Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c56132e-98a3-47c3-be11-c7cfe52e9eef/b391cc90-1f82-3c64-9f8b-2fa2d4eb10dc.roa
File:                     b391cc90-1f82-3c64-9f8b-2fa2d4eb10dc.roa (raw, json)
Hash identifier:          4ZbVPgeu7gZCl79f70fGJwYX8ZKfpPCTfhx+IhPAuds=
Subject key identifier:   22:AD:CF:62:4D:63:69:6C:D3:39:26:71:2A:A3:A0:2A:D2:D0:98:EC
Certificate issuer:       /CN=6c56132e-98a3-47c3-be11-c7cfe52e9eef
Certificate serial:       010D0C9F43285845777DE61A0F211145BD1AE700
Authority key identifier: 51:0C:0F:00:BF:FB:E6:7C:38:EA:34:09:CF:57:A3:62:E4:4C:A2:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c56132e-98a3-47c3-be11-c7cfe52e9eef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c56132e-98a3-47c3-be11-c7cfe52e9eef/b391cc90-1f82-3c64-9f8b-2fa2d4eb10dc.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     200351
IP address blocks:        2602:fa43::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c56132e-98a3-47c3-be11-c7cfe52e9eef/6c56132e-98a3-47c3-be11-c7cfe52e9eef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c56132e-98a3-47c3-be11-c7cfe52e9eef/6c56132e-98a3-47c3-be11-c7cfe52e9eef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c56132e-98a3-47c3-be11-c7cfe52e9eef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:e6:1a:0f:21:11:45:bd:1a:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c56132e-98a3-47c3-be11-c7cfe52e9eef
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=c95ce24e-d950-4ca4-8e76-263e89e233f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:97:13:88:c3:b4:45:c8:bc:46:0e:79:2b:9c:
                    f4:b5:87:d9:23:4b:7d:77:fa:b8:83:38:a3:58:c9:
                    a2:49:ed:0f:97:d4:35:0b:8f:2e:98:b6:74:87:8d:
                    84:b1:34:b1:9f:e4:b2:3b:96:5c:7e:fa:5d:d2:77:
                    38:bc:b2:aa:86:a7:23:44:d7:cf:bc:45:c1:75:cc:
                    ec:fb:b2:8f:a2:d4:7e:3b:6d:c8:4b:cb:8f:8d:66:
                    04:61:46:f5:4e:eb:07:f4:75:e0:41:6b:a3:e2:b3:
                    ba:9d:39:6f:64:7d:75:c4:53:9a:62:f4:e1:57:1f:
                    b9:0c:02:b0:cb:1b:fa:12:d2:09:46:a1:73:3f:64:
                    14:18:c7:e7:28:5b:4d:dd:28:a7:9d:88:f8:60:61:
                    a4:ad:88:0a:67:96:68:9b:f7:f0:57:0d:d9:57:8c:
                    4e:fe:9c:cc:8c:92:2e:2b:a2:ee:45:ec:9a:b4:f6:
                    c4:9a:17:8a:e1:a0:2d:ef:83:5f:6d:66:59:65:f9:
                    bb:08:df:b6:24:5c:52:1e:57:96:37:35:23:33:c1:
                    90:3f:54:78:5b:00:78:bc:71:ad:eb:b8:af:8b:e1:
                    86:4d:07:a2:6b:db:55:08:a1:ed:a2:34:32:53:4d:
                    36:59:75:45:71:ee:85:ba:0c:d6:d4:44:35:3b:53:
                    09:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:AD:CF:62:4D:63:69:6C:D3:39:26:71:2A:A3:A0:2A:D2:D0:98:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c56132e-98a3-47c3-be11-c7cfe52e9eef/b391cc90-1f82-3c64-9f8b-2fa2d4eb10dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c56132e-98a3-47c3-be11-c7cfe52e9eef/6c56132e-98a3-47c3-be11-c7cfe52e9eef.crl

            X509v3 Authority Key Identifier:
                keyid:51:0C:0F:00:BF:FB:E6:7C:38:EA:34:09:CF:57:A3:62:E4:4C:A2:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c56132e-98a3-47c3-be11-c7cfe52e9eef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:c7:54:a8:e7:8e:3f:ad:a7:c4:f9:cb:45:c6:b7:be:5d:ac:
         d8:9a:6b:0c:7a:ac:95:88:74:15:f5:a2:8d:3b:45:06:c9:0d:
         bb:26:f8:d6:d9:32:58:c6:72:e9:7b:81:be:40:d8:89:39:54:
         d0:f9:23:76:94:e2:b1:f1:4d:89:35:bd:a7:30:0b:14:c6:5a:
         39:1c:8c:1b:83:65:58:0d:7d:34:cb:59:a4:a4:f9:93:0a:db:
         6d:a7:b1:b9:19:cc:9b:b7:74:d5:34:42:fc:5a:03:6d:c1:e8:
         ba:ee:ac:b8:ad:f4:99:db:27:c1:a1:23:59:e4:a9:7d:e1:ca:
         b3:ac:cf:a2:b5:94:a2:5f:69:91:50:2b:6c:14:03:cc:61:c6:
         25:e0:63:1d:75:c5:be:0c:43:c1:92:74:2e:99:b3:72:16:70:
         7e:47:95:15:06:d7:6a:6a:88:00:0f:a3:1a:b2:f8:fc:1a:c2:
         22:9c:7e:1c:dc:91:e2:e9:11:09:80:d5:9a:cf:b0:a1:b6:ae:
         eb:7a:1e:cc:f7:a7:b7:4c:c0:75:57:ee:22:43:94:eb:51:d6:
         f4:05:2b:53:69:de:0b:5b:40:66:6e:d2:da:88:b4:e0:ce:94:
         75:a2:5c:97:5c:80:c4:c2:d9:58:7a:59:e1:1b:ba:6c:3a:60:
         29:60:a0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:58:01 2024 by rpki-client on console-ams.rpki-client.org