Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5e54f1f-4712-4fc8-be8a-cf367fb1c2c9/ceb9f91f-0815-3fdf-a1fd-fd1aa3c70c57.roa
File:                     ceb9f91f-0815-3fdf-a1fd-fd1aa3c70c57.roa (raw, json)
Hash identifier:          VweST9gtuACZT8jfhuDMGKyiuBYd4V3vjgi932E5XqQ=
Subject key identifier:   94:2A:A0:3E:E3:42:2F:39:AB:97:84:CC:6D:91:ED:55:1A:F2:0E:F6
Certificate issuer:       /CN=d5e54f1f-4712-4fc8-be8a-cf367fb1c2c9
Certificate serial:       010D0C9F432858448784B17F8935666A8FAD9C00
Authority key identifier: 6D:25:58:F9:D6:2F:92:B6:BA:9C:09:F6:76:FE:55:B7:BF:37:E5:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5e54f1f-4712-4fc8-be8a-cf367fb1c2c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5e54f1f-4712-4fc8-be8a-cf367fb1c2c9/ceb9f91f-0815-3fdf-a1fd-fd1aa3c70c57.roa
Signing time:             Fri 12 Jan 2024 14:00:28 +0000
ROA not before:           Fri 12 Jan 2024 14:00:28 +0000
ROA not after:            Thu 11 Apr 2024 13:00:28 +0000
asID:                     397557
IP address blocks:        2602:fddf::/36 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5e54f1f-4712-4fc8-be8a-cf367fb1c2c9/d5e54f1f-4712-4fc8-be8a-cf367fb1c2c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5e54f1f-4712-4fc8-be8a-cf367fb1c2c9/d5e54f1f-4712-4fc8-be8a-cf367fb1c2c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5e54f1f-4712-4fc8-be8a-cf367fb1c2c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:87:84:b1:7f:89:35:66:6a:8f:ad:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e54f1f-4712-4fc8-be8a-cf367fb1c2c9
        Validity
            Not Before: Jan 12 14:00:28 2024 GMT
            Not After : Apr 11 13:00:28 2024 GMT
        Subject: CN=b7166e3f-6f76-4773-9822-8e5156d7e3f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ea:18:f3:d3:32:cc:36:1b:c4:86:72:a5:14:
                    e0:1a:5b:a4:05:2b:32:28:63:e7:76:68:8e:63:eb:
                    fe:cc:49:fd:4d:bf:31:d7:6c:de:f8:8a:59:30:e2:
                    9d:90:db:87:13:f9:39:a2:49:a8:5a:1b:96:2c:74:
                    2c:5b:a9:c0:a6:b0:ac:1c:ae:b5:83:8d:4d:d1:d4:
                    43:31:9f:12:7e:87:4d:05:24:59:f6:41:ef:c5:c8:
                    9b:38:3a:ef:9e:a8:50:b8:8f:4d:11:ff:1d:c9:04:
                    e1:d3:78:c8:07:c1:9e:ef:49:56:f6:d1:e2:e1:c2:
                    0e:e1:ad:13:d5:64:09:84:e4:b5:8f:4c:53:1d:1a:
                    fc:62:59:d6:e1:05:97:a7:86:72:67:a0:ae:fe:e4:
                    72:53:63:fe:35:c1:36:43:32:15:d4:03:a0:36:93:
                    4c:06:47:42:2f:db:17:b8:51:1b:3b:f4:88:42:a1:
                    2a:d3:07:56:0d:06:5d:ca:62:7f:1f:2e:87:08:74:
                    1e:51:64:3b:d0:34:2b:eb:ec:03:68:fc:47:69:92:
                    68:c4:59:02:3b:c4:2d:3f:4b:3d:e3:bf:84:fb:b1:
                    df:a0:65:78:23:a3:db:e3:e3:a5:47:7c:64:1c:62:
                    43:96:ab:b0:fd:9d:6d:d4:5c:fc:5d:86:6b:1c:af:
                    95:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2A:A0:3E:E3:42:2F:39:AB:97:84:CC:6D:91:ED:55:1A:F2:0E:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5e54f1f-4712-4fc8-be8a-cf367fb1c2c9/ceb9f91f-0815-3fdf-a1fd-fd1aa3c70c57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5e54f1f-4712-4fc8-be8a-cf367fb1c2c9/d5e54f1f-4712-4fc8-be8a-cf367fb1c2c9.crl

            X509v3 Authority Key Identifier:
                keyid:6D:25:58:F9:D6:2F:92:B6:BA:9C:09:F6:76:FE:55:B7:BF:37:E5:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5e54f1f-4712-4fc8-be8a-cf367fb1c2c9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fddf::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:5f:a9:da:86:42:d6:d7:b1:67:e6:53:eb:1d:bc:e2:76:68:
         a0:22:f5:2a:fa:34:47:5f:2f:83:08:3f:b8:4f:42:26:3f:e1:
         58:32:2d:3b:b5:0b:bc:41:6c:1e:84:d4:f4:b9:12:92:c3:fe:
         12:8a:ca:e3:9a:32:82:c0:61:0f:30:a4:57:dd:1b:61:26:61:
         f7:a5:69:3d:77:9e:a6:f7:ac:e1:b5:89:f7:88:0d:12:5f:6c:
         ff:58:6b:7f:e5:e8:f2:5a:e3:19:dd:0c:ba:26:d9:ea:d9:b8:
         f4:54:dd:0b:47:ba:2b:e3:a4:7e:8a:43:02:e4:06:a4:61:e7:
         87:f6:57:30:f4:92:a6:ab:d5:54:53:68:b9:bc:e7:5b:26:6c:
         fc:0c:d3:da:8f:ba:03:69:97:2d:8b:9a:88:b1:6f:23:10:79:
         ca:c2:d1:ef:6d:87:48:57:b4:08:8e:e7:89:92:dd:75:10:9b:
         9c:8c:45:ca:e0:32:0b:a0:dd:51:47:4d:4f:a9:dd:9a:7c:8f:
         78:c8:d3:9f:a9:f6:ff:b9:b0:81:2c:ac:99:b9:01:1f:b3:d8:
         8c:62:e0:d3:5c:22:6e:e8:a7:12:f8:a7:a5:5e:5c:20:1f:c3:
         fb:0e:58:ac:ce:ab:af:0c:75:f2:19:c0:02:88:0a:e1:09:72:
         ea:52:35:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 21:43:54 2024 by rpki-client on console-ams.rpki-client.org