Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/32c994a1-ef40-386d-a407-28e1c00909b9.roa
File:                     32c994a1-ef40-386d-a407-28e1c00909b9.roa (raw, json)
Hash identifier:          mAip8l8N+OT9lfQzTgsez42PwPeX1h83hfIJVV5lKCs=
Subject key identifier:   C9:33:20:03:C8:22:13:53:FF:70:22:EB:A3:BE:1E:34:AA:1C:6F:E7
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F43285845ADEE16378B308815EF689000
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/32c994a1-ef40-386d-a407-28e1c00909b9.roa
Signing time:             Sat 27 Apr 2024 01:00:26 +0000
ROA not before:           Sat 27 Apr 2024 01:00:26 +0000
ROA not after:            Fri 26 Jul 2024 01:00:26 +0000
asID:                     25645
IP address blocks:        2605:8300:2::/48 maxlen: 48
                          2605:8300:17::/48 maxlen: 48
                          2605:8300:8::/48 maxlen: 48
                          2605:8300:14::/48 maxlen: 48
                          2605:8300:e::/48 maxlen: 48
                          2605:8300:13::/48 maxlen: 48
                          2605:8300:f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ad:ee:16:37:8b:30:88:15:ef:68:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Apr 27 01:00:26 2024 GMT
            Not After : Jul 26 01:00:26 2024 GMT
        Subject: CN=046cbb97-03b5-42e0-8e3b-9f98400eb7a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:88:78:0c:c7:df:f2:d9:ac:f3:12:4b:87:36:
                    5e:b3:c9:23:11:6f:0e:9d:65:8c:f3:62:0e:41:07:
                    b8:ac:69:91:b9:af:b0:f1:83:5b:bf:0f:00:f7:16:
                    2b:49:d3:eb:93:f4:b0:f6:ac:1a:52:c2:4f:68:bb:
                    12:ea:3a:52:09:12:7c:e6:c4:e5:3e:c3:9d:55:8d:
                    74:de:c4:ac:2f:97:cf:0d:c3:99:62:3c:81:a3:d6:
                    94:db:e0:1c:af:c0:cb:5b:09:bc:91:5e:8a:ad:19:
                    07:71:3e:0c:34:6b:15:20:f2:f5:4d:e9:a7:10:28:
                    f0:5d:3c:af:03:1c:4e:be:b4:2f:81:2f:8b:71:ac:
                    9c:90:dc:89:9a:71:f3:70:61:67:96:14:cc:4a:66:
                    75:e9:a9:0b:48:54:eb:38:7e:1f:a7:0d:f4:c8:f6:
                    2a:9d:62:41:ce:c2:6b:ab:3f:37:ef:ea:ea:c4:7c:
                    49:0f:7a:6a:91:00:7e:24:c5:ec:38:dc:ee:ce:89:
                    03:55:51:37:7e:d3:6d:1d:a8:51:bd:a3:67:e7:2d:
                    fc:53:ca:32:d6:ca:19:95:85:9c:5a:11:35:eb:64:
                    cb:d3:77:41:ee:5b:b3:b3:96:ef:7d:1e:fa:08:84:
                    e5:83:bd:e7:a7:ba:85:c7:5d:bf:bd:aa:7f:3a:33:
                    ba:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:33:20:03:C8:22:13:53:FF:70:22:EB:A3:BE:1E:34:AA:1C:6F:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/32c994a1-ef40-386d-a407-28e1c00909b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8300:2::/48
                  2605:8300:8::/48
                  2605:8300:e::/47
                  2605:8300:13::-2605:8300:14:ffff:ffff:ffff:ffff:ffff
                  2605:8300:17::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:23:90:e0:47:7e:4d:94:3b:a3:90:4c:b9:26:25:6d:4c:91:
         97:ef:75:f7:21:d9:8d:c3:06:7c:75:c2:d0:ce:b2:de:12:5f:
         75:82:77:92:c8:c1:d4:b5:7f:43:1e:94:c2:55:2e:bd:72:8b:
         15:b4:09:59:cb:2a:28:20:98:07:89:f7:c7:5f:68:30:24:1e:
         ff:95:9d:be:25:a2:46:f6:cb:a9:5b:3f:1d:0c:87:70:80:6e:
         b3:4f:a2:df:bb:28:64:ce:e2:4f:10:6a:20:62:2c:44:63:05:
         84:98:3d:d4:83:12:da:23:04:bf:5e:09:fd:9c:dc:b4:02:5b:
         1c:f0:1d:63:b7:60:9f:58:2d:2c:19:c6:63:a5:a1:43:f7:0b:
         1d:54:c1:88:c9:27:b0:97:09:8a:13:c1:6c:2b:62:9c:53:5e:
         1f:dc:79:86:e8:38:be:8e:95:f6:78:3a:e5:76:99:f6:eb:6c:
         95:83:d5:7d:12:90:b9:a1:c0:dd:62:ac:5f:19:04:dd:52:42:
         a9:15:20:eb:6b:bf:0c:2b:f0:3e:38:d1:51:d0:d2:b0:55:5e:
         d9:58:22:ae:20:e0:e2:ca:25:d0:f4:d8:32:1a:b8:fe:bb:65:
         e2:b2:ad:69:e5:a4:e9:5a:81:0e:db:44:bc:d6:81:01:6b:db:
         c2:c9:17:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:31:31 2024 by rpki-client on console-fra.rpki-client.org