Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/78a6b278-a386-3ab9-ae89-23d472527cd2.roa
File:                     78a6b278-a386-3ab9-ae89-23d472527cd2.roa (raw, json)
Hash identifier:          Ao5TWgen1vj9lQI5AMdwvUFlitYDoz8XV4yA3V7/7So=
Subject key identifier:   17:E6:35:EA:A5:64:AA:25:39:75:38:E5:04:DB:68:9C:AA:FA:01:9B
Certificate issuer:       /CN=917f98c2-cbd2-43de-a8cf-7091ad719621
Certificate serial:       010D0C9F432858458C6DD5BBF683B1D2417210C0
Authority key identifier: 5D:92:48:68:AC:B1:85:67:D2:75:86:CA:93:F0:1D:52:F7:6C:FC:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/78a6b278-a386-3ab9-ae89-23d472527cd2.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     6939
IP address blocks:        2605:3ac0:1000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:d5:bb:f6:83:b1:d2:41:72:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=917f98c2-cbd2-43de-a8cf-7091ad719621
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=484fd400-f0fd-4586-9769-9bc8a13cf6e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:65:93:4d:bd:e9:59:c7:47:d9:f1:b1:21:c6:
                    89:98:76:b1:6a:5b:8f:ed:ab:b9:cc:38:39:12:aa:
                    63:78:73:54:5e:28:16:1c:bf:9a:8d:d1:c5:dd:74:
                    3e:ca:96:f2:e2:9a:03:01:75:9f:85:a0:10:87:9c:
                    da:be:bf:cc:44:97:8d:30:bf:32:47:87:33:83:9b:
                    3a:e3:b7:78:c8:80:14:5b:68:d0:4e:e3:7a:31:22:
                    a8:4c:8c:75:a4:b5:07:bc:34:9a:08:6d:86:dd:35:
                    c1:5e:70:36:0b:da:c5:94:7f:ec:a6:c4:27:6e:77:
                    07:01:a3:bf:a4:cb:8b:5c:74:d7:32:79:c4:84:2b:
                    8e:27:a3:83:cc:df:3c:fe:d6:94:9e:32:92:aa:76:
                    70:8b:23:7a:90:c2:c0:88:14:a9:6f:a9:96:f2:21:
                    4c:2c:5c:df:67:8d:7b:cb:fe:28:cb:d0:c4:f6:3e:
                    14:79:b8:c1:35:b9:14:28:41:60:cb:7e:4f:1a:86:
                    0c:86:3d:a5:16:77:01:b9:3a:c7:f5:e4:36:4a:a4:
                    e2:49:5e:48:3f:1e:dd:fd:1d:b8:99:e6:d9:9a:27:
                    a6:0b:1f:8c:1e:93:90:c3:b2:47:01:01:91:ea:42:
                    6d:76:95:15:01:24:f4:13:4f:2f:b9:42:11:d8:df:
                    a8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E6:35:EA:A5:64:AA:25:39:75:38:E5:04:DB:68:9C:AA:FA:01:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/78a6b278-a386-3ab9-ae89-23d472527cd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.crl

            X509v3 Authority Key Identifier:
                keyid:5D:92:48:68:AC:B1:85:67:D2:75:86:CA:93:F0:1D:52:F7:6C:FC:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:3ac0:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:98:a4:3f:6d:f4:35:c7:bf:d2:df:f1:dc:df:9b:98:e1:51:
         73:d1:30:f1:51:e6:6e:d0:42:ee:f5:64:db:f7:76:e5:39:29:
         33:57:69:36:96:54:e2:5d:16:49:46:42:8c:6c:4e:ce:39:74:
         53:11:2c:cc:41:3f:48:32:12:f3:b8:97:bc:00:57:39:6a:bf:
         72:2e:d6:55:e6:cf:4e:8c:6c:a6:37:1b:85:66:1b:3e:9c:85:
         6d:92:ba:de:c1:88:34:a8:71:50:f6:e6:37:0a:37:e6:46:f9:
         c0:8b:ba:db:65:97:24:e8:e6:25:a0:ca:a5:18:20:bd:84:5c:
         c9:a9:a2:6f:8d:17:85:b3:19:3a:ac:08:4f:e1:a7:0d:d0:f8:
         81:89:3e:d2:da:f0:b4:2c:6d:53:5d:df:e6:f5:4d:ab:f3:c3:
         be:a2:6e:b7:ae:a0:10:19:ae:35:05:04:28:76:d4:7b:f2:5c:
         37:73:0e:93:b5:37:99:55:9a:18:5b:c2:e5:34:22:7d:f3:7a:
         49:a3:0a:82:48:1a:47:f1:6f:a1:72:28:11:bd:3f:2c:e1:2c:
         44:40:33:1d:ab:59:85:24:ad:03:74:10:32:1b:88:17:2c:97:
         65:28:16:74:fa:43:25:ec:69:c8:16:dd:84:6b:2b:4f:98:b7:
         24:02:34:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:48:42 2024 by rpki-client on console-ams.rpki-client.org