Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/724a3de3-fa7b-350e-9620-6cb73ca032ec.roa
File:                     724a3de3-fa7b-350e-9620-6cb73ca032ec.roa (raw, json)
Hash identifier:          9oAJjftnTWnH0bQ+8EyOFRAsVp/wPzihCfO64Kiu6X8=
Subject key identifier:   AB:DA:67:DC:FF:C2:EE:8D:86:A0:AE:27:13:8D:3F:48:67:1E:10:9C
Certificate issuer:       /CN=e14e5e67-4161-4a2d-bd73-2deb5f1d8f51
Certificate serial:       010D0C9F432858457A487124AF172B6BA85FDE00
Authority key identifier: 1B:D7:71:21:BE:98:06:94:A9:F3:2C:ED:72:1C:49:54:48:BE:69:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/724a3de3-fa7b-350e-9620-6cb73ca032ec.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     395823
IP address blocks:        2602:fce8::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Jun 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:71:24:af:17:2b:6b:a8:5f:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14e5e67-4161-4a2d-bd73-2deb5f1d8f51
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=1f6b1ccd-7a9f-4486-a4a3-048afda98e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0f:6f:7d:87:c5:e7:d0:b0:91:10:4b:c2:18:
                    68:d7:e4:e5:51:4d:cd:aa:9d:8d:ec:ec:f7:fd:22:
                    40:e1:c1:a4:e7:2e:db:ff:ae:0f:26:43:65:57:e1:
                    3d:d4:58:ac:fd:6b:c6:74:08:82:41:43:b1:cb:d5:
                    cf:b1:64:9a:36:eb:03:2f:7b:00:32:1f:c4:64:65:
                    cf:8c:59:c3:a7:52:19:2d:8c:bc:36:87:4b:a2:2c:
                    40:1c:02:35:2e:72:ec:f8:32:ee:dc:7e:68:e8:86:
                    56:00:64:d6:d2:0d:c8:a2:8f:54:dd:f3:a2:1a:6f:
                    0f:c0:37:31:01:1f:04:61:03:f6:7f:31:e1:a4:f6:
                    ff:8f:9a:43:7b:f5:8a:1c:90:b8:ea:a4:32:9d:a9:
                    c9:87:a1:7c:7a:aa:e5:6f:4e:dd:68:81:62:39:5d:
                    9c:75:79:61:f0:66:bd:f8:11:b8:68:92:a9:6c:4d:
                    ae:6c:47:57:aa:b3:8b:c2:d0:d7:50:0c:54:6d:ac:
                    89:c0:12:a4:8d:93:c2:a3:7f:c5:56:51:0d:1e:be:
                    f1:51:74:53:af:19:99:0f:8c:dc:2d:78:b0:af:b9:
                    e5:fc:86:b1:f6:0e:62:f0:bb:0f:63:9b:29:2d:16:
                    0c:da:a2:95:52:99:7d:fc:18:fb:90:7f:79:ad:7c:
                    65:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DA:67:DC:FF:C2:EE:8D:86:A0:AE:27:13:8D:3F:48:67:1E:10:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/724a3de3-fa7b-350e-9620-6cb73ca032ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.crl

            X509v3 Authority Key Identifier:
                keyid:1B:D7:71:21:BE:98:06:94:A9:F3:2C:ED:72:1C:49:54:48:BE:69:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fce8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:fb:40:2d:e7:70:23:bd:6d:e1:14:70:d8:27:d1:f9:62:61:
         93:54:4f:09:2a:cf:d7:a6:30:b2:31:39:d4:8d:49:51:2e:1c:
         38:22:29:99:29:3c:ed:98:77:16:4a:6b:13:b5:8f:ff:ec:5c:
         87:99:ec:6b:ea:c4:8e:54:3f:4f:8b:d1:11:a7:87:16:79:08:
         18:9a:a5:cb:f4:41:38:4a:f2:12:75:81:65:43:93:7b:33:01:
         e2:13:35:b6:bf:7e:e9:cc:6d:a9:ce:36:b9:b5:28:15:ba:89:
         e0:e2:79:c4:8b:57:79:86:14:80:8a:1a:c1:59:41:8c:9c:95:
         83:8a:7e:f4:30:ff:e0:d1:c6:0f:b6:5d:c8:4c:5c:ea:2f:17:
         86:c2:6a:2f:a6:3e:4d:0c:66:c3:65:d7:39:b2:4d:2b:d0:b9:
         6e:1c:a3:2f:3f:ca:9e:b9:56:9c:b0:77:6f:40:19:fa:93:ba:
         3d:39:b0:56:ad:c7:eb:49:4e:e4:bb:d3:79:b5:9d:4b:06:46:
         3a:66:2c:d4:15:6e:3e:b4:3b:c6:26:28:c1:cd:6e:54:69:43:
         f8:a7:10:81:32:7f:0f:81:6e:c0:46:90:cd:2b:cf:56:f4:e5:
         26:be:86:4a:61:90:f7:c2:ac:f4:1a:fe:ea:12:94:f5:ac:e7:
         68:de:64:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 03:05:15 2024 by rpki-client on console-fra.rpki-client.org