Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/1cfe6891-c3e4-3168-afec-ecebd1b3a476.roa
File:                     1cfe6891-c3e4-3168-afec-ecebd1b3a476.roa (raw, json)
Hash identifier:          TatyMP1d3PbiZ3ULYX4UtrCNlrNcgyotCE4pkA60ctE=
Subject key identifier:   CA:DE:C4:71:95:3A:9C:2C:1B:FB:FE:F0:05:A7:24:35:5F:92:3D:6D
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584516C433D39D301553AE729700
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/1cfe6891-c3e4-3168-afec-ecebd1b3a476.roa
Signing time:             Sun 03 Mar 2024 21:29:11 +0000
ROA not before:           Sun 03 Mar 2024 21:29:11 +0000
ROA not after:            Sat 01 Jun 2024 20:29:11 +0000
asID:                     11055
IP address blocks:        2605:4a80:ef04::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:16:c4:33:d3:9d:30:15:53:ae:72:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Mar  3 21:29:11 2024 GMT
            Not After : Jun  1 20:29:11 2024 GMT
        Subject: CN=ba31206e-9197-4b0d-b41f-000387441ce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5e:79:d3:47:af:41:02:cc:3e:cb:18:4c:c0:
                    76:fd:a7:b5:01:34:7f:8f:c5:36:3e:fe:07:4b:b9:
                    0c:59:53:a8:b9:79:04:c3:9b:d5:69:9c:51:50:44:
                    17:8a:e4:c1:ca:a2:25:4a:7f:a7:7c:fe:03:9e:88:
                    a4:a0:e0:6b:1f:f4:41:d0:ea:16:69:49:93:26:88:
                    f1:a2:fc:bf:c6:0d:c4:00:0e:9e:a5:cb:57:56:db:
                    33:3a:b5:f0:79:2e:1c:a4:cf:14:a9:7a:a4:dd:23:
                    fc:ee:b5:b7:ba:6f:ea:b5:af:f4:ac:b7:97:cd:68:
                    14:fa:5b:7d:5a:d6:c3:9b:8e:21:65:34:b7:60:5c:
                    35:7a:05:d3:5b:3a:ae:ab:76:7c:be:02:ee:28:b2:
                    16:0b:72:7d:19:22:31:cc:f4:d7:d2:61:d8:c9:89:
                    65:8d:03:14:ed:4b:50:f2:a9:e3:42:e0:65:46:43:
                    79:82:7e:78:c9:27:8e:3d:97:f2:a4:07:91:e3:00:
                    65:c1:90:48:5f:4e:25:39:9f:83:05:f2:12:2b:54:
                    e0:80:dc:fa:03:b6:3c:83:4a:3f:61:70:7d:6c:16:
                    10:53:9b:fb:ef:15:40:f7:5f:c0:ce:f8:e2:f7:be:
                    78:eb:12:af:01:eb:b4:8b:04:e3:20:b0:37:1d:d5:
                    41:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DE:C4:71:95:3A:9C:2C:1B:FB:FE:F0:05:A7:24:35:5F:92:3D:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/1cfe6891-c3e4-3168-afec-ecebd1b3a476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4a80:ef04::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:5f:1d:45:9f:ee:90:19:03:35:b3:80:f0:ab:f9:c0:1a:32:
         61:69:99:79:b3:14:7d:9c:72:36:48:de:b4:e8:69:5d:de:5d:
         ed:3f:83:9b:ab:0e:cc:3e:cf:68:91:a9:7b:52:a6:ca:af:0d:
         5f:a9:03:48:05:f3:66:ae:3d:32:8d:a8:24:b9:db:aa:c3:b1:
         e2:6b:e0:dd:df:b1:6d:be:07:56:45:d9:4d:83:25:d2:b0:88:
         be:45:e2:d5:1d:bb:5e:1d:a2:a7:32:f9:dd:f9:cf:d6:7b:ce:
         b0:7b:a7:4f:6d:5e:42:b5:26:7c:24:c8:55:c4:0f:9f:e7:59:
         b6:1d:20:81:ec:65:43:2d:69:01:cc:91:5e:4e:3e:a3:6a:17:
         2e:aa:1c:57:5d:2e:a0:ce:a7:35:58:33:e0:54:b2:11:ea:4e:
         98:2b:a3:6b:db:64:55:45:e9:e7:0f:76:ce:b4:d8:17:ba:1a:
         13:e1:4c:99:ff:29:76:57:39:d9:69:2d:ce:ae:03:2e:99:c0:
         e0:1a:ba:9f:46:97:5d:93:0d:c8:79:ea:eb:ce:87:90:a2:e2:
         2c:d4:02:87:30:c8:e0:35:c0:83:8a:f4:da:7c:72:16:b2:9b:
         41:bc:f2:3a:e9:01:2c:ce:8c:b7:16:87:8e:f8:24:f8:19:20:
         53:85:3b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:57:07 2024 by rpki-client on console-ams.rpki-client.org