Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/c8a8c8b4-e4b4-3011-99ea-bb645f91771c.roa
File:                     c8a8c8b4-e4b4-3011-99ea-bb645f91771c.roa (raw, json)
Hash identifier:          SUZmH5fSHZFs0wAllDaMPiHvesMoKL/H6MMrBbx83jU=
Subject key identifier:   55:C1:82:1A:FF:BC:5D:7B:2B:6A:C5:7B:7A:54:3F:FD:17:19:8F:38
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F43285845BEAE184FFC2212C0607ED780
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/c8a8c8b4-e4b4-3011-99ea-bb645f91771c.roa
Signing time:             Fri 03 May 2024 01:00:24 +0000
ROA not before:           Fri 03 May 2024 01:00:24 +0000
ROA not after:            Thu 01 Aug 2024 01:00:24 +0000
asID:                     0
IP address blocks:        2601:a003::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:be:ae:18:4f:fc:22:12:c0:60:7e:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: May  3 01:00:24 2024 GMT
            Not After : Aug  1 01:00:24 2024 GMT
        Subject: CN=26e6f480-c42d-44ca-83bc-5190f67463bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:12:b6:35:cb:f9:25:03:81:37:c3:bd:7c:a5:
                    af:e1:c6:14:8e:1d:ac:17:35:87:9e:32:53:ea:15:
                    e2:da:25:d8:e9:ce:9f:db:5f:d1:32:bd:7d:25:d6:
                    28:b3:24:d5:41:94:fb:bd:9c:90:3a:c6:ed:cb:43:
                    3d:7e:e9:aa:28:9b:85:7d:39:13:b0:e7:43:66:45:
                    21:8c:a8:74:60:56:0d:31:52:cd:33:67:3f:f8:d5:
                    15:ce:4f:5d:50:ef:e7:06:19:28:af:84:38:0d:a0:
                    3f:98:d3:2b:2f:51:fa:14:33:b5:21:a3:89:61:86:
                    bc:eb:40:b2:f6:86:d7:a3:1a:93:a4:be:64:27:f6:
                    3e:c5:bb:0c:ec:a8:aa:f9:6e:74:13:f8:0c:2d:f6:
                    2c:e6:8c:69:ec:da:86:43:f0:e0:75:62:85:c8:5c:
                    0d:06:dd:eb:fb:28:54:91:47:51:ba:b4:1f:0d:4a:
                    c5:be:4f:54:58:77:41:0b:3c:a2:01:ad:37:4a:bf:
                    f0:53:6f:58:de:e6:1c:25:e2:6b:55:7f:94:d3:a4:
                    a2:3a:45:e1:b3:ac:3d:ee:14:f5:09:4f:04:43:a8:
                    d9:66:58:43:e9:4f:aa:a2:d4:3d:71:ae:0d:50:6a:
                    e0:c8:39:39:37:f5:87:ed:b6:01:3b:f2:6a:3a:2e:
                    16:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C1:82:1A:FF:BC:5D:7B:2B:6A:C5:7B:7A:54:3F:FD:17:19:8F:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/c8a8c8b4-e4b4-3011-99ea-bb645f91771c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:a003::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:8c:1c:fc:00:36:d9:d8:eb:72:bc:2b:18:ac:56:79:48:05:
         1e:6d:15:31:50:04:7f:51:5c:ed:5e:fe:0c:ca:9f:36:2b:27:
         92:9d:ef:ec:71:37:75:b2:36:6e:b4:ed:69:8d:0f:a4:f7:b7:
         2a:f6:3f:a6:8c:13:6b:07:68:2a:22:9d:56:7f:5c:35:c1:17:
         38:aa:59:3e:70:34:86:dd:44:b2:e2:a4:60:cb:cf:c9:11:5b:
         ac:8d:4b:80:20:6b:8c:c1:f0:8b:d8:e4:45:c6:11:06:0a:23:
         ab:cd:74:83:80:20:06:be:27:3f:bd:43:b0:c9:b5:dd:93:80:
         3a:ac:3e:2a:64:c0:65:38:be:bf:06:db:e3:0e:e5:a3:8c:78:
         7e:c1:ff:81:6b:68:02:63:06:d7:cc:eb:67:e5:b1:d2:bb:c9:
         f0:21:4f:f8:18:0e:cc:cf:6e:af:6e:bf:57:b7:08:a7:18:8e:
         a3:4d:99:30:b9:32:b6:1e:0f:38:4f:08:10:66:ad:5d:b2:c6:
         39:28:6c:ff:27:03:f9:0d:7f:39:30:d4:f9:4c:48:be:6a:81:
         42:11:bb:05:b3:e6:4d:26:13:8b:3b:e9:20:0a:8b:58:8a:54:
         95:24:47:06:d9:ae:8e:c7:d7:15:53:a6:51:34:bb:0f:76:70:
         db:f9:1e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:45:58 2024 by rpki-client on console-ams.rpki-client.org