Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/952792ae-3d78-36fe-8518-3e73e2e83906.roa
File:                     952792ae-3d78-36fe-8518-3e73e2e83906.roa (raw, json)
Hash identifier:          Lb5PVKwc9famvvTpDskri95PrDTX1Ra9ibs7wcaRN+g=
Subject key identifier:   1B:30:8A:EF:37:0D:96:09:64:92:5E:42:E2:A1:49:CC:47:3B:0E:B0
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F43285845D503CCFE2A8246F51B9BDA80
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/952792ae-3d78-36fe-8518-3e73e2e83906.roa
Signing time:             Sat 11 May 2024 01:00:27 +0000
ROA not before:           Sat 11 May 2024 01:00:27 +0000
ROA not after:            Fri 09 Aug 2024 01:00:27 +0000
asID:                     25645
IP address blocks:        2605:8300:1a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d5:03:cc:fe:2a:82:46:f5:1b:9b:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: May 11 01:00:27 2024 GMT
            Not After : Aug  9 01:00:27 2024 GMT
        Subject: CN=8eaebfeb-5787-47c0-a6fa-0a8865ba4ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9d:15:86:e6:ce:b7:98:3e:3d:24:69:f1:51:
                    36:9d:0b:b5:08:b5:fa:f6:1f:64:7e:54:f7:45:3a:
                    ed:41:cb:1a:26:f6:22:75:13:3d:52:06:8e:3b:1a:
                    c8:64:54:34:7e:92:32:14:af:e6:69:49:2e:94:a6:
                    3a:bd:9d:91:b2:bb:b1:ab:47:ea:b6:69:9e:7c:19:
                    25:e0:7d:18:c3:56:c6:2d:13:f8:2f:50:0d:b0:e6:
                    6b:d0:1b:73:4d:17:b6:c4:1e:6a:c6:bc:91:7f:96:
                    ea:89:bd:b5:f9:b2:4c:c0:64:20:b0:61:5d:e6:c6:
                    fe:dd:1e:56:64:bc:97:0f:af:ea:3d:98:5b:2c:a5:
                    32:db:98:13:9b:be:9a:0e:f4:66:30:0d:11:74:3b:
                    b6:88:a9:54:ce:31:3b:a0:de:86:39:c7:58:19:be:
                    86:c3:c1:51:4a:a3:ba:af:12:0a:4a:eb:a5:76:64:
                    3f:1f:9a:00:00:6d:18:99:a5:68:e0:2c:e2:ef:ef:
                    c3:06:62:5f:8e:2c:fa:25:f7:d2:0d:62:fb:7a:f3:
                    e2:a9:95:88:c6:f7:e5:db:0f:7a:a4:eb:17:93:62:
                    59:5d:34:70:7e:be:e1:b7:df:59:5c:ea:c1:6f:85:
                    11:5e:13:1f:5f:37:ab:8c:f3:9d:db:f7:e5:95:0e:
                    aa:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:30:8A:EF:37:0D:96:09:64:92:5E:42:E2:A1:49:CC:47:3B:0E:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/952792ae-3d78-36fe-8518-3e73e2e83906.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8300:1a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:40:ed:40:a3:6c:00:01:53:a0:ae:db:f1:ca:6f:a0:77:ea:
         e0:4f:3b:2b:e0:b7:76:f3:a9:4d:fe:e9:ab:c5:52:02:60:09:
         a4:ab:82:fd:2b:77:27:b5:85:d8:e7:b8:4a:f6:fd:29:c0:4b:
         78:08:00:44:f8:c0:4a:53:d9:33:4b:40:f1:f7:c9:cb:d3:c3:
         2a:c9:a1:bc:c5:27:7d:c5:52:85:19:bb:f7:78:83:b5:1e:54:
         c8:27:35:09:f0:32:cd:b1:3f:36:58:fe:4f:f3:1c:1f:69:bb:
         41:cb:70:1e:a5:89:ae:26:d9:ae:f1:ec:3c:56:83:14:44:2b:
         95:38:96:02:1d:1c:32:a3:6b:3c:17:80:a3:62:34:3c:52:c4:
         b3:fc:a1:06:b2:c3:42:0f:a8:1e:dd:30:b6:b2:33:e8:a8:f2:
         70:0f:3a:77:d7:98:cf:35:c1:45:0c:00:10:85:67:3a:f9:8a:
         94:aa:51:9a:a4:63:14:db:14:e0:8a:9b:b3:f8:c0:85:40:a2:
         e3:98:e3:4d:ba:88:c7:55:21:71:be:37:04:aa:f2:30:16:35:
         fb:dd:7a:83:9e:77:37:44:31:ce:40:3b:0c:d0:8c:5c:59:4c:
         ac:33:ad:1e:fb:23:3c:9b:b7:24:d1:9e:a7:40:e4:41:24:60:
         aa:15:3e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:41:13 2024 by rpki-client on console-ams.rpki-client.org