Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/de6ac4e0-602c-3d24-a14d-ba651d4d7c1c.roa
File:                     de6ac4e0-602c-3d24-a14d-ba651d4d7c1c.roa (raw, json)
Hash identifier:          fhVzeuSZREx1Ignjbcwm4w12FbJEmvvGUt3FZ0i9Nk8=
Subject key identifier:   CE:B9:8C:C1:EC:4B:19:8B:2A:C2:2F:2E:AF:FA:25:22:79:C5:A2:29
Certificate issuer:       /CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
Certificate serial:       010D0C9F43285844A4D4DF68C80C1C618CDBA8C0
Authority key identifier: 60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/de6ac4e0-602c-3d24-a14d-ba651d4d7c1c.roa
Signing time:             Tue 23 Jan 2024 02:00:25 +0000
ROA not before:           Tue 23 Jan 2024 02:00:25 +0000
ROA not after:            Mon 22 Apr 2024 01:00:25 +0000
asID:                     399532
IP address blocks:        2602:fd5f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:a4:d4:df:68:c8:0c:1c:61:8c:db:a8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
        Validity
            Not Before: Jan 23 02:00:25 2024 GMT
            Not After : Apr 22 01:00:25 2024 GMT
        Subject: CN=18cab27c-f9e2-4920-b838-9c34e7373ec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:dd:ff:b6:17:e2:71:d7:81:3d:ec:ca:06:6b:
                    91:bb:48:f8:87:c8:75:c8:aa:7e:7d:5e:ce:4c:63:
                    a9:ab:fb:75:ae:e1:b5:a6:59:9f:2f:27:c9:77:cb:
                    2a:00:db:48:65:eb:83:a5:e5:e6:fc:14:a1:44:db:
                    47:e9:e9:35:51:28:97:0a:19:5d:45:f6:32:5c:19:
                    eb:03:2e:30:c2:54:e7:43:12:93:b0:fa:7a:dc:fa:
                    21:e5:a0:e1:f9:1a:a5:93:d1:c3:2a:b6:be:4c:82:
                    ba:64:fa:03:6b:93:0d:d6:2a:a3:e4:26:dd:43:a0:
                    d7:07:12:da:bc:38:a0:af:2c:d5:31:27:a6:39:c2:
                    08:b1:1e:0d:a4:90:18:cc:40:c3:2f:6c:fb:d3:63:
                    16:7c:4c:75:9e:a7:a4:a0:ec:b8:e6:c0:7e:8d:2f:
                    10:0a:9f:1a:5d:f3:1e:49:f9:e5:70:a7:ab:a5:db:
                    81:b4:69:4a:ab:8a:12:91:62:54:04:4a:c7:19:67:
                    18:c2:0a:8f:40:53:fd:42:f0:2f:59:cf:45:de:8a:
                    c2:12:f4:5a:56:bd:53:1e:ba:15:c9:02:a7:fe:9c:
                    8e:26:0d:b0:c4:8f:94:cb:a0:6e:1a:8f:d2:85:52:
                    ec:9b:44:20:cb:18:2a:4d:7f:d7:55:4c:88:53:52:
                    c0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B9:8C:C1:EC:4B:19:8B:2A:C2:2F:2E:AF:FA:25:22:79:C5:A2:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/de6ac4e0-602c-3d24-a14d-ba651d4d7c1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl

            X509v3 Authority Key Identifier:
                keyid:60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd5f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:1d:59:6b:48:a8:21:1f:04:97:df:2d:05:22:c5:53:76:0e:
         12:e2:41:34:61:84:c7:d5:95:82:7b:43:88:4a:72:fc:9b:50:
         00:7b:e0:06:ec:8d:a3:42:b5:f6:8c:47:4d:66:a1:1c:5f:87:
         48:bb:eb:1c:21:a7:e3:21:96:71:0b:66:80:e4:82:83:10:cf:
         b9:c1:59:68:1e:33:d5:a8:24:b6:23:e7:77:4b:a5:f7:c9:01:
         3e:9e:b6:4f:89:71:b0:a4:2b:cf:bc:4e:94:cf:ca:bd:6d:53:
         30:e3:72:79:26:b2:d1:25:11:5e:87:f8:53:46:3d:3f:a8:72:
         e2:a5:fa:eb:4c:6b:29:42:26:48:7f:9e:e5:b2:47:0a:2a:38:
         97:26:76:49:a9:d1:06:7e:20:0a:ad:b1:21:e5:cd:9f:8a:0d:
         f6:18:0f:79:19:79:ee:2c:35:3b:bb:9e:6c:84:61:8c:08:30:
         be:ea:79:cd:e3:ae:15:9b:3d:ef:96:3a:e8:94:f8:13:53:80:
         31:52:61:6c:7e:6f:09:1c:88:09:4b:e9:ae:b0:f0:d3:fe:e0:
         d1:c0:00:ff:ec:59:41:68:be:1e:7e:86:79:55:06:3f:2c:05:
         77:ab:b3:63:c8:6f:f1:73:15:4a:71:4e:4f:f5:f3:64:14:96:
         8c:3b:6e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:17:53 2024 by rpki-client on console-ams.rpki-client.org