Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/689d0932-9e89-3a1e-87c9-e79053ebc7ab.roa
File:                     689d0932-9e89-3a1e-87c9-e79053ebc7ab.roa (raw, json)
Hash identifier:          fwYuDG0RP0jQplAukuJmwNqqfQg3VPmnzvhjKDEW0go=
Subject key identifier:   6C:8E:E5:92:D6:FA:F5:92:43:12:56:5F:E8:6F:E9:11:AD:34:A2:85
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F43285845F683C77C3D98340E0D77F300
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/689d0932-9e89-3a1e-87c9-e79053ebc7ab.roa
Signing time:             Thu 23 May 2024 01:00:26 +0000
ROA not before:           Thu 23 May 2024 01:00:26 +0000
ROA not after:            Wed 21 Aug 2024 01:00:26 +0000
asID:                     62896
IP address blocks:        2001:48f8:f300::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f6:83:c7:7c:3d:98:34:0e:0d:77:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: May 23 01:00:26 2024 GMT
            Not After : Aug 21 01:00:26 2024 GMT
        Subject: CN=f5f455ed-a286-4e1f-8d13-b215b78c1b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b8:d3:57:c5:60:27:3b:90:36:0e:03:d1:d5:
                    c2:08:6f:d1:de:9a:be:0b:20:e3:13:de:d1:e8:ca:
                    62:8a:29:6a:52:99:f7:61:1a:35:0d:4e:35:45:5b:
                    39:15:01:ea:56:5f:b6:e1:cf:f7:8a:a2:cc:c7:b3:
                    34:da:15:91:ee:5e:02:1f:cb:d7:e6:1e:3d:6d:ac:
                    57:3f:ef:53:ee:a3:38:26:4a:08:61:b1:02:d9:9f:
                    2e:6d:4e:f8:61:cb:c5:7c:11:40:ac:67:fc:64:d1:
                    46:02:22:3b:ac:53:ef:6c:72:4e:e5:45:44:d6:4e:
                    12:18:20:66:a7:70:4f:7b:60:a9:2e:55:57:02:bb:
                    31:b3:11:8f:7c:f5:cb:6a:23:4c:3e:c0:a4:88:d2:
                    85:eb:57:19:f8:22:79:8f:5c:16:b1:ce:dc:1a:16:
                    45:12:85:0d:bc:d9:52:b3:e3:9a:7e:73:b7:c5:f5:
                    f5:b8:b6:14:67:b1:b4:7c:f4:46:90:37:74:23:fc:
                    79:fb:53:7b:a4:70:67:1b:ad:2e:e6:af:59:1c:93:
                    15:6e:99:eb:11:92:13:8b:0e:a3:90:be:d4:05:2c:
                    ec:07:ba:c8:86:0b:db:43:0d:b8:41:5c:6f:2d:a7:
                    8e:fb:f1:82:82:0a:b0:92:f9:6d:94:57:c3:01:00:
                    47:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8E:E5:92:D6:FA:F5:92:43:12:56:5F:E8:6F:E9:11:AD:34:A2:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/689d0932-9e89-3a1e-87c9-e79053ebc7ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:48f8:f300::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:38:bd:a3:85:64:c9:4f:da:ee:25:98:ac:26:c7:20:a3:f4:
         ff:c7:d1:35:0d:d0:e4:30:af:98:b9:38:58:6d:c9:ff:91:83:
         3b:da:f2:cc:cb:fd:15:ac:c0:9b:1a:f6:4e:56:d2:aa:1e:56:
         f1:0c:b4:9a:45:6e:94:e1:c5:2a:b8:0f:58:53:34:96:4a:cc:
         42:f4:1f:36:76:6e:d4:15:c8:98:bb:b8:7f:23:2d:0e:90:7a:
         af:c1:c7:5d:b6:4a:28:00:dc:b3:b9:d4:03:6d:d2:32:09:d4:
         6f:99:c4:b7:e7:c9:3a:aa:a4:a4:83:17:0d:80:dd:a6:08:ae:
         8a:af:aa:26:bb:b0:16:af:08:0f:30:1b:4e:d3:63:9e:52:a2:
         7f:b3:2c:a8:36:24:08:b1:c9:d9:03:be:09:16:56:f8:e8:b4:
         79:b2:6b:7a:bf:12:07:31:da:95:80:4c:57:75:2a:ed:16:ea:
         18:e3:97:17:fd:f9:c7:0f:3b:4e:bb:da:a9:1a:cd:75:e8:1d:
         c0:d5:17:f6:8f:80:e1:f7:c7:17:e0:3e:95:2e:63:e5:52:eb:
         52:fe:69:df:20:a2:e9:c9:f7:80:a8:f8:65:06:3a:b9:47:25:
         c6:b5:ae:02:52:3b:fc:c9:7a:10:df:ea:7d:e2:f3:4f:0f:e6:
         04:67:24:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 01:56:00 2024 by rpki-client on console-ams.rpki-client.org