Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0f9ebc90-bef1-3ebc-ae64-0405a50ac7fb.roa
File:                     0f9ebc90-bef1-3ebc-ae64-0405a50ac7fb.roa (raw, json)
Hash identifier:          rfsIS7E+Nmt6Gx512TBvFjvbol5AD0fv6I57D/zEcwA=
Subject key identifier:   47:8A:F6:79:62:84:23:3F:30:3D:E6:21:3E:A4:6E:33:A9:64:D8:4B
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285845777DC181778D5C74821AEB00
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0f9ebc90-bef1-3ebc-ae64-0405a50ac7fb.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     16904
IP address blocks:        2600:a00::/31 maxlen: 31

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:c1:81:77:8d:5c:74:82:1a:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=38bd7fc1-8f51-4f23-8882-27725157ce22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a9:f5:1f:8b:d0:25:eb:34:0d:2b:76:83:fa:
                    df:b3:3c:72:25:f6:79:c7:50:67:af:ad:01:fc:db:
                    90:46:dd:33:fb:9c:bf:fd:ae:99:18:58:9b:28:b8:
                    67:6c:3f:a8:77:b7:e4:94:43:e8:1c:3c:3d:17:b1:
                    de:40:fb:33:a1:fb:ec:5d:d7:19:bb:f5:64:4f:58:
                    ef:29:12:49:02:17:66:bc:27:f1:c3:eb:bb:d1:93:
                    1e:07:ec:16:bb:45:15:0c:35:ac:6d:64:ae:be:7b:
                    19:b1:64:f6:f7:d3:65:69:c7:35:5d:28:f7:76:aa:
                    10:38:90:c5:0f:2a:4b:97:9e:ac:b5:a5:db:c0:f9:
                    cc:63:a1:6b:fa:74:8f:cc:3e:e7:a6:5e:c4:0b:7d:
                    84:c2:f8:2d:bd:e3:29:4a:09:68:b1:62:c6:2b:0e:
                    17:11:f1:b6:1e:f3:f6:bf:89:a9:e3:f9:9a:63:de:
                    5d:b9:d1:09:d2:bb:56:5d:1b:15:9b:d1:65:14:15:
                    82:0f:aa:ac:33:36:55:f5:67:08:b5:32:d1:97:86:
                    48:85:90:30:bf:c5:cd:0d:0b:0c:05:8c:33:45:cb:
                    92:93:a1:ca:ca:e4:11:24:16:49:63:72:46:56:18:
                    ff:08:97:e6:6c:d1:3f:e3:18:a9:de:72:58:1c:cc:
                    aa:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8A:F6:79:62:84:23:3F:30:3D:E6:21:3E:A4:6E:33:A9:64:D8:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0f9ebc90-bef1-3ebc-ae64-0405a50ac7fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:a00::/31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:89:4d:48:d7:26:fc:a1:37:0b:67:6f:83:40:80:a2:f3:ca:
         17:92:53:e8:b3:b0:1f:28:72:b6:a2:6a:90:09:70:0e:b3:64:
         25:20:6a:d3:7a:d6:b3:c2:17:22:27:a0:1a:eb:7a:88:de:d6:
         6c:d1:71:14:19:06:5e:ad:9c:8d:63:2e:55:4c:21:5c:79:5f:
         ee:80:be:df:00:23:7a:14:f8:36:6a:19:82:ad:dd:1c:2c:24:
         05:77:19:a3:4e:9c:02:98:7a:6b:53:81:8f:80:da:4b:bf:62:
         84:2f:de:ca:36:27:cd:8f:03:ab:20:d5:c6:28:bf:15:c0:16:
         e5:9d:34:c8:91:c4:28:04:97:97:09:79:da:a2:bf:99:4c:ec:
         0c:cc:24:6e:ab:1a:a8:22:e7:d7:f2:7a:d2:32:0b:72:3f:45:
         59:2b:34:12:ce:6c:17:df:d7:2c:0f:0b:0f:6f:01:eb:32:3a:
         ae:fa:f8:f0:f2:47:a6:93:c8:7b:66:7f:51:f6:11:b4:b2:9a:
         51:16:e6:8d:0c:76:fe:85:49:bf:b9:e7:9c:5d:da:92:fc:e2:
         f7:f8:ca:14:00:7a:93:15:30:2c:bb:93:9a:4e:d9:41:85:6b:
         de:fc:38:63:b4:a6:7c:b9:50:71:38:f9:a9:2e:2b:14:74:1a:
         6e:19:3a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 11:08:37 2024 by rpki-client on console-ams.rpki-client.org