Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/9111181e-12c6-3f08-a615-706c438284a2.roa
File:                     9111181e-12c6-3f08-a615-706c438284a2.roa (raw, json)
Hash identifier:          2fHfATZpD1XTakypLViVNIhw2bMqiL3AUekj3D6nUTs=
Subject key identifier:   95:C8:70:5E:87:1A:B3:B2:C9:7E:93:7C:BC:48:C3:FC:DF:C6:01:31
Certificate issuer:       /CN=6ac516fb-e4df-49c1-82bc-fed2399d21c2
Certificate serial:       010D0C9F432858456128502EF01945B7589F1DA0
Authority key identifier: 17:89:41:4A:81:2C:AF:72:C7:E2:27:3F:C0:5C:CC:33:C2:91:67:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/9111181e-12c6-3f08-a615-706c438284a2.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     53978
IP address blocks:        2602:807:6000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/6ac516fb-e4df-49c1-82bc-fed2399d21c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/6ac516fb-e4df-49c1-82bc-fed2399d21c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:50:2e:f0:19:45:b7:58:9f:1d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ac516fb-e4df-49c1-82bc-fed2399d21c2
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=6938055e-d94f-475b-be99-fa883b57c0f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:67:72:25:ef:d9:1a:c4:89:59:55:df:d7:6f:
                    1e:00:02:29:73:53:ef:86:53:7f:42:0b:27:22:97:
                    61:fa:7d:20:f4:e4:ec:7d:e0:6a:07:27:2e:9f:de:
                    0d:77:36:03:f6:60:c9:2d:c6:93:16:ae:87:28:19:
                    57:bb:5e:5c:a8:73:de:f4:1d:8c:89:6c:98:ee:ae:
                    6e:44:d4:ca:82:14:d2:fd:03:01:07:82:7e:17:c0:
                    c5:33:da:7f:4a:20:5c:7c:47:b2:07:bf:e5:3c:f6:
                    76:50:79:25:16:d1:4e:91:d3:2e:f4:d0:8b:09:11:
                    a5:a4:8d:9e:b6:a3:b8:95:34:d5:bc:81:df:f1:94:
                    57:0e:3e:96:e3:ee:f4:9d:c1:3a:2f:e5:05:d4:1b:
                    3c:cb:cd:0e:4d:42:61:30:e9:be:a9:02:a9:c7:09:
                    18:fa:f9:b9:af:ce:63:1d:81:60:f7:be:e2:87:c5:
                    ed:8d:0b:d9:f9:67:30:c7:96:78:2f:b7:c3:3c:6a:
                    cc:e0:dd:09:cb:e0:45:22:01:d1:7f:ad:03:a1:1d:
                    f3:96:cd:2c:c5:19:14:c7:47:e0:85:50:3e:d1:c4:
                    59:c2:e5:b0:0a:33:a8:06:9d:9c:b9:6f:59:fe:94:
                    c2:86:83:5e:04:49:d5:62:32:f7:73:d2:23:ef:44:
                    87:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C8:70:5E:87:1A:B3:B2:C9:7E:93:7C:BC:48:C3:FC:DF:C6:01:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/9111181e-12c6-3f08-a615-706c438284a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/6ac516fb-e4df-49c1-82bc-fed2399d21c2.crl

            X509v3 Authority Key Identifier:
                keyid:17:89:41:4A:81:2C:AF:72:C7:E2:27:3F:C0:5C:CC:33:C2:91:67:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:807:6000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:ec:e6:07:fb:83:e0:be:45:25:3a:c7:5e:07:8d:5d:a4:ed:
         79:13:1e:8d:b3:9e:3c:6e:de:e4:4e:e2:d2:44:c4:03:3e:20:
         f6:3b:f7:f1:3e:4c:33:5d:c9:44:3d:96:ec:8d:3f:4a:fa:8b:
         6f:97:98:81:40:36:1f:81:87:be:2c:ec:84:13:82:9a:0b:2a:
         a5:76:6c:96:13:00:28:03:df:c1:d2:45:c3:31:0b:b8:84:16:
         54:7d:f4:a1:53:e9:1c:c9:fc:65:39:68:15:c0:98:49:97:ef:
         8f:d4:ae:3b:e1:b6:e0:24:a7:b8:41:3e:cf:db:f8:fc:dd:d5:
         af:aa:78:5e:90:ab:f8:1b:f7:16:cf:14:5b:45:df:d6:70:38:
         31:7c:a8:44:47:e6:4f:3c:14:8f:aa:e9:93:d9:d5:2b:0d:bf:
         38:b0:02:4f:e6:79:9f:61:84:69:8d:04:c9:4c:77:d2:5c:c6:
         74:e5:85:47:42:9b:9e:47:73:ea:42:f9:eb:87:e8:4e:e4:1b:
         eb:49:f8:3f:a1:1f:f4:51:77:37:57:f9:2f:a2:82:e1:29:70:
         25:ca:6c:6b:e5:4a:a7:c0:5a:18:92:3f:9e:81:63:84:c6:cf:
         a0:f4:a2:f7:f1:f5:68:78:ae:40:f0:f0:4c:98:ef:f5:5c:1a:
         a8:43:58:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:10:07 2024 by rpki-client on console-ams.rpki-client.org