Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/3e9bc18a-e2d6-3b39-ac87-8876b89240b5.roa
File:                     3e9bc18a-e2d6-3b39-ac87-8876b89240b5.roa (raw, json)
Hash identifier:          uVFTm48keOw648rX95gnBXHdZwVg7iS2pf3Z2FBlN3w=
Subject key identifier:   7E:7A:6C:88:C9:17:0F:BA:B5:4D:FD:98:BF:3D:B2:09:79:D6:26:45
Certificate issuer:       /CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
Certificate serial:       010D0C9F432858467DAC0F1D6AF5165C02B57100
Authority key identifier: 76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/3e9bc18a-e2d6-3b39-ac87-8876b89240b5.roa
Signing time:             Wed 10 Jul 2024 10:55:44 +0000
ROA not before:           Wed 10 Jul 2024 10:55:44 +0000
ROA not after:            Tue 08 Oct 2024 10:55:44 +0000
asID:                     6461
IP address blocks:        2602:fbb6::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:7d:ac:0f:1d:6a:f5:16:5c:02:b5:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
        Validity
            Not Before: Jul 10 10:55:44 2024 GMT
            Not After : Oct  8 10:55:44 2024 GMT
        Subject: CN=011e3783-223f-46e2-9141-8be773c743bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:dd:55:56:c3:e0:4a:a0:3e:0a:ec:e3:1d:94:
                    86:01:c2:86:99:e5:b7:0d:2f:8e:53:09:d3:84:e2:
                    ae:cc:f6:27:c2:d7:45:11:ad:a5:49:90:48:10:73:
                    20:11:25:32:1e:32:9d:db:9f:6a:8d:f0:bd:c9:85:
                    be:8d:1c:83:a4:0c:5b:0e:52:45:47:b2:ff:be:60:
                    db:4a:8d:e9:04:4e:ea:c9:92:fe:92:cd:20:e3:6e:
                    13:b3:cc:f9:95:87:79:11:3a:5d:e8:ad:d0:f7:cf:
                    59:9f:65:ff:1e:c7:e1:73:78:1b:8f:0e:bb:39:0f:
                    87:c9:1e:88:26:5f:a3:8d:b3:2c:38:53:c3:f4:a4:
                    4e:cd:34:b4:ca:10:4c:a9:4b:6e:d4:86:ac:63:9b:
                    87:ab:6c:2e:37:c9:83:00:43:fb:7d:e8:33:01:16:
                    62:2f:e3:b8:f2:4f:ec:76:84:4b:b0:e5:84:b7:81:
                    47:5f:b8:14:1c:33:23:71:1e:99:db:7d:1a:1e:3b:
                    7e:2e:e0:d2:d3:69:68:e3:58:25:85:53:24:df:d0:
                    3a:a2:ef:ff:6d:68:04:33:05:b8:7b:ae:df:86:22:
                    01:d3:5f:ca:8f:04:69:fb:8d:2d:fb:50:c4:32:ff:
                    e9:91:65:a7:b5:42:d3:40:88:44:45:1b:d3:2c:a5:
                    44:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7A:6C:88:C9:17:0F:BA:B5:4D:FD:98:BF:3D:B2:09:79:D6:26:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/3e9bc18a-e2d6-3b39-ac87-8876b89240b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl

            X509v3 Authority Key Identifier:
                keyid:76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbb6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:c3:0b:bf:55:76:bd:b0:db:42:60:00:f2:95:ef:2b:ca:b2:
         fd:c1:a7:af:0c:fe:94:14:96:48:b3:c2:36:8d:bf:d1:92:1e:
         bb:03:f8:74:86:2c:58:7f:ad:68:c6:00:ee:49:38:fd:fc:e1:
         7f:83:c4:2c:6e:6d:94:a4:07:83:a4:0e:c5:73:c3:40:a7:5a:
         ed:88:63:c1:23:54:a0:22:38:93:ff:22:14:db:a9:c6:d6:c8:
         15:4f:f7:02:1d:e8:bc:10:f3:7c:47:79:03:ae:fb:89:4f:4d:
         e1:ed:4d:5a:8b:53:1d:a4:a9:47:18:6d:14:c0:53:1e:12:a3:
         83:05:06:96:11:fd:a2:4e:ce:c2:62:74:ef:22:58:45:7c:24:
         b6:66:2c:81:5a:a1:fa:d2:e3:20:a5:1d:a2:85:d9:95:ce:96:
         c7:4b:c8:ac:08:c5:a4:8d:d2:fc:10:84:94:7d:ae:e6:f8:98:
         78:06:a9:c0:7b:77:eb:37:b6:d1:68:4e:a8:68:63:9f:4f:f1:
         7e:6c:5a:77:7e:cb:52:e0:bb:5c:b5:97:ae:3a:ec:dc:1f:10:
         ff:d7:f5:86:24:5d:1e:2c:29:0d:22:db:55:82:fe:bc:a7:e3:
         a2:25:c0:4b:da:84:97:6f:ad:30:00:f0:bb:13:1c:12:8b:c1:
         f5:ad:5e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 19:18:47 2024 by rpki-client on console-fra.rpki-client.org