Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b9b55179-aeab-48dc-ba09-e41903a9550e/6c6a56ba-7e29-352a-9b8a-d2bdf0cf77a6.roa
File:                     6c6a56ba-7e29-352a-9b8a-d2bdf0cf77a6.roa (raw, json)
Hash identifier:          +9Exs4vEpkR/k6sfxlTQUmo2MTPgGw3RYEwpZxa1vn4=
Subject key identifier:   C1:DE:43:47:B3:69:BF:14:47:4A:DC:81:2F:B3:D8:F1:EA:C8:B1:EE
Certificate issuer:       /CN=b9b55179-aeab-48dc-ba09-e41903a9550e
Certificate serial:       010D0C9F43285845945B7909D3D983FF999ABC00
Authority key identifier: 44:A4:6F:7A:73:56:C0:C5:2F:51:F5:CC:87:A9:34:6C:A6:5A:C9:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b9b55179-aeab-48dc-ba09-e41903a9550e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b9b55179-aeab-48dc-ba09-e41903a9550e/6c6a56ba-7e29-352a-9b8a-d2bdf0cf77a6.roa
Signing time:             Wed 17 Apr 2024 21:10:01 +0000
ROA not before:           Wed 17 Apr 2024 21:10:01 +0000
ROA not after:            Tue 16 Jul 2024 21:10:01 +0000
asID:                     400810
IP address blocks:        2602:fa62::/40 maxlen: 40
                          2602:fa62:100::/40 maxlen: 40
                          2602:fa62:200::/40 maxlen: 40
                          2602:fa62:300::/40 maxlen: 40
                          2602:fa62:400::/40 maxlen: 40
                          2602:fa62:500::/40 maxlen: 40
                          2602:fa62:600::/40 maxlen: 40
                          2602:fa62:700::/40 maxlen: 40
                          2602:fa62:800::/40 maxlen: 40
                          2602:fa62:900::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b9b55179-aeab-48dc-ba09-e41903a9550e/b9b55179-aeab-48dc-ba09-e41903a9550e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b9b55179-aeab-48dc-ba09-e41903a9550e/b9b55179-aeab-48dc-ba09-e41903a9550e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b9b55179-aeab-48dc-ba09-e41903a9550e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:94:5b:79:09:d3:d9:83:ff:99:9a:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b55179-aeab-48dc-ba09-e41903a9550e
        Validity
            Not Before: Apr 17 21:10:01 2024 GMT
            Not After : Jul 16 21:10:01 2024 GMT
        Subject: CN=f0a2bbb4-6ab5-42d7-8e91-b096b5220856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1a:cb:06:92:79:93:6a:76:32:cc:08:7c:6b:
                    68:d0:3c:a5:4a:2a:e0:05:6f:a9:62:6f:95:88:e1:
                    fd:28:93:31:a0:a2:57:5a:c6:2f:3c:23:a8:e0:86:
                    ce:3e:0f:3c:2a:6e:07:8a:7a:f7:9b:ac:70:cd:37:
                    ea:79:cb:49:d0:d0:3a:d7:10:c7:63:dd:4f:e1:3b:
                    17:34:fe:73:9f:76:c7:21:7d:ac:2a:8a:5d:c4:56:
                    8b:6f:c0:4d:7f:54:c6:6c:a3:f5:7e:8f:91:55:26:
                    59:5b:63:a1:03:91:f4:59:89:56:c4:b5:f8:f1:15:
                    63:28:94:c7:30:1c:68:a2:91:f3:e5:2d:1d:80:9e:
                    e8:38:e1:73:39:5e:e8:8d:f9:5a:ba:c4:66:dc:6a:
                    de:1b:c6:86:aa:a4:97:0e:14:ef:47:58:e4:f9:df:
                    b5:96:10:29:c4:f7:55:a1:dc:bb:a7:c4:c4:0a:36:
                    ef:70:0f:59:54:cd:80:8e:f4:d8:5f:12:4f:ca:c6:
                    cc:b5:aa:49:6a:8c:24:2d:3d:ec:1a:df:99:3f:4d:
                    f1:3e:71:17:55:2c:29:42:fc:22:c3:14:99:b6:78:
                    94:6f:0b:a1:3d:68:a8:96:01:08:36:11:63:ad:f5:
                    b2:54:77:a3:80:8b:26:fd:32:da:db:c4:76:a3:05:
                    eb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:DE:43:47:B3:69:BF:14:47:4A:DC:81:2F:B3:D8:F1:EA:C8:B1:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b9b55179-aeab-48dc-ba09-e41903a9550e/6c6a56ba-7e29-352a-9b8a-d2bdf0cf77a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b9b55179-aeab-48dc-ba09-e41903a9550e/b9b55179-aeab-48dc-ba09-e41903a9550e.crl

            X509v3 Authority Key Identifier:
                keyid:44:A4:6F:7A:73:56:C0:C5:2F:51:F5:CC:87:A9:34:6C:A6:5A:C9:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b9b55179-aeab-48dc-ba09-e41903a9550e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa62::-2602:fa62:9ff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:a3:dd:bf:b0:95:9f:01:6d:68:a2:1a:c6:35:17:28:47:c1:
         c5:7b:65:57:6d:7a:58:3f:f5:fb:c5:ed:1e:cb:e4:64:fd:22:
         40:b5:41:0d:34:aa:75:3f:11:f5:fe:5e:e6:e2:fb:7e:ee:c2:
         20:c0:6b:d8:bd:34:4a:01:dc:25:f5:bc:94:4b:89:5c:30:33:
         7e:2a:bc:91:78:82:65:e3:27:88:94:6d:23:15:d3:25:0c:8d:
         08:e3:1e:32:2b:dd:49:03:c7:75:55:28:f7:20:20:05:ae:53:
         c3:84:da:71:15:a0:7a:ce:54:36:37:82:8e:3f:3f:9b:f6:1e:
         91:8b:a8:67:a3:88:b8:e9:e3:13:77:aa:cb:98:e2:41:ee:7a:
         a0:b3:95:59:87:bc:c7:1d:c8:de:4c:b4:e8:8f:bf:56:bd:b9:
         6b:f6:02:b1:60:48:e1:b6:fa:97:a3:ab:71:10:65:f7:ae:6b:
         32:fe:53:88:b7:4a:5a:82:0a:dd:8e:71:3f:cb:28:73:1b:2d:
         76:6c:b4:13:90:6b:5b:37:63:1c:e2:0c:a8:b5:b9:a7:1f:90:
         11:56:74:26:ab:1d:6b:f6:3d:0c:2c:d8:64:4f:37:c6:7b:ae:
         1c:c8:ff:9f:86:b4:51:09:8d:64:b5:c9:b8:6a:1d:c0:79:1e:
         43:77:54:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 19:54:30 2024 by rpki-client on console-ams.rpki-client.org