Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/48bc5f12-2e00-3c35-992a-1d932ad79e10.roa
File:                     48bc5f12-2e00-3c35-992a-1d932ad79e10.roa (raw, json)
Hash identifier:          K4JlQp1ZbTHi0/a6YmZYCunrWABfQsJPpz9RCawCQcs=
Subject key identifier:   26:DD:9B:13:CC:49:AC:63:4D:7E:4A:B4:72:7A:C3:26:62:96:35:62
Certificate issuer:       /CN=6a30b207-de04-425f-94e9-ee12d4529f56
Certificate serial:       010D0C9F4328584507F0210AB61F677936A1ED80
Authority key identifier: 4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/48bc5f12-2e00-3c35-992a-1d932ad79e10.roa
Signing time:             Tue 27 Feb 2024 14:00:31 +0000
ROA not before:           Tue 27 Feb 2024 14:00:31 +0000
ROA not after:            Mon 27 May 2024 13:00:31 +0000
asID:                     14618
IP address blocks:        2601:9200::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:07:f0:21:0a:b6:1f:67:79:36:a1:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a30b207-de04-425f-94e9-ee12d4529f56
        Validity
            Not Before: Feb 27 14:00:31 2024 GMT
            Not After : May 27 13:00:31 2024 GMT
        Subject: CN=6124a71c-1a9a-4d9d-8956-98f3dce57307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:dd:a0:44:08:47:f3:79:18:78:85:2a:97:aa:
                    31:0a:cc:93:1c:bb:8a:f6:de:d9:ca:bd:9e:9c:22:
                    80:66:be:97:e5:d1:16:ac:72:74:4a:d1:83:47:2f:
                    99:38:f4:d0:48:43:f3:c1:0e:9b:3b:73:80:18:0c:
                    a5:2f:46:96:fa:2f:eb:26:e8:ec:e0:2d:8d:b1:2f:
                    60:20:10:6d:0f:f3:96:e1:9c:ff:b5:b0:17:95:8a:
                    95:f1:33:5a:a5:14:96:b1:47:e4:df:9b:3a:7b:75:
                    a4:38:17:a5:55:6c:29:0a:ab:d4:f0:82:ff:06:e1:
                    ce:f7:06:71:1d:c9:52:fb:b8:c0:48:d1:31:1e:dc:
                    da:60:59:2c:84:36:6c:8b:10:a0:b3:3a:f5:ff:70:
                    a3:92:e3:bb:fc:a9:b2:90:85:cf:64:95:ae:66:08:
                    72:1b:b4:24:b4:84:7a:75:b4:1e:ca:79:8a:fa:72:
                    d2:87:8b:99:2b:56:9d:3b:fd:52:9e:56:62:12:c3:
                    1a:cc:4a:e3:bc:e2:f5:b1:7d:fc:75:a1:ff:f0:b7:
                    15:3d:6d:b1:8a:c8:09:91:15:46:c5:97:e5:ea:4e:
                    f4:30:6b:23:eb:4b:07:e0:25:8f:85:3f:0f:2c:bc:
                    7c:52:0f:cc:25:92:73:73:67:4f:1b:51:56:ee:c5:
                    bb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DD:9B:13:CC:49:AC:63:4D:7E:4A:B4:72:7A:C3:26:62:96:35:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/48bc5f12-2e00-3c35-992a-1d932ad79e10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl

            X509v3 Authority Key Identifier:
                keyid:4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:9200::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:f7:79:b4:2d:4c:97:e6:5d:14:bb:57:2a:67:87:24:f9:8d:
         6a:11:ce:8c:42:5d:1a:90:a3:a9:fc:fa:4d:dd:c5:d3:de:cf:
         4f:f2:1b:60:6e:58:a8:dc:6e:1c:11:df:57:08:03:53:dc:8b:
         60:70:51:3c:a5:1c:f3:3b:e1:88:83:1a:27:2a:6f:f0:bb:bc:
         c8:53:22:2f:96:5c:49:21:a5:19:08:e8:5a:e7:a0:61:d3:df:
         68:27:b4:a8:ff:eb:20:30:76:8c:fa:36:62:0b:33:b7:fa:10:
         0a:72:f6:5b:2e:12:bd:e2:3a:17:8d:64:1e:b0:dd:91:01:fc:
         68:1a:08:ba:87:49:06:06:0e:f0:12:d6:a0:5a:59:75:16:35:
         15:f5:fe:c8:23:c3:51:c8:a7:da:5d:f3:89:6a:85:c7:f1:60:
         2c:e8:aa:8e:54:71:b4:b9:bf:be:b3:54:f7:40:14:bd:e3:5d:
         85:9c:45:0f:20:ef:57:6b:aa:1a:9c:3e:64:ef:d1:19:d8:d8:
         72:8c:27:0b:dc:f1:96:f5:7f:26:3d:05:3c:4b:56:5a:fd:63:
         f5:fa:ba:d1:f0:1a:af:bc:e3:53:35:5c:de:81:e5:3c:33:d6:
         7f:1a:29:5a:3f:be:76:ac:47:48:21:f5:a1:dd:f4:ac:51:3c:
         4f:c1:f5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:15:11 2024 by rpki-client on console-fra.rpki-client.org