Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd/de1ceca1-31d8-31c0-b1a5-9c46abd0bc0d.roa
File:                     de1ceca1-31d8-31c0-b1a5-9c46abd0bc0d.roa (raw, json)
Hash identifier:          8OJgann6vHqdjJ/+OsivPimb5OeWRlgJQMHagftvKtM=
Subject key identifier:   F5:C6:78:9A:0D:BB:6E:C0:68:94:A5:FE:8F:F7:29:1F:72:5A:C2:39
Certificate issuer:       /CN=d2de1f15-6014-4202-aea6-3c118c783bfd
Certificate serial:       010D0C9F43285845DF1A09C7E99670D7FB8C6120
Authority key identifier: 7E:F0:3C:0F:9E:1A:35:89:24:A8:BC:FC:64:3C:AF:E7:64:2E:D9:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd/de1ceca1-31d8-31c0-b1a5-9c46abd0bc0d.roa
Signing time:             Tue 14 May 2024 15:43:48 +0000
ROA not before:           Tue 14 May 2024 15:43:48 +0000
ROA not after:            Mon 12 Aug 2024 15:43:48 +0000
asID:                     14618
IP address blocks:        2607:b4c0::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd/d2de1f15-6014-4202-aea6-3c118c783bfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd/d2de1f15-6014-4202-aea6-3c118c783bfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:df:1a:09:c7:e9:96:70:d7:fb:8c:61:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2de1f15-6014-4202-aea6-3c118c783bfd
        Validity
            Not Before: May 14 15:43:48 2024 GMT
            Not After : Aug 12 15:43:48 2024 GMT
        Subject: CN=fd3f5cfe-596f-493b-9da2-27595b981de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2d:e3:5e:66:22:4c:f3:f4:26:f5:40:24:9c:
                    d7:67:3f:08:f6:db:34:5f:c9:44:61:1c:76:c9:56:
                    32:32:54:f8:c7:94:34:a9:24:18:33:b5:84:1e:94:
                    20:1e:25:a1:14:31:17:60:97:f8:17:da:ea:c7:84:
                    70:48:e8:ce:5c:ae:06:30:e3:9e:6e:34:46:7b:a7:
                    2e:7a:64:1f:27:4e:dc:a2:d8:f5:f4:e1:7f:c9:96:
                    c8:86:59:d8:65:5a:85:e7:2e:c1:9e:36:6d:e1:6d:
                    14:6a:b8:23:ea:7b:da:fa:4d:95:e4:7a:c1:74:f0:
                    a5:6a:cf:6e:fe:c7:72:c8:c4:a3:66:69:e9:89:fb:
                    48:4f:42:b4:7d:c2:28:79:13:b6:09:05:46:66:e3:
                    47:4c:bf:b4:e2:d1:aa:bb:e7:23:87:7e:9a:47:76:
                    97:ce:d2:84:dc:5b:e8:5a:e2:e7:57:69:82:4b:78:
                    e3:99:44:5d:e7:db:e9:41:77:e9:12:66:15:2b:e9:
                    12:86:95:a8:3b:f3:d1:ad:c1:06:2d:8e:c6:79:6a:
                    aa:09:92:f0:69:17:b7:75:82:6d:3d:83:6e:dd:9a:
                    8d:dd:84:7e:c6:d7:6a:eb:fc:2a:c1:b6:a0:53:98:
                    78:79:d9:3b:72:ea:82:c9:e7:61:b3:01:96:55:d2:
                    86:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C6:78:9A:0D:BB:6E:C0:68:94:A5:FE:8F:F7:29:1F:72:5A:C2:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd/de1ceca1-31d8-31c0-b1a5-9c46abd0bc0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd/d2de1f15-6014-4202-aea6-3c118c783bfd.crl

            X509v3 Authority Key Identifier:
                keyid:7E:F0:3C:0F:9E:1A:35:89:24:A8:BC:FC:64:3C:AF:E7:64:2E:D9:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b4c0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:2e:6e:ab:1c:9f:9d:63:3d:56:74:09:97:e3:67:79:dc:cc:
         50:0e:5f:d5:db:01:24:89:2a:d9:3f:5d:9f:ea:ee:eb:39:f0:
         22:2d:2f:6a:17:e8:0a:da:5e:2f:cc:ba:39:63:1b:94:bc:86:
         cc:34:da:ac:bb:95:af:5f:4e:14:a7:f4:8b:b8:f4:5b:bf:84:
         28:69:34:90:db:bf:ba:2e:d6:7c:3b:d1:73:f2:d4:86:c8:84:
         d4:d0:22:dd:ef:f2:c8:5d:9c:68:1b:dd:e3:b3:83:20:04:7c:
         1c:46:3f:b5:c5:89:6f:54:51:6c:d6:98:7b:94:67:b9:6f:4c:
         db:83:6a:ac:6c:d6:3c:3c:6a:5a:1a:4a:5f:5c:62:e6:16:71:
         0f:e3:9d:98:07:19:28:03:7c:14:88:9f:3d:85:47:39:af:0b:
         8f:2d:53:ac:a3:f8:e1:12:3f:c1:91:da:ac:54:02:ca:8c:48:
         ea:35:70:ff:f0:7d:72:99:5a:29:c3:a9:89:71:e6:1a:f2:3c:
         da:b8:2d:c9:1d:16:22:c3:a0:e7:f9:d8:d2:c8:42:f4:23:8a:
         5a:a6:37:0b:34:b7:b0:c5:01:53:0c:52:ea:b4:55:ce:89:b4:
         04:19:1a:64:18:8d:ae:da:ec:86:82:a0:3b:3d:b4:9b:05:9d:
         b8:74:d1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:43:02 2024 by rpki-client on console-fra.rpki-client.org