Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/0c266f64-95af-3bd2-88bc-11fae1300adb.roa
File:                     0c266f64-95af-3bd2-88bc-11fae1300adb.roa (raw, json)
Hash identifier:          hvxxfcyVRNfGf2z0/Bn3kIaO1eLWd69JIX1SAPYpWdk=
Subject key identifier:   81:72:C0:43:60:C3:9D:40:B0:E7:80:E8:88:1C:0E:09:07:7A:65:24
Certificate issuer:       /CN=fa1ef48c-319b-4888-9b6e-efede6d159ca
Certificate serial:       010D0C9F43285846E5467ADF6A21CC83DAB36A40
Authority key identifier: EB:D9:DF:05:13:B5:23:E2:E3:AF:74:39:88:D1:0B:23:63:BA:5E:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/0c266f64-95af-3bd2-88bc-11fae1300adb.roa
Signing time:             Fri 16 Aug 2024 13:35:08 +0000
ROA not before:           Fri 16 Aug 2024 13:35:08 +0000
ROA not after:            Thu 14 Nov 2024 14:35:08 +0000
asID:                     401323
IP address blocks:        2602:f83c::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/fa1ef48c-319b-4888-9b6e-efede6d159ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/fa1ef48c-319b-4888-9b6e-efede6d159ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e5:46:7a:df:6a:21:cc:83:da:b3:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa1ef48c-319b-4888-9b6e-efede6d159ca
        Validity
            Not Before: Aug 16 13:35:08 2024 GMT
            Not After : Nov 14 14:35:08 2024 GMT
        Subject: CN=1c3dd6d5-83c2-421b-b4f2-fe7d709b90d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d2:21:5b:a3:8f:14:8e:b3:72:6c:02:55:1d:
                    b2:c0:40:45:66:59:88:ee:ba:5e:3f:75:8c:fc:7c:
                    84:97:d7:a4:4b:7c:42:20:0e:f7:22:22:34:9a:fd:
                    01:8e:8c:f2:64:27:4b:d5:35:40:d3:aa:18:eb:90:
                    b2:23:66:6d:f9:37:17:f4:71:34:a6:6f:ad:a5:07:
                    37:bb:b7:34:b6:3e:53:77:1c:02:26:16:4c:3f:00:
                    3f:53:ff:35:58:2f:5b:4a:76:81:91:ab:c2:95:15:
                    e1:83:b0:47:15:84:55:ec:bc:6c:a0:85:65:dd:1b:
                    97:3c:13:87:4e:c5:2b:4f:df:21:0a:ec:39:fa:cb:
                    82:7e:a7:cb:46:8a:f8:ae:86:2d:b5:21:60:9b:c1:
                    55:51:2d:86:b6:e2:bf:78:1d:78:4c:12:ad:05:8a:
                    f1:b6:37:6e:e9:42:da:c5:dc:6c:df:ef:b1:cb:50:
                    b1:9b:21:3d:23:0b:6b:07:94:1e:07:12:b6:9f:be:
                    c4:ca:03:e3:64:e6:ce:82:6d:04:34:50:59:cd:5d:
                    ac:39:d2:51:73:1b:69:86:42:a9:4f:45:9f:a5:71:
                    74:01:42:cf:7c:f7:5f:e3:4d:e3:38:87:94:a3:b5:
                    6f:f8:31:12:1a:6e:5c:73:6e:45:2d:72:89:2c:c1:
                    cd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:72:C0:43:60:C3:9D:40:B0:E7:80:E8:88:1C:0E:09:07:7A:65:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/0c266f64-95af-3bd2-88bc-11fae1300adb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/fa1ef48c-319b-4888-9b6e-efede6d159ca.crl

            X509v3 Authority Key Identifier:
                keyid:EB:D9:DF:05:13:B5:23:E2:E3:AF:74:39:88:D1:0B:23:63:BA:5E:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:ce:ba:42:fc:84:5b:df:03:f3:b4:0a:4e:29:2e:59:cf:12:
         19:4b:10:6f:c1:eb:6f:10:49:36:6e:68:44:d7:2b:d9:8c:53:
         25:76:75:bf:1c:9f:40:bc:4a:97:74:59:12:47:80:29:c6:a3:
         62:51:a5:b6:a4:06:be:6c:32:e7:89:6b:48:6c:e5:f1:36:3a:
         92:99:7f:7a:3e:66:fe:09:fa:25:aa:e9:59:3b:93:a5:1e:c2:
         64:93:7e:cb:0c:f6:80:c5:3e:2c:ad:8f:90:70:80:3e:24:a4:
         79:94:42:c0:47:46:53:6d:b7:bd:c5:cb:d7:27:3c:be:c8:78:
         ca:62:9e:cd:86:de:a3:46:e4:09:c7:6f:a5:eb:12:b1:21:0b:
         de:54:76:2a:97:8e:21:5f:74:fa:0b:0f:df:b7:c2:18:7c:74:
         62:4d:b5:09:ad:a5:2f:cf:f7:de:90:be:dd:f0:e1:12:da:6b:
         fc:21:c3:ab:03:31:c7:11:c5:7b:91:f7:ba:68:00:2e:9f:c5:
         91:4e:4e:0f:b0:b0:aa:b2:55:7b:30:6b:19:ae:6b:8c:88:52:
         52:5e:12:e9:c4:a9:71:85:21:84:94:a9:97:83:e5:36:8e:45:
         ef:a8:94:d2:d8:c3:2b:04:ad:6e:57:da:8e:fd:7e:29:d7:93:
         58:cb:34:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 05:59:13 2024 by rpki-client on console-fra.rpki-client.org