Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/12f6eb8c-eebe-3fc5-ba9f-ae72c20581f1.roa
File:                     12f6eb8c-eebe-3fc5-ba9f-ae72c20581f1.roa (raw, json)
Hash identifier:          W/JZUPzLKjfrTSr23da1Tq/MPayCMsGB9VNOLHRV8vw=
Subject key identifier:   A3:E5:C2:13:B7:FB:4C:3A:11:19:B3:23:6B:44:00:3A:90:E5:74:4B
Certificate issuer:       /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
Certificate serial:       010D0C9F432858454F02C53C04500BB61D9E6EC0
Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/12f6eb8c-eebe-3fc5-ba9f-ae72c20581f1.roa
Signing time:             Sun 24 Mar 2024 01:00:24 +0000
ROA not before:           Sun 24 Mar 2024 01:00:24 +0000
ROA not after:            Sat 22 Jun 2024 01:00:24 +0000
asID:                     61112
IP address blocks:        2602:fa4f::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4f:02:c5:3c:04:50:0b:b6:1d:9e:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
        Validity
            Not Before: Mar 24 01:00:24 2024 GMT
            Not After : Jun 22 01:00:24 2024 GMT
        Subject: CN=3753641c-25cd-458a-b8b7-2e4a56edc728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2f:99:22:6b:cb:85:a6:c3:0e:67:9b:f6:dc:
                    e3:74:97:af:2a:a1:30:bf:9e:c0:42:91:aa:c7:92:
                    b0:6f:29:a2:fd:b4:0c:d6:60:39:50:8f:2e:80:b3:
                    90:0f:b8:e1:0c:9b:80:9a:e6:f5:35:bc:d3:fe:ef:
                    81:16:e2:f3:b5:7b:12:b0:b1:7e:92:80:01:22:7b:
                    dd:ab:1f:8d:9c:d1:25:8f:76:a8:f2:16:cc:0a:f5:
                    77:88:27:67:4c:b8:59:69:03:66:32:fc:46:73:36:
                    f5:cc:48:88:ce:83:48:96:b9:3a:33:69:d6:c2:cf:
                    48:60:43:40:56:26:bc:2e:c9:ac:02:79:6a:0b:22:
                    8e:c6:53:36:cf:e6:ed:b1:0b:c6:c5:bf:5e:3e:4e:
                    64:74:8e:78:c5:98:d7:e9:39:cc:f8:02:68:47:74:
                    2d:cb:bd:b2:14:4b:63:47:a0:e5:10:a3:d9:1d:1e:
                    0b:b4:1a:57:90:bd:c6:c5:de:69:11:10:cb:d6:67:
                    cc:dc:0e:ac:d5:64:f2:6f:e2:54:8a:a7:6e:2c:56:
                    6f:2b:ab:7b:71:18:75:7f:86:48:f3:62:68:39:ad:
                    1c:1e:9b:24:21:99:ee:ad:b3:8c:26:e7:31:63:a6:
                    ab:a7:91:ac:2b:73:57:fd:ec:81:2c:11:e1:49:ff:
                    74:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E5:C2:13:B7:FB:4C:3A:11:19:B3:23:6B:44:00:3A:90:E5:74:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/12f6eb8c-eebe-3fc5-ba9f-ae72c20581f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl

            X509v3 Authority Key Identifier:
                keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:d8:2f:f2:4a:90:f4:c4:ab:b2:99:7d:35:f8:2e:d9:7f:3d:
         bf:a3:c9:b9:b4:36:75:4f:84:ea:48:02:8d:e7:ba:8d:78:fd:
         f5:5f:76:0d:1c:e5:e4:9e:47:03:bb:90:46:da:6b:96:7c:47:
         0f:9e:fe:9a:8f:8e:60:ff:62:c2:8d:c6:6f:5b:a7:dc:6a:85:
         d2:0f:11:80:e2:01:07:1a:93:35:85:3a:c6:04:16:1e:99:ee:
         bf:32:82:c7:1b:8d:ad:00:44:1b:d6:b4:54:21:a1:d8:ca:c9:
         80:c8:b7:74:09:6f:c7:33:e8:b2:30:aa:f2:10:ec:74:7a:9f:
         c9:89:43:9a:0c:c4:ff:ef:f3:0d:f5:25:49:08:03:78:ea:49:
         34:9a:d9:43:38:28:83:35:3b:49:d8:f9:19:48:00:64:ae:c0:
         b9:c8:ea:fc:85:08:e5:b8:99:ad:60:76:84:ca:26:04:8a:04:
         6b:5e:4c:71:09:0d:09:17:b8:ee:9d:c9:44:59:98:94:49:5a:
         92:30:64:c4:d9:ad:7e:0a:01:7a:72:eb:b1:01:78:2f:85:ea:
         ad:4d:7e:f2:8a:33:53:c8:38:54:68:f0:55:92:01:e9:1b:4a:
         a0:e7:c0:4f:0d:07:d3:2f:e0:c4:3e:a3:50:7e:e5:ba:6d:24:
         e9:1d:92:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:54:23 2024 by rpki-client on console-fra.rpki-client.org