Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8e70db2c-74a3-3945-87ea-aebd9dd22796.roa
File:                     8e70db2c-74a3-3945-87ea-aebd9dd22796.roa (raw, json)
Hash identifier:          h573CYFWWc5XPW/tnJHBZgKf88gjU6naLi/56q5sXzM=
Subject key identifier:   94:7B:30:1F:F0:86:14:64:94:ED:06:BC:0F:39:42:8A:D9:A6:DE:57
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285845D39E6374453AB8E8D7BD3280
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8e70db2c-74a3-3945-87ea-aebd9dd22796.roa
Signing time:             Fri 10 May 2024 13:00:36 +0000
ROA not before:           Fri 10 May 2024 13:00:36 +0000
ROA not after:            Thu 08 Aug 2024 13:00:36 +0000
asID:                     54203
IP address blocks:        2606:b300:a000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d3:9e:63:74:45:3a:b8:e8:d7:bd:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: May 10 13:00:36 2024 GMT
            Not After : Aug  8 13:00:36 2024 GMT
        Subject: CN=013883de-e1b6-455e-b6e4-db158a85cce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e8:1a:85:60:8d:8b:04:6e:36:0e:a4:ee:d0:
                    a1:f5:a8:b3:a5:57:20:48:fc:37:13:a6:d7:8e:e9:
                    e0:f9:26:bc:a7:4a:95:f5:94:b4:05:24:7a:5d:b4:
                    a5:1f:51:31:67:9d:42:29:ef:ad:04:b5:ed:f1:63:
                    a4:f9:6b:9b:a1:e3:9c:fd:a7:9e:cc:51:1f:a4:98:
                    69:a7:2f:67:5a:4f:27:4c:7f:da:d7:81:ef:e4:a5:
                    4a:09:9e:d2:c1:f0:4f:95:64:ee:ec:aa:eb:0e:59:
                    16:12:5c:cc:94:b3:10:38:8c:d8:41:3c:47:6e:1f:
                    e2:e4:b8:3e:b7:fb:74:b0:91:b1:7e:6b:6a:36:08:
                    f5:fc:65:6d:d8:92:32:8e:22:71:74:c8:c1:e9:fb:
                    74:b7:25:1d:52:f8:ba:57:53:02:73:4c:77:12:4f:
                    2e:1a:b1:32:d6:b0:42:35:bb:bd:7a:dc:6e:9e:52:
                    c0:14:e7:67:a5:40:ab:db:82:e7:ea:ca:b9:67:91:
                    df:c1:8b:13:c6:a8:e7:04:39:7c:07:e5:c1:f9:88:
                    45:7e:dd:01:2c:69:a7:fd:3a:e2:3f:7f:d6:5d:3e:
                    72:a7:7f:ec:ca:d1:c7:3f:62:0a:a9:3c:36:37:52:
                    9d:50:01:43:f5:7e:87:96:28:84:18:76:39:fb:9e:
                    ec:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:7B:30:1F:F0:86:14:64:94:ED:06:BC:0F:39:42:8A:D9:A6:DE:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8e70db2c-74a3-3945-87ea-aebd9dd22796.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b300:a000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:03:a9:63:6c:b5:8d:04:57:83:c6:9a:cb:d3:f9:a2:6d:97:
         76:f8:d8:5b:b7:40:d5:05:75:56:fe:d0:89:02:2b:f0:0f:f0:
         e5:91:d7:bc:73:0c:00:26:8d:79:0c:76:16:98:90:92:b4:37:
         51:90:7f:e6:7e:a1:c3:c0:c5:a9:df:57:e6:67:98:52:72:79:
         43:ec:3d:d6:f3:1c:1d:d0:65:75:56:54:26:59:29:66:b8:12:
         c0:1b:6d:ce:7e:0a:61:e1:09:4a:02:bf:f1:15:65:d5:cd:a1:
         f0:ae:ca:64:61:c7:37:99:e0:d7:21:10:d4:99:9f:ee:4b:84:
         8e:f4:72:1a:85:e5:5a:6f:ec:19:30:02:f5:ab:02:59:48:6a:
         64:8c:7d:40:3c:e0:36:ed:fd:8b:1a:c5:e6:9e:c3:a6:d5:25:
         3a:11:d3:27:9f:8a:10:e9:79:b6:df:b6:34:2f:dc:03:79:d7:
         c7:c3:bc:f0:f0:a5:4c:18:83:15:3c:3e:ee:e9:75:62:62:c3:
         57:13:2d:95:72:fb:61:00:8e:7e:8d:2f:89:d4:f2:bd:4a:57:
         24:9a:c0:b9:8b:cc:45:fe:e4:94:11:b4:27:fc:8b:94:00:30:
         8c:eb:71:39:27:24:69:83:8c:06:45:44:06:b4:fa:ab:43:40:
         cb:03:d0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:35:02 2024 by rpki-client on console-fra.rpki-client.org