Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/93f780c0-9c8e-3aa6-80f1-c7d227eeb84a.roa
File:                     93f780c0-9c8e-3aa6-80f1-c7d227eeb84a.roa (raw, json)
Hash identifier:          Qov6fY3AEItkooVgNO9NdT3g/nk9T7qS1zrpOGVXpCg=
Subject key identifier:   E9:6A:41:5B:A9:15:34:50:18:FC:CB:43:DE:67:8B:70:94:E1:C5:A2
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F43285845DBFE61A79DEDFADC0971CE60
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/93f780c0-9c8e-3aa6-80f1-c7d227eeb84a.roa
Signing time:             Mon 13 May 2024 13:00:34 +0000
ROA not before:           Mon 13 May 2024 13:00:34 +0000
ROA not after:            Sun 11 Aug 2024 13:00:34 +0000
asID:                     8075
IP address blocks:        2620:147::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:db:fe:61:a7:9d:ed:fa:dc:09:71:ce:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: May 13 13:00:34 2024 GMT
            Not After : Aug 11 13:00:34 2024 GMT
        Subject: CN=f5ff917e-2a8f-4abf-abd7-c6a609cd5b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a8:d6:15:90:5a:aa:67:b3:f2:a5:d4:32:01:
                    d3:8f:ab:3e:bb:7e:f6:30:d8:6b:14:ff:e4:9d:e9:
                    86:5a:aa:ab:e3:64:2d:1e:50:d1:6b:73:a6:aa:3c:
                    09:47:21:ce:01:fd:cd:67:a2:03:ce:3d:e6:fb:74:
                    79:64:f9:3b:7c:8e:86:ba:c1:41:ae:20:08:b0:1d:
                    cf:77:fe:b3:f5:e8:ca:37:f0:dd:cb:b6:8c:61:41:
                    4f:a2:66:97:dc:e4:12:96:a9:5b:cd:0c:91:4b:d5:
                    6f:16:7c:63:f4:f1:d1:c8:da:a3:b6:9c:bf:df:ad:
                    45:02:d8:58:96:6d:7a:69:19:6b:4e:39:1b:14:29:
                    9b:dc:bf:70:0e:70:06:10:cd:43:4e:72:8d:08:fb:
                    54:32:1b:2f:23:c9:27:e0:fc:f6:37:d2:c2:20:3e:
                    12:33:8e:2f:1d:6c:31:e3:de:b6:87:d5:ad:df:13:
                    b0:ae:a1:eb:00:38:03:33:ec:f3:70:06:be:88:21:
                    56:2b:81:ae:ba:9f:ee:64:4e:5a:a4:fe:42:32:5d:
                    8d:aa:30:94:82:29:95:75:1c:97:e6:03:cc:d5:b9:
                    ff:37:08:71:59:9c:88:31:73:c0:18:ab:09:01:35:
                    c1:88:da:c2:98:41:fc:64:23:17:f5:37:4b:2a:c9:
                    ac:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:6A:41:5B:A9:15:34:50:18:FC:CB:43:DE:67:8B:70:94:E1:C5:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/93f780c0-9c8e-3aa6-80f1-c7d227eeb84a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:65:db:e5:6b:c8:86:38:3d:59:f9:d5:92:de:6a:2c:2e:9d:
         62:29:67:df:ce:98:5b:d7:84:e0:4a:81:1c:30:6b:84:05:e5:
         50:59:63:f9:88:a2:ee:a2:a3:36:c3:cd:50:43:c6:9d:bc:4d:
         07:3d:02:f5:3f:0e:69:04:4c:c6:71:9f:03:20:90:41:da:c8:
         82:3e:60:af:83:af:b5:7c:43:d3:fe:df:fb:04:c6:99:ec:21:
         5b:95:6f:0e:93:53:b3:1f:92:94:fc:b0:97:5d:c8:49:06:3d:
         55:d9:a4:ae:08:01:7a:14:29:32:73:dc:d4:48:8d:22:d0:97:
         95:02:5f:ae:b5:ef:04:da:61:0d:51:5d:82:f6:90:2c:a7:d8:
         c1:1b:2f:c0:b9:3c:08:db:1a:13:25:16:9e:44:ab:b6:ea:3b:
         0c:0f:03:f7:36:68:16:4a:f7:10:18:a2:0e:b8:f4:b0:5c:db:
         2f:d9:97:55:6b:1e:66:ad:d0:76:3a:46:2b:81:64:5f:d9:a0:
         9a:66:05:30:92:0a:3a:5d:b2:39:97:a0:64:4d:df:50:14:21:
         ef:8e:30:46:ee:23:05:07:6d:57:a3:40:fe:ab:91:fd:8b:bc:
         1c:8a:24:a2:cc:eb:0e:9b:b5:a8:85:9d:d0:29:63:7c:d9:23:
         c2:dc:29:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:00:44 2024 by rpki-client on console-ams.rpki-client.org