Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/5447fca3-a5a8-3b61-90b0-e825d8612614.roa
File:                     5447fca3-a5a8-3b61-90b0-e825d8612614.roa (raw, json)
Hash identifier:          rj6OyUDYGVuPSC5LhozNTQ0EdkUcRapV/yDgNk66o48=
Subject key identifier:   F0:C3:32:98:8C:D8:72:DA:56:55:9A:4C:D2:9A:5F:82:86:44:B1:6B
Certificate issuer:       /CN=ab48051f-b089-4872-acc6-a73a442e9736
Certificate serial:       010D0C9F43285845A2255021E464356C3A466C40
Authority key identifier: 2B:54:20:F2:AF:8F:AF:36:32:D0:F6:01:84:AB:37:C8:43:29:28:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/5447fca3-a5a8-3b61-90b0-e825d8612614.roa
Signing time:             Mon 22 Apr 2024 19:42:12 +0000
ROA not before:           Mon 22 Apr 2024 19:42:12 +0000
ROA not after:            Sun 21 Jul 2024 19:42:12 +0000
asID:                     401008
IP address blocks:        2607:ad40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/ab48051f-b089-4872-acc6-a73a442e9736.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/ab48051f-b089-4872-acc6-a73a442e9736.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a2:25:50:21:e4:64:35:6c:3a:46:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab48051f-b089-4872-acc6-a73a442e9736
        Validity
            Not Before: Apr 22 19:42:12 2024 GMT
            Not After : Jul 21 19:42:12 2024 GMT
        Subject: CN=8bfebcff-4cf8-4707-b21b-dcddcc2ee5b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2f:4c:77:ad:f8:7c:25:9d:43:3d:4f:97:3b:
                    81:30:b9:17:8e:30:e1:5c:7a:13:94:26:e7:0f:db:
                    94:58:52:72:d4:1d:dc:c8:48:a6:9b:7c:2d:c2:93:
                    c0:37:a4:4f:60:c3:a6:ba:41:ad:fd:4a:2e:69:e5:
                    44:40:7d:5e:ff:16:8f:75:49:bf:df:67:90:37:9b:
                    78:ec:60:4a:df:84:da:22:9b:3a:14:02:fc:85:e0:
                    b2:f7:1a:bb:10:08:71:4b:e0:a5:b3:87:07:6f:c3:
                    f6:cc:c5:66:eb:82:57:6a:e8:a7:00:e1:c8:d7:53:
                    43:76:d1:21:58:43:aa:f4:f0:98:74:98:fa:2f:38:
                    d9:7a:6f:a9:54:26:61:fb:79:ab:d7:8c:d4:cc:cb:
                    0c:74:84:79:f0:3f:46:99:41:c3:cc:1d:ab:47:d0:
                    9a:96:9c:d8:2e:26:15:53:82:3a:a4:72:36:c5:05:
                    14:bf:9c:f2:1b:3b:52:25:f0:8d:27:56:4b:61:47:
                    2b:d1:eb:10:ce:61:1e:f2:24:9e:04:3d:42:f6:5c:
                    67:63:59:53:ec:73:58:f1:21:c1:ff:d3:c8:fb:28:
                    ee:ee:7d:71:25:1c:97:ab:59:41:33:c7:bb:60:ce:
                    54:32:54:17:d5:d0:61:ff:23:5c:10:bf:7c:d3:49:
                    ec:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C3:32:98:8C:D8:72:DA:56:55:9A:4C:D2:9A:5F:82:86:44:B1:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/5447fca3-a5a8-3b61-90b0-e825d8612614.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/ab48051f-b089-4872-acc6-a73a442e9736.crl

            X509v3 Authority Key Identifier:
                keyid:2B:54:20:F2:AF:8F:AF:36:32:D0:F6:01:84:AB:37:C8:43:29:28:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ad40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:98:43:bc:a7:74:96:eb:ff:ec:b6:0f:53:55:34:a2:fb:85:
         46:da:3f:b9:65:aa:9d:db:6f:a4:36:a0:78:c8:ca:8d:1e:03:
         73:d2:ba:b2:61:d2:b4:45:6a:4b:2f:01:aa:27:c5:eb:be:04:
         24:21:78:2a:7e:31:90:80:f6:68:6a:e8:03:60:8f:56:29:c5:
         b1:b4:0b:b0:cf:2b:90:fa:c6:a0:4f:cc:bb:5e:92:50:f0:c8:
         fc:04:23:90:db:1c:65:a0:a0:a9:d2:d4:f9:0a:a8:6b:4c:ba:
         77:ae:3e:8b:b2:80:c2:c1:29:21:9f:ce:22:bf:8b:24:e8:6e:
         c3:14:67:c1:e7:66:3e:d1:f2:f3:fe:c4:47:a9:7f:6e:02:25:
         f5:ef:85:0e:81:28:51:ca:3d:d8:7d:5f:2e:b9:52:f8:40:71:
         1f:97:39:11:bb:61:34:f9:cb:7f:a2:d0:ca:39:6f:e9:e5:18:
         04:b3:a7:5a:f1:ea:b2:b2:60:f3:1d:1c:7d:c6:84:8d:5a:10:
         64:77:47:ad:d4:d0:c2:49:a7:02:67:c3:43:3f:27:6e:60:5b:
         7b:7d:b5:35:36:52:50:cf:d5:71:a2:ef:cb:7d:45:fe:43:11:
         41:38:5e:00:91:0a:71:d8:d9:d7:e7:03:ad:4a:33:06:32:71:
         8b:a8:95:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 19:54:31 2024 by rpki-client on console-ams.rpki-client.org