Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/4be56ccf-d25c-3c4a-aec2-152c14188073.roa
File:                     4be56ccf-d25c-3c4a-aec2-152c14188073.roa (raw, json)
Hash identifier:          hni8GGxwao8/R5hGbWDsPjxU6UONdp7j9py7/3E/YBc=
Subject key identifier:   DE:4E:1A:7F:81:1D:83:40:94:80:A5:5B:8D:41:E7:AE:D6:CE:9F:27
Certificate issuer:       /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial:       010D0C9F43285845CB3E4A7DD8CB8F5B76F70400
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/4be56ccf-d25c-3c4a-aec2-152c14188073.roa
Signing time:             Tue 07 May 2024 13:00:35 +0000
ROA not before:           Tue 07 May 2024 13:00:35 +0000
ROA not after:            Mon 05 Aug 2024 13:00:35 +0000
asID:                     393885
IP address blocks:        2604:4a00:5000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cb:3e:4a:7d:d8:cb:8f:5b:76:f7:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
        Validity
            Not Before: May  7 13:00:35 2024 GMT
            Not After : Aug  5 13:00:35 2024 GMT
        Subject: CN=0adf9878-4acb-4133-a7d8-5d8b6ac504d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e5:8b:b2:09:48:e4:5a:b9:50:f2:61:4f:57:
                    2b:f5:f2:66:48:9b:e9:bd:07:af:7a:8d:71:a8:c7:
                    ae:fa:30:05:12:db:d3:d5:45:99:3e:4a:8a:ff:f0:
                    cc:35:9f:a9:d0:d5:5a:cb:6f:62:10:ce:49:bc:37:
                    36:ac:9f:b4:2f:eb:2f:3a:51:fa:eb:af:86:94:8f:
                    83:6e:24:d7:67:9d:c1:95:34:96:4b:68:52:eb:e0:
                    69:d3:75:a6:52:75:4a:ba:28:c1:db:4e:af:31:68:
                    58:cb:58:7d:dd:62:e0:17:cb:13:32:be:e6:d7:74:
                    2d:dc:03:bf:77:16:60:f8:36:1c:a0:98:78:1b:e4:
                    a5:0c:b7:72:d1:6f:6c:77:9d:b6:0b:b8:01:b5:c2:
                    44:4f:92:c7:88:c4:53:f8:cb:5c:a0:10:0f:53:66:
                    ba:3f:f5:77:fb:fa:55:27:db:0d:0c:ca:77:88:da:
                    a8:f2:b4:fd:8f:93:48:98:c5:e5:ea:5d:05:fb:8f:
                    a9:4f:05:75:ec:76:a4:9b:67:65:2a:00:15:e2:89:
                    c4:1e:62:ac:23:60:f6:08:e9:c8:90:56:5e:69:5f:
                    f3:f9:d5:b2:ef:a5:77:d7:38:b5:e2:cb:bd:15:28:
                    1c:94:23:b4:30:3a:cf:5e:ed:6f:3e:df:2b:5a:14:
                    0b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4E:1A:7F:81:1D:83:40:94:80:A5:5B:8D:41:E7:AE:D6:CE:9F:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/4be56ccf-d25c-3c4a-aec2-152c14188073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl

            X509v3 Authority Key Identifier:
                keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4a00:5000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:17:80:69:a0:cf:5d:08:a3:ed:57:f7:3b:18:87:c1:41:cf:
         d6:16:e4:05:0e:9f:fa:03:a5:1c:5a:be:bb:95:75:99:59:1c:
         02:02:1a:57:89:74:3e:31:1f:4b:c9:aa:a5:47:1c:60:78:1b:
         93:8f:bf:20:1c:6e:a3:57:6d:73:45:b9:59:34:cd:42:0a:e7:
         30:98:94:b8:6b:86:a9:c5:03:52:85:0d:6b:4c:fa:47:a8:d6:
         5e:21:cb:d2:e9:7e:5a:5b:48:3a:1b:48:20:7d:24:10:e0:cd:
         e1:af:72:08:84:7f:65:c7:41:29:f0:19:0d:17:e7:da:d3:d5:
         04:b1:f5:ef:a3:46:bc:fb:92:ba:9f:fe:6c:04:7f:10:76:55:
         6f:09:91:54:e4:bf:22:38:30:59:06:76:dc:2a:d7:57:a3:4f:
         5f:69:72:d0:49:7f:93:56:c2:73:a1:4b:4a:90:2d:8a:3e:32:
         2f:f7:d1:05:64:aa:c1:dd:a9:32:5c:b4:ab:29:21:d0:7c:bd:
         8c:3c:3d:cf:1d:6f:a5:82:9c:74:08:11:ab:c5:f0:2d:e8:8d:
         0a:4c:7b:34:38:0e:42:13:83:b7:14:62:59:70:c5:c2:6d:5e:
         eb:e9:03:41:b8:0d:7f:25:c6:49:f9:d5:d6:1b:21:0e:ad:02:
         70:42:87:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:03:19 2024 by rpki-client on console-fra.rpki-client.org