Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/d61f4303-b118-3610-b7c0-315c48fdeeb9.roa
File:                     d61f4303-b118-3610-b7c0-315c48fdeeb9.roa (raw, json)
Hash identifier:          ndQ/62vhcElCCxCjxhNoaMoCfUbZ0IBCgCB++sQL9cw=
Subject key identifier:   7B:BA:8E:9D:21:B9:F8:BC:9A:F1:0D:14:FA:DC:B7:F4:96:F1:51:D2
Certificate issuer:       /CN=b37c853d-f614-417a-87d9-fed9cf9b6e4a
Certificate serial:       010D0C9F4328584538AD49FB0D37FA7B09D47E80
Authority key identifier: 3E:A7:F9:01:23:61:AC:1F:79:59:23:F4:91:51:C1:90:B3:00:69:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/d61f4303-b118-3610-b7c0-315c48fdeeb9.roa
Signing time:             Sat 16 Mar 2024 01:00:25 +0000
ROA not before:           Sat 16 Mar 2024 01:00:25 +0000
ROA not after:            Fri 14 Jun 2024 01:00:25 +0000
asID:                     399899
IP address blocks:        2602:fbb7:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:38:ad:49:fb:0d:37:fa:7b:09:d4:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b37c853d-f614-417a-87d9-fed9cf9b6e4a
        Validity
            Not Before: Mar 16 01:00:25 2024 GMT
            Not After : Jun 14 01:00:25 2024 GMT
        Subject: CN=202470c2-9d9d-47cd-a078-6e7b3fa2450b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:54:08:f4:71:27:8e:68:e2:ab:4e:5b:b8:0a:
                    46:06:2c:c7:87:c5:2d:03:19:99:35:fe:b1:f5:c1:
                    b5:1a:88:10:65:48:67:02:4d:67:1b:cf:8f:67:43:
                    b2:97:af:44:47:22:d6:1a:b8:81:e5:12:49:c2:2a:
                    da:56:36:e1:b4:b0:5d:75:13:cc:7b:c5:18:f3:f8:
                    cd:7e:11:61:2c:12:43:56:8d:68:f8:87:d8:ad:4e:
                    dd:5b:b9:96:e1:8d:0f:9a:34:d4:a0:1f:6e:2a:60:
                    e3:f1:32:d4:80:55:65:48:30:f4:f5:8b:21:ee:9c:
                    de:72:ca:61:e3:cc:d4:1f:b6:31:d1:d9:72:ee:a3:
                    21:ac:9e:66:1b:48:c1:45:b6:01:01:bd:4b:f5:db:
                    9b:82:41:14:82:8d:df:56:8d:ac:5b:a0:63:0c:06:
                    2c:d4:15:02:c6:f4:c3:fa:19:d5:3b:12:ed:e8:93:
                    7a:84:90:7a:e0:ff:81:1f:17:7c:c3:f0:d8:34:83:
                    31:24:67:15:91:16:50:7d:b3:60:d5:c7:74:b8:af:
                    b1:e3:7d:e9:b6:96:76:4c:77:34:04:01:fa:90:f9:
                    ea:49:41:8e:a2:43:5d:28:ca:98:cf:2c:83:80:d2:
                    af:a9:1d:58:20:c1:4d:24:f0:39:39:87:ca:3d:a1:
                    ae:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BA:8E:9D:21:B9:F8:BC:9A:F1:0D:14:FA:DC:B7:F4:96:F1:51:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/d61f4303-b118-3610-b7c0-315c48fdeeb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.crl

            X509v3 Authority Key Identifier:
                keyid:3E:A7:F9:01:23:61:AC:1F:79:59:23:F4:91:51:C1:90:B3:00:69:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbb7:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:48:d3:13:a6:7e:b3:a6:c0:65:dc:17:02:61:34:e1:07:c5:
         85:e8:36:55:f1:89:c2:77:cb:b3:56:97:3f:46:be:c3:14:81:
         2e:98:a9:e9:88:8b:60:25:4c:63:84:c0:3d:9c:b4:f5:54:21:
         15:d5:64:3b:e6:e9:9b:00:3e:39:05:0d:a9:cf:11:02:35:23:
         d0:c0:67:a5:ff:cd:72:50:94:35:46:20:73:5d:a5:10:53:e5:
         9b:3f:d1:4f:b6:68:cf:7f:af:e0:03:0c:7b:fe:8f:6c:0f:52:
         9f:ca:bc:5e:91:ef:fb:dc:95:07:ac:5d:24:81:dc:0d:70:3a:
         54:c9:76:cb:77:76:ef:2e:4b:78:e4:fb:da:7e:2d:c4:b6:3e:
         6d:63:c7:61:d2:e5:27:b0:06:cf:b2:73:8f:76:c5:17:47:3b:
         9b:af:93:8e:42:fb:84:86:d8:f7:75:a4:28:43:04:f4:15:e6:
         5b:99:56:00:e6:ce:bb:de:8b:30:d8:d4:45:b9:78:b0:73:17:
         24:6e:3e:43:99:c2:ac:44:ee:d6:36:a2:5a:b2:20:d3:25:79:
         1d:b1:55:52:5d:2a:78:b7:60:80:21:67:26:f9:ee:eb:a3:10:
         64:f4:39:f5:77:d2:9a:28:6f:fd:dd:7a:83:35:9d:ab:61:54:
         97:1d:c2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:16:07 2024 by rpki-client on console-ams.rpki-client.org