Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183/6f2e4c4d-ee8a-32dc-8bc2-acee77c80c7a.roa
File:                     6f2e4c4d-ee8a-32dc-8bc2-acee77c80c7a.roa (raw, json)
Hash identifier:          9DNm2iCkZvnXLx7uS15lkVBZF+2kN7PjAoyi2XSsNbc=
Subject key identifier:   AB:DB:51:C3:D6:B4:C1:C1:4D:FD:D8:90:34:5E:4A:C5:48:03:6D:7E
Certificate issuer:       /CN=ba2f27f4-9270-4d20-9b84-034ca573f183
Certificate serial:       010D0C9F43285845DBFE681E1ABCEFAB214E9E40
Authority key identifier: 67:B2:53:ED:68:85:C3:B6:CD:96:EE:83:4F:31:0C:4D:D6:BA:6C:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183/6f2e4c4d-ee8a-32dc-8bc2-acee77c80c7a.roa
Signing time:             Mon 13 May 2024 13:00:34 +0000
ROA not before:           Mon 13 May 2024 13:00:34 +0000
ROA not after:            Sun 11 Aug 2024 13:00:34 +0000
asID:                     397375
IP address blocks:        2602:814:3000::/40 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183/ba2f27f4-9270-4d20-9b84-034ca573f183.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183/ba2f27f4-9270-4d20-9b84-034ca573f183.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:db:fe:68:1e:1a:bc:ef:ab:21:4e:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba2f27f4-9270-4d20-9b84-034ca573f183
        Validity
            Not Before: May 13 13:00:34 2024 GMT
            Not After : Aug 11 13:00:34 2024 GMT
        Subject: CN=c78ed772-713c-443f-99ac-02cdc4ccb977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4e:d1:cf:2e:6d:bd:db:0f:7a:7b:d9:67:4f:
                    65:b9:c6:ff:5f:0a:c0:2a:90:4b:43:9b:bb:a3:1c:
                    16:17:36:9a:47:fb:91:63:f7:5c:fc:76:88:2e:8f:
                    52:05:f3:e9:48:0f:58:e8:ca:fb:2e:9f:2f:54:11:
                    7b:ab:6f:ea:16:8c:a1:bd:44:f3:40:45:e9:bd:88:
                    35:23:5e:78:1a:83:4e:51:e9:09:d6:89:0f:23:ee:
                    8d:06:a0:66:20:a1:40:14:ef:9c:31:9b:e0:89:db:
                    79:30:b6:9e:97:71:21:45:0f:e5:92:0e:a8:b7:c7:
                    0d:ab:7f:3d:d4:ea:18:e4:0e:63:f8:fb:c2:d5:76:
                    c8:17:1c:06:b9:ec:91:a0:df:aa:a0:e2:16:39:37:
                    98:00:28:fb:69:43:59:ad:f7:18:e4:75:29:d2:b5:
                    98:58:5e:74:79:34:80:74:63:cb:68:53:2f:3b:89:
                    6b:79:c7:8c:50:85:78:56:e3:36:11:7f:48:36:79:
                    fd:7f:b4:80:b4:52:be:52:22:55:8e:6e:8e:dd:40:
                    49:a4:92:9c:d6:0c:86:d6:02:b0:02:6c:9f:63:93:
                    60:c3:c4:07:57:e7:45:18:76:9a:08:57:29:23:59:
                    8e:0d:ad:65:03:1c:cc:be:97:4c:1e:4f:51:e8:bf:
                    a4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DB:51:C3:D6:B4:C1:C1:4D:FD:D8:90:34:5E:4A:C5:48:03:6D:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183/6f2e4c4d-ee8a-32dc-8bc2-acee77c80c7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183/ba2f27f4-9270-4d20-9b84-034ca573f183.crl

            X509v3 Authority Key Identifier:
                keyid:67:B2:53:ED:68:85:C3:B6:CD:96:EE:83:4F:31:0C:4D:D6:BA:6C:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:814:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:44:22:b4:bc:2b:03:42:3e:c1:0b:c5:45:f7:e2:21:d8:d0:
         13:09:f3:85:2a:a2:ea:74:22:15:30:39:a1:6d:e5:b9:aa:72:
         29:39:66:55:a8:1e:70:26:07:1e:09:7c:bf:56:cd:af:c5:e6:
         f2:7c:fa:34:b8:e1:1e:15:11:47:21:78:1d:4d:e7:25:89:c5:
         46:da:5b:0b:4e:4b:a1:bb:6f:11:34:70:f8:74:00:a9:fc:31:
         d4:1f:da:92:ba:25:7c:97:f5:43:9b:3a:96:68:9f:70:4f:0d:
         18:55:b1:1a:30:45:52:1d:59:b3:a8:91:17:65:3e:7a:95:b8:
         fe:de:04:bd:6b:68:1d:37:98:71:d6:34:bf:ba:7b:e5:8a:71:
         9d:c3:2c:e4:ef:d3:0e:b4:b4:b3:c8:e0:2d:e5:00:b6:f3:88:
         cb:25:f1:56:ed:1e:92:65:0a:55:ee:c4:4e:29:34:d9:ba:23:
         c8:a3:44:a9:e5:51:cf:21:d2:4c:54:53:eb:49:9c:bd:28:ca:
         ae:ce:6a:51:5c:b2:a5:e0:55:4d:c2:ee:21:48:6a:13:67:00:
         07:45:77:5c:b9:4f:44:96:24:9f:ba:9d:3c:fe:f4:31:84:78:
         0b:60:88:46:a7:8c:ba:90:0f:c9:aa:c9:09:29:bb:07:fb:79:
         4d:f8:4c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:46 2024 by rpki-client on console-fra.rpki-client.org