Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c4f9103-4694-4f57-954c-fc9c82a95b42/b2d14d42-8200-3d9c-8b37-ded12812ea82.roa
File:                     b2d14d42-8200-3d9c-8b37-ded12812ea82.roa (raw, json)
Hash identifier:          T0f7+a1pc14xCmUFujPLOzpEi3cPdFcfGQtsalI0pec=
Subject key identifier:   67:42:BF:2B:3B:DC:0B:47:64:98:86:86:C3:D3:73:27:9D:F1:99:6A
Certificate issuer:       /CN=2c4f9103-4694-4f57-954c-fc9c82a95b42
Certificate serial:       010D0C9F43285845777DCD3F672D11AAFD927100
Authority key identifier: 9D:DA:12:8F:C6:9C:97:AD:FE:F0:F9:23:C9:B8:A0:D9:55:55:FF:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c4f9103-4694-4f57-954c-fc9c82a95b42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c4f9103-4694-4f57-954c-fc9c82a95b42/b2d14d42-8200-3d9c-8b37-ded12812ea82.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     26902
IP address blocks:        2602:fa4b::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c4f9103-4694-4f57-954c-fc9c82a95b42/2c4f9103-4694-4f57-954c-fc9c82a95b42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c4f9103-4694-4f57-954c-fc9c82a95b42/2c4f9103-4694-4f57-954c-fc9c82a95b42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c4f9103-4694-4f57-954c-fc9c82a95b42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:cd:3f:67:2d:11:aa:fd:92:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c4f9103-4694-4f57-954c-fc9c82a95b42
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=e3887ce3-cc7b-41b2-8c8f-df145165b182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:16:5a:1f:c4:dc:f6:64:fe:ef:2c:6a:6a:63:
                    31:1a:be:8a:68:6d:eb:ac:9c:7d:bc:d2:d4:4d:45:
                    0b:b0:61:2e:16:79:d1:71:34:ba:88:aa:c3:35:a1:
                    d5:cf:a4:58:33:1a:43:46:2a:15:0b:68:e6:4a:8b:
                    5c:f3:e8:10:57:1d:59:c6:f4:0d:67:25:7a:43:2a:
                    55:22:c0:cb:19:67:81:0f:dc:7b:df:7c:18:b1:01:
                    3a:0a:e8:2f:bc:a0:b1:02:fc:ef:24:de:36:83:7f:
                    e3:64:98:77:4a:37:28:07:70:36:8c:44:10:8e:c2:
                    90:30:b2:9c:1f:cb:d7:77:ae:44:e4:18:1a:31:da:
                    26:dd:fc:db:9d:fd:9f:3e:38:66:fb:de:23:02:9a:
                    df:46:36:20:0a:9c:33:03:b2:a4:ba:a5:31:38:86:
                    87:fc:46:90:49:83:4c:ed:8d:3f:63:07:91:63:64:
                    ac:7e:76:5d:56:e7:e1:d4:9b:98:70:8c:79:6e:4f:
                    45:f1:e9:dc:17:e3:56:ce:7f:45:d4:be:a7:a9:6f:
                    24:c2:ef:6d:4e:2f:2b:a1:99:2f:6c:c1:ad:19:2a:
                    62:bf:6e:40:37:b2:cb:e7:ce:d4:7d:17:8b:9d:b0:
                    f5:d8:b2:4c:11:c4:a6:5c:5e:67:07:10:fb:3c:60:
                    97:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:42:BF:2B:3B:DC:0B:47:64:98:86:86:C3:D3:73:27:9D:F1:99:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c4f9103-4694-4f57-954c-fc9c82a95b42/b2d14d42-8200-3d9c-8b37-ded12812ea82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c4f9103-4694-4f57-954c-fc9c82a95b42/2c4f9103-4694-4f57-954c-fc9c82a95b42.crl

            X509v3 Authority Key Identifier:
                keyid:9D:DA:12:8F:C6:9C:97:AD:FE:F0:F9:23:C9:B8:A0:D9:55:55:FF:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c4f9103-4694-4f57-954c-fc9c82a95b42.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4b::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:32:5d:2f:3d:cd:89:d4:4a:f5:10:24:13:a3:be:9c:bd:4d:
         c1:76:c2:84:a7:ac:ef:e8:66:53:50:4b:81:2a:b9:9e:c0:c7:
         1d:6f:ab:40:69:ca:57:d1:a7:c3:e3:12:fe:fb:94:70:45:c2:
         f3:a5:bb:0a:27:3b:dc:e4:3c:73:75:a5:1b:fc:72:c6:ec:9a:
         59:0a:02:4a:da:7f:5b:8d:d4:91:57:3d:65:c9:3b:ea:11:b4:
         de:c4:59:50:09:98:33:e9:0b:25:79:11:5d:90:43:aa:d0:f7:
         5c:9f:4b:6a:bc:a5:63:23:f9:7c:1d:b7:64:a5:be:cb:f5:3f:
         ea:72:94:a0:57:ce:fd:36:47:e1:36:81:10:b6:44:43:30:74:
         5c:71:ba:80:77:94:fd:28:cc:45:45:0d:62:d9:1a:ad:95:d5:
         4c:e0:c5:93:3e:b7:32:70:36:1e:78:4c:6e:bf:66:83:35:bd:
         1d:69:4c:29:a7:b9:8d:71:ea:53:a6:ee:a6:6e:3e:f9:f9:fc:
         8a:75:da:60:0f:39:96:ad:a8:5b:8c:37:d7:65:c5:a6:8e:9a:
         9d:15:62:75:18:4c:2a:64:bf:f2:97:a9:99:29:5b:e3:db:a1:
         60:fd:77:e8:1d:0a:19:29:f4:17:8b:3e:6e:ca:70:e2:9b:9b:
         fc:9d:5c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 00:16:10 2024 by rpki-client on console-ams.rpki-client.org