Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/67bba3d4-a51f-3aad-a0d8-968b1939e2d1.roa
File:                     67bba3d4-a51f-3aad-a0d8-968b1939e2d1.roa (raw, json)
Hash identifier:          D6HQj8g+lodctdJ6dEaRuIlFf5b3KPzKegzT4OSVXEo=
Subject key identifier:   A1:5D:65:14:EA:FB:77:D9:CA:77:62:03:2F:DA:8B:37:5C:07:41:85
Certificate issuer:       /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3
Certificate serial:       010D0C9F432858463F19949F7B45E2D68161E300
Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/67bba3d4-a51f-3aad-a0d8-968b1939e2d1.roa
Signing time:             Tue 18 Jun 2024 01:00:25 +0000
ROA not before:           Tue 18 Jun 2024 01:00:25 +0000
ROA not after:            Mon 16 Sep 2024 01:00:25 +0000
asID:                     32058
IP address blocks:        2607:4640::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Jun 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:3f:19:94:9f:7b:45:e2:d6:81:61:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3
        Validity
            Not Before: Jun 18 01:00:25 2024 GMT
            Not After : Sep 16 01:00:25 2024 GMT
        Subject: CN=542953ce-ee5e-45a1-a18d-0abd14cd1efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0f:9b:cd:ac:be:76:88:14:59:57:dc:53:8a:
                    4d:a0:c8:e1:f5:fe:27:83:e3:15:0a:84:5e:79:d3:
                    14:90:94:f7:7c:59:4b:67:4c:3f:a6:fb:04:16:2c:
                    35:c6:77:15:a3:f2:8d:40:0a:0e:17:f9:86:f4:4b:
                    2e:da:6c:e7:58:90:12:7c:7b:c3:1e:8b:05:95:78:
                    40:ba:5e:d1:35:91:8e:8f:7b:3c:3c:2a:ce:51:c1:
                    2a:88:1a:73:ff:02:1a:ba:45:37:f7:89:77:78:b4:
                    12:01:7f:ce:ea:c5:79:04:ef:34:fa:f9:fd:68:16:
                    8f:35:68:8c:92:6d:be:36:f4:3b:2a:bb:f1:6b:cd:
                    00:74:fa:29:5f:c8:50:7b:fe:b4:fd:36:b4:84:5f:
                    87:1c:30:33:63:b4:00:14:08:a0:86:e5:71:4a:27:
                    76:ae:e1:6a:2a:99:61:1a:1a:c5:0d:a7:36:c5:a7:
                    39:0f:d5:f2:3c:d7:70:88:6e:a1:35:c9:45:d9:a3:
                    f8:53:e6:5d:5f:67:00:f6:e2:45:5f:f0:0f:4b:60:
                    70:6f:86:c7:e8:31:38:67:20:18:e8:3a:8a:24:53:
                    b4:40:73:80:d6:c5:0e:95:a9:7e:c8:b9:31:7c:f3:
                    dc:5d:cb:74:7e:0f:84:a9:9d:32:2f:b4:62:ea:a3:
                    f9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5D:65:14:EA:FB:77:D9:CA:77:62:03:2F:DA:8B:37:5C:07:41:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/67bba3d4-a51f-3aad-a0d8-968b1939e2d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl

            X509v3 Authority Key Identifier:
                keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:4640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:3e:fb:6e:c7:73:6d:df:79:b5:34:b5:50:76:d6:ab:ef:b2:
         99:93:4d:bd:f2:9c:67:8c:fa:16:43:dc:82:47:4a:53:31:61:
         62:35:ee:32:c0:df:c3:41:c5:85:a5:c5:76:34:06:d9:d6:26:
         48:a6:90:e6:e2:18:9b:59:18:ce:fc:76:8b:19:d7:34:e4:7d:
         82:0f:f1:55:0f:46:93:23:ef:42:71:c9:bd:30:09:ab:67:e1:
         a2:9d:92:7d:58:52:f9:ba:43:75:bc:2c:b1:07:d7:92:81:91:
         3d:69:6b:02:9c:3a:c4:47:62:25:6a:84:74:2a:3b:e5:ec:c1:
         5b:05:09:fe:de:22:c2:53:eb:9a:71:f3:b8:41:2d:52:d0:d1:
         e1:52:dc:da:ff:82:d9:e9:4b:16:bb:aa:d4:34:ab:f8:aa:d0:
         11:86:4e:86:e5:a4:96:af:ac:05:3f:53:9f:1e:4c:d7:1c:e7:
         e9:48:2a:07:b8:1b:20:b9:6f:3e:bd:69:ae:db:c5:93:47:e5:
         fe:08:be:ae:23:ac:d4:b3:51:e6:f6:01:4c:d9:d7:e0:04:06:
         f4:76:86:27:55:92:9d:58:21:3e:74:fb:3d:74:5d:eb:ff:af:
         5c:8f:99:f5:55:63:49:64:0b:60:c4:4f:ea:b1:d0:cf:c1:2e:
         b1:14:6d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:07:41 2024 by rpki-client on console-ams.rpki-client.org