Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/8870644e-30b4-3e41-9fe2-f378575547f3.roa
File:                     8870644e-30b4-3e41-9fe2-f378575547f3.roa (raw, json)
Hash identifier:          BHK3nFzsAr1JM+G/l3yKejyJzLUf74/MTL4MnxVtMzg=
Subject key identifier:   CD:FF:19:CC:25:E4:89:0E:1A:57:E6:D5:D4:C8:E7:64:25:CA:E4:A2
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F43285845B4E8D63121F2C89B917F9940
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/8870644e-30b4-3e41-9fe2-f378575547f3.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     11055
IP address blocks:        2605:4a80:ef80::/41 maxlen: 41

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:d6:31:21:f2:c8:9b:91:7f:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=bd98c3e6-e59b-4afc-b1cb-b3575fcea78a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:61:0f:c5:3c:74:f6:3d:85:66:94:66:50:28:
                    9d:c0:02:c9:36:21:ff:11:d1:40:2b:cc:80:73:6a:
                    3f:0f:d3:00:df:ac:07:4d:f5:58:59:0c:5b:d7:bc:
                    c9:33:58:a8:07:99:f8:ef:e1:87:89:a2:fd:87:67:
                    6b:c2:1a:59:23:c1:4c:c9:0b:80:c4:38:20:dd:ee:
                    f0:8d:81:64:f2:03:d5:68:d3:8a:95:74:91:f5:3e:
                    52:c4:8f:24:ea:1d:71:ff:4d:27:0f:e1:1c:60:d0:
                    33:19:9d:f6:3d:1f:4f:93:80:29:cd:d2:44:8e:80:
                    92:87:9e:a3:59:38:c0:2f:75:c5:99:3c:7d:9b:75:
                    9e:c0:f7:7f:3b:d2:3f:a5:f0:ef:52:48:25:b7:ba:
                    a6:5d:ee:99:9c:67:d1:5a:7c:e0:19:be:23:76:ce:
                    83:97:35:d3:9f:03:33:0d:91:99:f3:b2:8b:54:5b:
                    28:94:24:16:09:e7:23:0b:1e:fd:a8:54:07:55:00:
                    f3:38:52:ef:66:e0:51:fc:d0:b4:21:bc:3b:37:32:
                    f9:99:3a:02:4e:c6:38:55:ce:0c:1c:6d:45:e3:ba:
                    2d:98:f4:6c:3d:3a:c0:21:cf:d0:5e:1d:18:de:cd:
                    25:16:e6:75:dc:40:8a:db:50:20:e4:d9:8e:a3:94:
                    91:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:FF:19:CC:25:E4:89:0E:1A:57:E6:D5:D4:C8:E7:64:25:CA:E4:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/8870644e-30b4-3e41-9fe2-f378575547f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4a80:ef80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:8d:73:77:aa:24:29:02:a5:eb:0b:fc:da:18:28:4a:56:7f:
         9d:58:22:37:10:69:3a:8f:1d:98:b2:a8:56:f7:e1:4f:30:42:
         e1:42:3e:f4:02:4c:9f:94:07:30:d0:b0:06:46:23:9e:56:81:
         2c:c2:08:07:bd:14:fe:f6:83:65:ab:d3:1f:29:09:df:95:6a:
         13:9c:4c:12:ce:fa:2d:91:c2:50:72:f8:42:f2:ee:06:45:79:
         f7:aa:c2:c7:6b:cb:25:ca:7f:85:99:fb:31:1a:2f:d8:6b:e2:
         e0:4e:79:0a:de:bc:28:77:0a:26:45:cd:7e:64:0f:57:74:eb:
         9d:79:95:94:fb:09:8f:08:f0:c5:d4:22:4b:b9:16:cb:1d:96:
         c0:86:97:92:fa:2a:6d:04:e1:2a:7a:b7:67:05:bb:83:65:e8:
         be:39:10:5a:83:a1:9e:35:52:e2:c4:d3:0e:a5:47:0a:56:6d:
         0c:7d:24:bf:55:de:6a:34:37:c8:38:39:66:92:cf:38:96:4b:
         72:e8:d2:5e:7d:74:4a:38:c3:3a:29:89:10:dd:21:44:37:60:
         c8:3e:db:b2:97:48:b0:e1:36:39:4e:70:fc:41:07:a1:71:f0:
         a4:13:98:35:41:c3:dd:a5:39:10:8b:eb:b4:47:cf:19:b3:91:
         0c:9a:7a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 21:24:33 2024 by rpki-client on console-fra.rpki-client.org