Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/6ab277e0-3406-3960-8da2-8751ad317fd4.roa
File:                     6ab277e0-3406-3960-8da2-8751ad317fd4.roa (raw, json)
Hash identifier:          xT5gWDfXD1rHHO9HEuO+HVK98Ea8SpLP2K3qhe3Xzow=
Subject key identifier:   7B:15:38:9A:78:4E:4B:C6:C9:47:F9:E9:CC:F3:0C:B8:EC:30:9C:1B
Certificate issuer:       /CN=694fcca8-fcd7-435e-a4d1-bd921d97c51d
Certificate serial:       010D0C9F432858471D43B1CB34ACB7DBCFD96900
Authority key identifier: 80:15:58:9E:85:6E:5C:80:0F:FA:39:3C:C6:B2:06:A9:D2:4C:EB:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/6ab277e0-3406-3960-8da2-8751ad317fd4.roa
Signing time:             Thu 05 Sep 2024 14:54:47 +0000
ROA not before:           Thu 05 Sep 2024 14:54:47 +0000
ROA not after:            Wed 04 Dec 2024 15:54:47 +0000
asID:                     401339
IP address blocks:        2602:f836::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/694fcca8-fcd7-435e-a4d1-bd921d97c51d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/694fcca8-fcd7-435e-a4d1-bd921d97c51d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1d:43:b1:cb:34:ac:b7:db:cf:d9:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694fcca8-fcd7-435e-a4d1-bd921d97c51d
        Validity
            Not Before: Sep  5 14:54:47 2024 GMT
            Not After : Dec  4 15:54:47 2024 GMT
        Subject: CN=b5b58c47-89bc-4a84-b657-9c06d16b8b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ca:e2:72:72:09:5d:64:cc:9e:35:cd:61:f5:
                    3b:c6:ea:ec:25:78:d1:aa:a1:2c:43:1b:d1:2b:9e:
                    ce:bd:d4:c0:18:cb:02:34:e3:15:30:7b:b7:f4:a2:
                    2f:06:62:6f:37:ba:09:cc:e7:06:fa:23:f5:d7:41:
                    75:cf:e6:25:b9:bf:cf:36:3c:99:bb:c5:2c:ac:0b:
                    fd:83:af:65:f3:85:3e:93:f3:73:2c:72:24:0a:02:
                    12:09:9a:3d:80:02:ef:3a:8d:9b:dc:cc:4f:16:27:
                    25:64:ac:40:aa:f0:9a:d0:c5:91:da:65:ed:ec:65:
                    ee:50:83:c8:0b:6d:16:c4:4c:5a:4c:9a:2d:e1:97:
                    63:05:86:60:4d:e0:d9:9c:fd:09:d8:ba:6b:e6:b8:
                    89:32:84:30:8e:8a:07:30:10:0a:12:67:3e:df:df:
                    40:4a:b6:17:df:9a:70:12:51:29:d9:f3:62:0d:54:
                    1a:2e:b2:03:a9:f2:7c:ee:d8:81:f9:b3:7f:6f:db:
                    6c:58:a5:fb:a0:bc:57:67:5c:8f:b1:ad:81:7d:43:
                    c6:60:a7:b0:e2:0e:5f:1a:7d:27:87:46:4b:18:54:
                    05:ce:e3:dc:ec:4e:c7:e2:df:76:1f:33:fe:84:5b:
                    00:b6:67:a5:25:f7:54:2d:13:ca:6c:cd:bc:cf:a9:
                    d0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:15:38:9A:78:4E:4B:C6:C9:47:F9:E9:CC:F3:0C:B8:EC:30:9C:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/6ab277e0-3406-3960-8da2-8751ad317fd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/694fcca8-fcd7-435e-a4d1-bd921d97c51d.crl

            X509v3 Authority Key Identifier:
                keyid:80:15:58:9E:85:6E:5C:80:0F:FA:39:3C:C6:B2:06:A9:D2:4C:EB:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f836::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:99:8e:e0:3a:d4:3c:79:91:32:ae:b6:27:d7:e1:cc:b3:f7:
         b5:c8:a4:1f:53:1b:11:7a:9e:aa:a6:e3:ce:bc:b2:5b:d3:b5:
         56:c4:67:55:44:dd:44:ea:68:27:a4:ac:ee:0c:00:14:fd:5a:
         be:92:65:d2:b1:99:b1:c1:c8:bf:84:0e:ac:b6:ae:d5:d7:74:
         78:4d:8d:60:3d:2b:dc:90:1b:9e:81:13:fb:51:73:dd:f2:5f:
         69:3f:fd:26:35:b0:66:92:83:57:cb:74:6e:8d:4e:5a:29:db:
         c7:65:03:f4:2a:d4:d6:92:1b:70:2b:f5:5c:da:32:32:d8:7e:
         a6:cb:0a:45:b3:4a:28:05:ea:e7:2c:d4:f7:2c:d9:7e:d8:3f:
         55:e6:2a:c0:d6:85:1a:50:39:d9:92:b8:db:0b:51:b1:ff:da:
         32:86:f5:54:b2:0f:77:c4:c8:6e:d6:98:02:cd:71:e5:8a:6c:
         ff:cf:c2:ea:fa:8c:c2:e6:e8:7f:6c:c0:02:b7:31:fc:6e:2e:
         6b:8c:4b:96:b2:de:3f:04:e5:2e:5a:18:e5:7d:88:ed:6e:6e:
         41:3a:91:b4:d9:af:c3:bc:e2:c8:53:0f:9e:1a:97:01:68:36:
         68:4b:f0:d3:9e:1b:d1:d6:be:9d:14:0d:01:6c:60:60:b2:08:
         cc:17:25:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:29 2024 by rpki-client on console-fra.rpki-client.org