Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/5cadd82e-9241-3240-8179-e001c6dec1b1.roa
File:                     5cadd82e-9241-3240-8179-e001c6dec1b1.roa (raw, json)
Hash identifier:          2QFKGyLrIbjYEPZ8pKpxOfsD+cnVRWSLj785hBb/2yA=
Subject key identifier:   37:BA:D6:3E:D3:3E:DC:5F:10:9E:8E:58:72:D4:7D:FE:BE:AB:F7:84
Certificate issuer:       /CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b
Certificate serial:       010D0C9F43285845936895B0B43B22DED0CBB500
Authority key identifier: 56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/5cadd82e-9241-3240-8179-e001c6dec1b1.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     14618
IP address blocks:        2606:7740::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:95:b0:b4:3b:22:de:d0:cb:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=12af5cec-e9bc-4baa-b693-69545e8af8db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:56:b1:fd:d1:b8:7b:7e:b5:50:50:49:b6:f5:
                    a8:e9:5a:f2:69:c4:2a:a2:f5:a1:a7:a8:f7:cb:8d:
                    be:6b:70:91:f0:a3:29:cd:b2:19:88:91:97:0a:59:
                    bd:5f:8c:da:40:cf:90:3c:f5:62:38:b2:a9:f0:67:
                    8b:1a:d6:da:a2:c4:77:f6:e3:15:20:17:7f:5b:b3:
                    86:c6:69:33:8f:24:a4:a7:56:01:d2:a3:13:d8:bc:
                    43:4e:16:41:ce:27:0a:7e:73:03:c4:bb:9e:30:24:
                    b1:90:c3:41:91:f4:ef:64:67:08:e0:18:ab:f5:e5:
                    53:fc:40:5d:62:1e:1d:b5:66:a0:2d:16:31:16:70:
                    a3:fd:0d:ac:d5:a6:07:e1:1e:45:ea:40:5f:9f:65:
                    14:36:f8:53:bf:9a:08:d8:f2:1b:7c:d3:e6:18:c2:
                    54:48:1d:9d:ac:f2:d0:ec:bb:bb:11:ee:5c:50:e3:
                    3b:e6:a7:02:68:c3:80:ed:03:12:fe:92:25:07:a1:
                    7a:55:75:f1:b0:96:51:0b:4c:6c:7f:9a:b5:8d:fc:
                    d3:28:1a:d7:f8:a1:be:cb:e6:80:97:e8:a9:6d:73:
                    bb:90:37:df:c3:df:b4:4c:e2:e3:09:18:3a:d4:7b:
                    92:0c:50:d7:68:ed:fa:43:b4:d2:53:70:16:cd:87:
                    ff:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BA:D6:3E:D3:3E:DC:5F:10:9E:8E:58:72:D4:7D:FE:BE:AB:F7:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/5cadd82e-9241-3240-8179-e001c6dec1b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl

            X509v3 Authority Key Identifier:
                keyid:56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7740::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:99:31:c4:d6:94:24:e6:77:ab:cf:ae:29:3f:93:97:c7:84:
         8d:98:f1:1c:da:6f:b9:2f:0d:74:9b:a5:8a:41:de:5f:37:81:
         ca:87:33:56:97:d6:c6:fc:78:a8:f7:47:fc:68:9e:e4:59:3e:
         59:4f:62:e9:be:0f:aa:7c:28:93:df:7e:20:55:ed:f5:75:b4:
         c0:0f:40:91:4f:a1:79:5d:a1:c9:04:b2:e0:be:ec:15:44:04:
         13:1b:0b:d6:50:af:3d:a7:a9:cc:f6:4f:32:71:a2:a4:06:1e:
         0e:22:48:af:19:07:a5:c7:62:6f:7f:1d:0c:b4:62:f9:00:44:
         06:fc:cf:e3:82:f9:99:08:87:ed:e5:4b:62:42:86:d1:2c:d6:
         70:8b:95:93:5c:af:6c:85:b5:b5:38:fc:7e:0d:9f:fb:d6:24:
         3c:97:2d:ab:da:12:91:77:52:94:04:7d:0b:c7:e2:52:ad:86:
         59:00:c0:76:2d:c2:79:00:d2:82:14:7c:27:d5:85:13:62:d2:
         f7:27:19:3b:c4:0c:b0:49:58:77:08:01:2a:e9:c2:59:5f:ae:
         2f:5b:c4:4e:13:90:04:d9:f7:a7:7d:c4:3c:2b:9b:08:04:f2:
         45:f7:7a:24:e5:ac:93:50:a8:bc:2c:55:ad:01:ce:44:1e:94:
         99:95:60:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:09:21 2024 by rpki-client on console-fra.rpki-client.org