Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be7c85fa-e9c3-3d88-a8d1-299abe7711f6.roa
File:                     be7c85fa-e9c3-3d88-a8d1-299abe7711f6.roa (raw, json)
Hash identifier:          CH6Y6Sk7HjzSlW27Voxtc2SyDdrNZBc+thoDoVSybFI=
Subject key identifier:   32:E4:4B:24:38:3D:19:8A:4C:20:26:83:D2:74:10:86:6D:DF:DF:16
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004A7150ADAC7AB3DCD14A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be7c85fa-e9c3-3d88-a8d1-299abe7711f6.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     13367
IP address blocks:        2601:444:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:71:50:ad:ac:7a:b3:dc:d1:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=f4fdd507-2fd2-40ee-be12-355ca078ed98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bd:50:6f:3a:91:92:4c:86:c8:0a:f0:21:74:
                    0a:a8:66:59:3a:ab:51:4d:1a:8e:c4:c7:cf:2e:5f:
                    f0:8a:9b:55:2c:8b:5f:a5:59:5a:ef:da:67:cd:32:
                    95:60:ba:78:b9:b2:fd:93:e2:90:39:15:6b:d3:9e:
                    b9:50:4c:40:ec:8e:92:23:14:1e:da:bd:dc:8e:c8:
                    b4:09:a1:e6:33:b3:b3:42:c6:16:9e:22:a4:2c:71:
                    45:63:77:2f:56:7d:44:f6:29:37:5f:62:f7:cb:1a:
                    65:95:9f:4f:5f:45:10:56:3f:6e:73:f7:d6:39:a0:
                    b3:2e:6d:cd:2a:97:33:0b:a6:c9:11:93:61:e4:6c:
                    82:bd:22:7c:cf:de:62:07:3f:7b:47:55:58:73:ff:
                    c3:3d:bb:a9:31:be:b9:35:2d:d8:3e:cc:57:75:5e:
                    7d:b6:b6:4b:f9:6c:5a:7c:f4:df:2a:4b:21:a3:f9:
                    08:59:a9:35:20:6a:a8:31:11:f5:c8:be:d0:98:56:
                    55:a7:a4:e7:89:c6:2f:7d:93:d8:d9:85:fb:a6:f7:
                    32:e4:a0:46:62:f2:52:08:e0:84:73:f4:97:99:d6:
                    9a:3b:1c:84:84:c4:fb:5f:8c:31:2c:e3:94:99:b5:
                    f9:0e:d3:36:f8:03:d6:81:3d:b4:d7:02:03:2b:60:
                    33:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E4:4B:24:38:3D:19:8A:4C:20:26:83:D2:74:10:86:6D:DF:DF:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be7c85fa-e9c3-3d88-a8d1-299abe7711f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:444:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:72:bf:47:6f:50:17:f8:11:cc:ee:ea:ee:52:74:99:7a:a2:
         9f:c5:5b:b1:b1:0c:4b:3f:4a:f6:2d:e3:50:d4:22:31:e0:5e:
         26:4f:bc:40:1d:6d:bd:ce:e9:ec:8f:de:f4:0a:7d:da:8c:dd:
         9a:ea:b0:3a:e5:90:35:0e:ce:2a:71:13:65:6c:ea:cb:96:83:
         63:77:71:66:90:0b:e7:c7:b9:e5:8a:08:2a:df:12:ce:19:87:
         5b:03:7d:50:28:26:67:98:6d:71:3e:c8:ee:cd:1f:da:8d:4f:
         f7:46:5c:69:de:ac:35:4a:98:db:e7:fd:30:2f:4d:a2:ed:62:
         24:a5:84:d2:e3:40:77:cd:ec:80:06:0b:57:7b:f7:3c:b6:4f:
         73:6f:b2:da:e7:e8:40:09:b8:30:b0:be:f4:21:78:00:1e:74:
         e7:04:ea:1e:6c:71:7d:60:a5:90:2a:f8:0c:60:a7:49:00:7e:
         b9:84:ff:6e:f4:62:e7:b1:69:8e:2c:30:c0:31:97:38:c9:c6:
         ea:36:79:f4:1a:93:d1:30:1a:bf:58:dd:aa:55:2c:4d:6b:4d:
         fa:88:a7:cd:05:59:92:b2:3b:b5:cc:c3:1e:90:3a:fd:ef:f3:
         ce:84:34:8a:88:ac:ef:cc:70:73:ee:e2:bb:3a:0e:a9:1e:53:
         6e:98:9e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:03:41 2024 by rpki-client on console-ams.rpki-client.org