Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/2babb0a1-9a1a-3bd4-9f14-ebf6dd309386.roa
File:                     2babb0a1-9a1a-3bd4-9f14-ebf6dd309386.roa (raw, json)
Hash identifier:          LEkqgg2tG7hLiI19gRQWOCBpcyX4XOUczcVgGsqbhMk=
Subject key identifier:   36:31:31:55:02:06:C0:40:80:8C:90:D8:71:CA:88:84:69:12:17:BC
Certificate issuer:       /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
Certificate serial:       010D0C9F432858454AD2CB468E46E83E2A6D5F40
Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/2babb0a1-9a1a-3bd4-9f14-ebf6dd309386.roa
Signing time:             Fri 22 Mar 2024 13:00:34 +0000
ROA not before:           Fri 22 Mar 2024 13:00:34 +0000
ROA not after:            Thu 20 Jun 2024 13:00:34 +0000
asID:                     61112
IP address blocks:        2602:fa4f:300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4a:d2:cb:46:8e:46:e8:3e:2a:6d:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
        Validity
            Not Before: Mar 22 13:00:34 2024 GMT
            Not After : Jun 20 13:00:34 2024 GMT
        Subject: CN=5bbe65c6-f4cc-4693-a9b6-ba2d80c7b88a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:99:f7:4e:45:c6:1c:a6:00:e9:39:f4:ad:c9:
                    89:3a:92:26:71:4c:e8:d7:41:93:29:5e:34:53:da:
                    e8:5e:67:0f:a4:40:29:48:0a:68:af:7b:e8:a6:7c:
                    0a:28:d2:7f:72:1b:2d:29:c6:8d:a7:8a:ba:fd:15:
                    61:e7:b9:d5:97:ed:4d:ee:e8:9c:c9:0d:cc:00:aa:
                    7a:dc:ae:90:e9:02:a6:d9:38:a5:4c:73:ce:52:74:
                    5d:2c:0d:a1:81:4b:29:e4:fe:82:ec:aa:f7:f9:da:
                    d1:a9:10:53:07:a6:a8:65:8d:c0:eb:57:9c:51:13:
                    1f:f2:51:f3:cc:fa:40:ab:e8:54:65:c0:5f:d8:78:
                    50:db:c6:a2:a2:f2:96:bb:39:19:f7:4a:5f:22:63:
                    01:db:9d:50:54:58:14:07:93:23:fc:40:6c:3a:6b:
                    c4:69:e0:aa:05:d4:9b:24:b9:be:8e:99:b0:ba:e8:
                    e5:75:6b:79:5e:be:82:e5:a8:b9:ca:06:11:47:50:
                    db:b7:8d:5a:79:b5:dd:45:23:a7:1d:d6:b1:e4:45:
                    82:5a:ba:e2:33:2a:ad:e1:f4:02:34:20:b6:fc:5e:
                    2a:26:1a:df:11:40:3b:8a:b8:2a:8a:29:eb:a1:32:
                    a8:e0:78:ea:f9:b8:84:4f:e6:77:fe:62:34:88:95:
                    78:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:31:31:55:02:06:C0:40:80:8C:90:D8:71:CA:88:84:69:12:17:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/2babb0a1-9a1a-3bd4-9f14-ebf6dd309386.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl

            X509v3 Authority Key Identifier:
                keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4f:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:7d:03:3d:ba:6c:c9:71:3d:01:d2:76:9f:71:89:ab:96:16:
         d3:a4:62:2b:4c:b0:2e:2e:c5:9a:5e:1f:44:94:04:bd:eb:2d:
         08:1d:a7:3b:51:1d:80:f3:fd:a0:6d:6a:cc:14:76:77:ae:d8:
         7e:3c:fa:8f:35:0c:79:17:9a:9e:5a:d8:68:16:13:ef:28:b4:
         54:38:ef:39:85:b3:32:74:df:ec:38:69:48:85:8a:7b:65:33:
         40:bf:b2:c6:b4:97:ec:59:ac:49:51:f7:99:4f:d0:fb:34:23:
         91:9b:4e:1f:e6:8e:63:9e:26:44:7c:72:2e:8e:e6:a1:73:d4:
         b1:66:c7:d0:a8:8c:7e:b0:7b:b9:a5:32:f9:62:3f:dd:bd:83:
         26:00:71:f8:6b:72:ea:bb:41:79:09:c8:4f:d4:8a:0a:95:d1:
         7f:0c:02:22:3a:b7:67:14:04:81:85:f7:ca:41:1d:a4:01:72:
         f1:fa:83:bb:d9:ec:bd:33:eb:62:e4:bd:be:a6:f3:9d:5c:74:
         87:fb:34:cd:5e:1f:7c:ea:7b:c2:60:9f:01:75:e9:1f:5b:90:
         7a:72:22:bb:0e:40:47:35:9c:f6:70:aa:75:fd:2b:e5:2a:8e:
         80:c4:29:d9:93:0f:37:89:65:61:c2:dc:52:26:29:43:a3:9c:
         7f:ff:6d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:19:14 2024 by rpki-client on console-ams.rpki-client.org