Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/d4d46617-9137-3fc8-91f9-f546ad943523.roa
File:                     d4d46617-9137-3fc8-91f9-f546ad943523.roa (raw, json)
Hash identifier:          EY1q0+tISmm9gUNGw9ukA3Hxs2yHNm7PmaDXNXkS5iQ=
Subject key identifier:   23:4D:99:3B:77:FD:BF:08:E9:16:9C:3B:FA:DB:77:23:FD:BF:C0:89
Certificate issuer:       /CN=35241669-57c3-4f1d-8e12-d32455951379
Certificate serial:       010D0C9F43285846224A417C93905036986920C0
Authority key identifier: 8B:44:6B:AC:A8:C8:70:20:1E:9F:69:37:9E:9B:EE:31:2B:77:B9:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/d4d46617-9137-3fc8-91f9-f546ad943523.roa
Signing time:             Fri 07 Jun 2024 17:20:07 +0000
ROA not before:           Fri 07 Jun 2024 17:20:07 +0000
ROA not after:            Thu 05 Sep 2024 17:20:07 +0000
asID:                     62880
IP address blocks:        2602:f8bb::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/35241669-57c3-4f1d-8e12-d32455951379.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/35241669-57c3-4f1d-8e12-d32455951379.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Jun 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:22:4a:41:7c:93:90:50:36:98:69:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35241669-57c3-4f1d-8e12-d32455951379
        Validity
            Not Before: Jun  7 17:20:07 2024 GMT
            Not After : Sep  5 17:20:07 2024 GMT
        Subject: CN=8e90fab7-ae83-4951-aafc-5bf7a8e519f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bf:2c:9d:c5:65:99:70:ae:66:c6:42:d3:7d:
                    ed:f3:94:d1:a7:ec:c0:01:ad:2a:a1:83:14:47:45:
                    70:ef:d0:d5:e1:08:0f:50:d6:8c:ea:b5:b4:16:9a:
                    55:f2:48:42:17:92:f9:3e:bf:49:15:d6:e6:91:eb:
                    0d:80:d7:c0:41:a8:40:ef:55:74:00:3a:ce:43:cf:
                    e0:e6:d4:d6:c1:3f:f0:b7:8b:f9:b9:25:ce:11:4a:
                    2d:00:80:b1:75:d2:26:21:ed:60:48:e4:dc:77:e7:
                    97:25:05:2f:eb:f3:34:aa:04:6f:28:c4:54:3c:6a:
                    15:1f:b2:e1:32:90:2d:95:17:52:b4:b9:88:16:8e:
                    53:26:cf:de:f4:57:6a:76:d4:de:99:55:0a:46:ad:
                    ab:c3:26:f5:18:28:93:06:a0:4c:4c:b6:a5:a3:52:
                    3a:b4:ed:e5:e6:ab:a8:09:79:94:27:ff:e9:d9:21:
                    2b:69:29:6b:6b:04:86:ba:de:8d:ad:f9:73:3f:ac:
                    d9:77:37:f5:9b:33:db:7e:b6:fe:37:82:32:34:3b:
                    e0:09:c1:e0:ec:a5:d0:17:de:4e:88:41:ed:e0:29:
                    56:3f:0b:cd:ae:51:40:08:89:de:9e:64:05:cc:80:
                    52:e6:50:28:ad:39:fd:fe:0d:da:38:67:72:97:16:
                    f8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4D:99:3B:77:FD:BF:08:E9:16:9C:3B:FA:DB:77:23:FD:BF:C0:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/d4d46617-9137-3fc8-91f9-f546ad943523.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/35241669-57c3-4f1d-8e12-d32455951379.crl

            X509v3 Authority Key Identifier:
                keyid:8B:44:6B:AC:A8:C8:70:20:1E:9F:69:37:9E:9B:EE:31:2B:77:B9:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8bb::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:d5:90:2f:83:dd:aa:af:e2:5d:a3:e6:78:6f:f1:5c:b8:a8:
         c3:61:1c:93:b1:0e:93:7b:cd:3b:1a:72:9c:e9:c6:bd:af:d0:
         68:50:42:f9:92:bb:e4:f5:25:d3:74:eb:6b:8e:0b:b1:18:03:
         39:ae:32:2c:e8:91:73:8d:c6:77:b6:f8:76:8c:46:4b:bd:9d:
         7a:cf:73:11:96:10:28:c2:59:f0:2d:5c:96:7a:1f:70:19:13:
         9d:bc:ea:12:e3:a9:4e:fb:3c:d3:a1:b5:51:de:57:60:12:8b:
         02:40:dc:f3:0e:c7:ad:15:7b:ce:62:2e:0f:37:07:6b:12:63:
         18:70:34:01:c2:1b:88:11:94:e3:aa:61:dd:1b:ed:58:3c:d0:
         8b:84:68:4d:ef:4f:a2:e7:45:1e:d8:49:d5:41:93:8a:97:2e:
         51:cd:39:c4:e2:34:ec:6f:42:c2:a6:51:ef:f0:17:5b:dc:59:
         c5:0d:2b:46:60:4b:39:75:96:07:3c:75:6f:15:96:1c:90:a3:
         92:c2:3f:fd:38:d7:92:0f:2c:23:f6:bc:07:47:0b:23:64:24:
         14:cf:71:f0:0e:19:dc:70:2c:8f:99:80:99:60:6c:64:3c:75:
         31:ea:91:29:14:7b:ad:0c:84:8d:41:77:26:49:ef:40:99:34:
         18:dc:59:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:08:18 2024 by rpki-client on console-ams.rpki-client.org