Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/7ee09d50-9766-3739-bf54-024888d96b72.roa
File:                     7ee09d50-9766-3739-bf54-024888d96b72.roa (raw, json)
Hash identifier:          Ju7/5IA9NgbA0eG+j7tsMFDzKSCO/EUUqUGTcFze/uw=
Subject key identifier:   CF:A6:40:61:B8:BC:CC:F3:09:C7:76:E3:16:F6:81:F5:D1:00:79:7A
Certificate issuer:       /CN=fca4862e-7314-4415-a264-4e5dc31b73d8
Certificate serial:       010D0C9F43285845A2B0D3404EF46AA2ECD8FB80
Authority key identifier: F3:2A:FE:F1:7D:67:12:DA:6A:50:D2:98:1F:3E:31:47:61:82:95:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/7ee09d50-9766-3739-bf54-024888d96b72.roa
Signing time:             Tue 23 Apr 2024 00:23:18 +0000
ROA not before:           Tue 23 Apr 2024 00:23:18 +0000
ROA not after:            Mon 22 Jul 2024 00:23:18 +0000
asID:                     4185
IP address blocks:        2620:0:610::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a2:b0:d3:40:4e:f4:6a:a2:ec:d8:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fca4862e-7314-4415-a264-4e5dc31b73d8
        Validity
            Not Before: Apr 23 00:23:18 2024 GMT
            Not After : Jul 22 00:23:18 2024 GMT
        Subject: CN=8d179bf4-de37-4215-b938-fcd61f084ac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:de:38:e1:c9:35:df:c1:70:94:1e:ce:df:b4:
                    a4:12:6e:2e:75:3c:31:13:67:d3:e7:55:e2:fb:13:
                    61:d1:9d:26:5c:d4:fa:a0:ff:9a:41:e0:49:e2:59:
                    8b:ee:2a:0d:a4:4f:31:b3:d7:7e:72:85:3d:6d:c1:
                    c3:ba:0a:80:7e:44:10:41:91:2d:f9:fb:a5:38:3c:
                    f1:1d:8a:c7:52:1f:40:8f:16:5c:8d:b2:ff:d3:d1:
                    2f:d2:36:cb:9a:8f:8a:03:6f:34:86:d2:35:ff:c9:
                    46:3a:28:a4:9d:b4:58:fc:5f:75:b9:56:0c:8e:3c:
                    f8:2b:30:8f:97:44:b2:5f:00:f8:20:49:0b:29:10:
                    e2:4a:10:f9:82:ff:ab:d3:31:03:3c:99:48:86:52:
                    27:14:1f:88:61:d2:77:8e:9a:28:82:ac:bd:24:c1:
                    81:a8:a3:fa:e9:a1:fe:0d:47:a6:26:65:e2:58:37:
                    85:b5:58:e5:91:8d:5c:19:44:4a:fd:39:5a:9e:13:
                    75:41:bc:e9:f9:15:56:22:58:7c:27:f1:38:25:15:
                    61:a6:6c:d3:82:57:46:f8:78:5c:40:fa:0c:80:34:
                    72:d6:fa:61:82:1c:ec:2c:ac:de:48:4b:5f:61:9a:
                    6b:32:1f:8a:da:fe:97:45:74:8d:7f:d4:fc:5b:2b:
                    7d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A6:40:61:B8:BC:CC:F3:09:C7:76:E3:16:F6:81:F5:D1:00:79:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/7ee09d50-9766-3739-bf54-024888d96b72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.crl

            X509v3 Authority Key Identifier:
                keyid:F3:2A:FE:F1:7D:67:12:DA:6A:50:D2:98:1F:3E:31:47:61:82:95:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:610::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:8f:e7:6e:b9:9b:9b:a2:89:f8:d4:3a:d3:eb:2a:ce:a6:d9:
         24:bf:9a:c0:f8:3c:ff:52:5c:cd:b1:da:a4:c5:d7:58:3e:50:
         9d:ab:83:49:13:56:0c:72:fa:f0:ac:d8:2f:c6:b2:08:95:f9:
         64:5e:55:a8:99:83:2e:9c:06:99:2d:05:c7:5b:d4:e4:a0:ef:
         9b:62:c6:f9:05:dc:f0:17:f5:79:b4:a6:08:db:15:60:90:23:
         c9:49:72:37:77:f9:8a:67:0a:72:1e:2b:96:1d:48:c9:50:1b:
         09:4c:73:bd:51:5a:2a:88:2b:ef:30:d6:cc:88:7a:ee:06:88:
         60:fa:4a:d5:c0:95:1c:e4:5e:0d:43:e9:42:e2:61:02:ea:9a:
         09:1c:82:bb:60:92:7a:26:75:8e:4f:fe:87:ed:7b:16:05:db:
         33:06:be:80:73:c6:9b:46:98:e7:94:8e:dc:64:0a:3b:6d:5f:
         f5:62:fd:93:95:11:93:f1:21:8c:4e:1d:81:38:3a:8b:ea:cd:
         54:ac:18:1c:63:57:02:e5:3a:02:e9:8a:4a:36:65:d4:15:c0:
         f8:35:df:a4:71:0c:61:43:bf:0d:3c:d4:77:18:41:b4:e8:65:
         04:e1:d4:53:db:31:01:f2:0c:94:ed:b9:78:88:42:9e:84:12:
         62:19:d7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:35:22 2024 by rpki-client on console-ams.rpki-client.org