Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abc8ef5a-9ffc-4ec0-92c1-99611c70382f/e928eb0b-e312-3468-a365-addc05d55916.roa
File:                     e928eb0b-e312-3468-a365-addc05d55916.roa (raw, json)
Hash identifier:          dNervHfLINgJxsL3WRQK2KcsIOvBJubvOU0/u2fO0/0=
Subject key identifier:   D6:19:80:35:31:FB:51:7D:2C:D9:37:64:CF:6B:44:0D:D8:26:EA:B2
Certificate issuer:       /CN=abc8ef5a-9ffc-4ec0-92c1-99611c70382f
Certificate serial:       010D0C9F43285845CE08F9EFB3181DF2EABE9500
Authority key identifier: 32:3E:6D:9E:50:65:F6:EF:A2:1A:66:99:91:88:31:B3:24:79:DA:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abc8ef5a-9ffc-4ec0-92c1-99611c70382f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abc8ef5a-9ffc-4ec0-92c1-99611c70382f/e928eb0b-e312-3468-a365-addc05d55916.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     62716
IP address blocks:        2602:f9e0::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abc8ef5a-9ffc-4ec0-92c1-99611c70382f/abc8ef5a-9ffc-4ec0-92c1-99611c70382f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abc8ef5a-9ffc-4ec0-92c1-99611c70382f/abc8ef5a-9ffc-4ec0-92c1-99611c70382f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abc8ef5a-9ffc-4ec0-92c1-99611c70382f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:08:f9:ef:b3:18:1d:f2:ea:be:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc8ef5a-9ffc-4ec0-92c1-99611c70382f
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=aaf5257e-a3ad-4854-bb04-2070565d0497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7e:94:6c:b5:b1:ae:bb:d5:28:4f:46:19:10:
                    5d:be:bf:e0:d1:93:84:0d:41:10:87:19:24:6c:9c:
                    1f:8a:dc:76:24:80:91:ae:a2:43:20:c4:8d:8a:4f:
                    76:d2:a3:b2:01:53:38:bc:5d:fa:a3:d7:07:ff:b7:
                    ac:4e:39:79:1d:6d:2a:d2:f8:81:89:7d:4b:59:3b:
                    82:c3:aa:2f:fa:ea:73:98:77:8f:94:3f:4b:29:ac:
                    19:f7:e6:45:1d:44:0b:4e:34:3b:38:2e:84:a9:84:
                    41:b3:0a:c7:c4:ed:ca:55:44:01:83:b5:c4:71:01:
                    fb:89:ce:b7:3d:ba:39:16:68:a1:00:d5:85:b5:93:
                    b4:c4:d0:28:cc:64:63:4f:77:3b:49:4e:d7:69:9f:
                    24:38:94:37:50:5e:24:13:b5:35:4c:3b:59:bc:5f:
                    a8:81:69:43:6a:99:c9:5a:e8:10:06:0d:bc:b5:8c:
                    2c:67:d2:02:9d:4f:c7:56:0c:34:a5:77:48:a2:fc:
                    e9:da:96:19:7f:af:82:8e:26:36:ca:4d:2d:ce:27:
                    da:b9:f3:eb:00:18:94:4d:9c:b9:36:e6:5c:bb:9a:
                    a9:dc:7a:fc:e5:7e:f6:d1:6b:30:ec:71:ad:58:1b:
                    7e:2a:14:52:dd:25:39:80:a1:29:c1:ba:16:58:30:
                    1b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:19:80:35:31:FB:51:7D:2C:D9:37:64:CF:6B:44:0D:D8:26:EA:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abc8ef5a-9ffc-4ec0-92c1-99611c70382f/e928eb0b-e312-3468-a365-addc05d55916.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abc8ef5a-9ffc-4ec0-92c1-99611c70382f/abc8ef5a-9ffc-4ec0-92c1-99611c70382f.crl

            X509v3 Authority Key Identifier:
                keyid:32:3E:6D:9E:50:65:F6:EF:A2:1A:66:99:91:88:31:B3:24:79:DA:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abc8ef5a-9ffc-4ec0-92c1-99611c70382f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9e0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:26:4d:2e:50:02:de:a4:1b:09:54:23:b0:3a:1b:02:fe:3f:
         0d:a0:c5:f4:64:43:b6:f1:48:b3:07:bf:66:c9:82:f8:e3:f8:
         7a:65:92:31:0a:18:71:0f:02:cf:c4:e0:83:b1:3d:d1:2b:d3:
         1b:f0:a2:65:c4:fc:26:4e:39:4b:9f:1a:19:b6:28:be:c8:06:
         70:15:c2:3f:8a:5f:26:6b:77:13:a9:d5:85:c3:08:6c:af:74:
         1f:ca:5f:70:5d:ba:5d:ea:d6:1d:06:13:09:a1:1d:41:5c:a2:
         9b:4b:fe:32:bc:00:10:33:e5:2c:00:40:68:ba:36:4a:d5:46:
         d3:00:6f:86:43:98:22:06:a6:22:2f:bc:6b:1c:fe:6e:e0:55:
         4e:80:96:7a:3a:84:35:79:39:3a:7e:28:92:d5:47:1e:53:fd:
         ea:4f:a4:a6:c9:9f:77:b6:82:ab:09:82:59:85:8f:33:b0:55:
         1d:eb:99:dc:4b:38:0e:4c:f5:3e:4b:d1:3c:d7:5a:39:fd:04:
         99:b0:9a:73:be:85:a7:0c:0f:57:ef:4a:05:e4:d0:a1:30:a4:
         32:17:b1:3a:71:e7:9b:3c:7d:63:bc:59:1c:53:82:69:5a:63:
         64:72:94:f3:54:b4:f7:ab:09:e7:a0:a3:6a:fd:37:ab:fd:75:
         2a:01:60:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 5 14:09:04 2024 by rpki-client on console-ams.rpki-client.org