB:D5:C8:99:74:F2:9A:C3:78:87:A2:EA:C4:EF:5F
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/2778d088-5874-3305-bfcd-92bfb1243d0a.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.crl

            X509v3 Authority Key Identifier: 
                keyid:1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc2f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:4a:29:f5:a9:13:71:88:05:b5:67:9a:c6:17:e9:93:ba:2e:
         a1:b1:81:87:00:78:e9:f5:57:3c:83:a4:5e:00:1c:98:89:f2:
         0f:6c:4b:cc:58:b2:70:cc:7e:7f:5f:29:ee:6a:fd:43:fc:53:
         83:4c:0d:df:5b:ca:22:23:9e:d7:44:d9:0e:9f:34:38:04:75:
         66:09:e1:c8:16:9c:f2:8c:ae:a6:6b:72:8d:6a:f4:5c:3e:3e:
         84:a2:3d:3b:94:65:21:42:2a:98:a2:ff:9a:de:94:6a:ec:51:
         d9:13:a8:ed:95:34:ed:2e:1e:24:c9:e7:60:9b:fa:0e:1a:1d:
         cb:fb:b4:d2:60:d0:90:be:d4:78:66:16:1f:5e:e9:3d:99:b1:
         69:00:14:82:fe:d1:4d:37:d7:5a:f8:e3:c0:a7:13:15:3d:bb:
         b7:9f:84:53:02:7e:30:ce:7e:75:6e:eb:71:9c:86:53:a7:51:
         e4:7a:91:70:05:04:19:17:6a:7f:61:70:34:f1:c8:3f:bc:06:
         54:53:5e:9e:1f:f2:c8:fd:22:29:7f:64:09:33:bc:d1:f4:c5:
         20:4d:be:ef:9d:50:be:bd:27:08:16:55:5b:c6:48:32:df:1f:
         8d:79:79:d3:52:19:de:13:62:5d:2c:06:05:29:5d:19:a6:77:
         47:5b:b8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 15 18:57:01 2023 by rpki-client on console-ams.rpki-client.org