Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0d8ac99f-834b-392d-8de0-99e74008bf17.roa
File:                     0d8ac99f-834b-392d-8de0-99e74008bf17.roa (raw, json)
Hash identifier:          iI70b9qW+YrP4+0L1hgrx7iToYcSoDi0YD+sZwcfbQg=
Subject key identifier:   FF:AC:95:F4:05:58:15:5D:B6:7E:D2:6C:C2:2F:54:A9:1A:8A:5E:7C
Certificate issuer:       /CN=0575435f-d6e9-4d29-9519-fff0e513c74e
Certificate serial:       010D0C9F43285845E7291A6350F3260F33111B00
Authority key identifier: 41:C9:F1:A1:D4:C8:09:6A:B2:CC:4B:35:7E:06:B0:CE:91:7E:EE:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0d8ac99f-834b-392d-8de0-99e74008bf17.roa
Signing time:             Fri 17 May 2024 13:00:34 +0000
ROA not before:           Fri 17 May 2024 13:00:34 +0000
ROA not after:            Thu 15 Aug 2024 13:00:34 +0000
asID:                     396319
IP address blocks:        2601:1300::/28 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0575435f-d6e9-4d29-9519-fff0e513c74e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0575435f-d6e9-4d29-9519-fff0e513c74e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Jun 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e7:29:1a:63:50:f3:26:0f:33:11:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0575435f-d6e9-4d29-9519-fff0e513c74e
        Validity
            Not Before: May 17 13:00:34 2024 GMT
            Not After : Aug 15 13:00:34 2024 GMT
        Subject: CN=c508102e-9323-4855-ad73-e6357892b46c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e0:29:ae:cd:87:9d:ee:a2:fc:a0:c7:fd:be:
                    9b:06:1c:e6:92:35:19:03:34:fc:d9:55:4d:1f:55:
                    58:17:16:37:ae:a4:aa:83:e1:52:df:47:cc:43:49:
                    d4:1e:80:ad:b0:9c:b2:f2:fd:bb:3e:ee:e4:66:a5:
                    d9:aa:f6:95:29:c6:65:0e:ad:7c:82:eb:7c:36:25:
                    70:e5:ab:95:98:71:4e:3d:d2:8c:e1:a0:4f:2f:b4:
                    f9:c4:0d:4b:00:da:00:69:8b:cd:f0:cf:12:e2:b2:
                    00:f4:f4:26:51:47:47:4d:dc:0d:c9:82:ea:7d:fd:
                    e6:65:49:d2:a4:41:85:d4:32:72:19:0b:e8:7c:f8:
                    86:18:a5:15:41:4b:4c:ed:d8:b2:3d:50:84:53:10:
                    74:c4:08:41:42:aa:28:a7:4d:a0:fc:8a:c1:db:0e:
                    67:0a:9f:31:fa:b2:fb:b0:1d:21:81:44:59:92:a7:
                    07:69:19:fa:da:08:22:3c:1f:f5:d6:c2:05:3f:06:
                    28:cc:5d:43:ed:66:18:ba:0c:dd:b3:43:09:f0:ed:
                    ad:31:e7:9c:c0:f5:f3:6b:ed:72:eb:c9:0e:4a:99:
                    f2:6d:7e:e7:e8:51:85:d8:40:73:4a:e1:cd:b2:ec:
                    a4:2a:aa:4a:9c:ff:d6:d7:aa:0b:54:cd:de:75:bc:
                    bd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AC:95:F4:05:58:15:5D:B6:7E:D2:6C:C2:2F:54:A9:1A:8A:5E:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0d8ac99f-834b-392d-8de0-99e74008bf17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0575435f-d6e9-4d29-9519-fff0e513c74e.crl

            X509v3 Authority Key Identifier:
                keyid:41:C9:F1:A1:D4:C8:09:6A:B2:CC:4B:35:7E:06:B0:CE:91:7E:EE:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1300::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:e0:d6:1b:1f:5b:16:fd:e6:22:f1:f1:aa:fe:0e:b0:ed:8b:
         15:5d:f3:28:62:33:8b:9c:17:3a:fd:39:5b:07:d3:95:9f:b1:
         8b:32:36:07:fc:8f:fa:a9:26:79:8c:58:71:d0:32:d4:4c:26:
         9a:85:24:b5:cd:59:6b:98:00:c6:c3:6e:a9:0b:6d:12:47:18:
         8e:7e:b9:f8:f6:38:c6:cb:45:a6:0b:b5:38:c4:de:f0:a3:76:
         01:64:4f:ec:d2:17:ee:5e:4a:fd:24:6a:c6:17:8e:41:2c:7b:
         84:18:e2:e2:5d:c7:a9:3a:55:36:e9:f1:bf:1e:fb:b0:ba:c3:
         7f:57:af:12:0c:17:ca:b9:27:49:08:bc:77:2c:c2:10:5b:7d:
         6e:07:ad:d1:6c:0d:e4:73:43:2b:bb:88:e6:3b:04:78:83:05:
         ad:dd:c8:92:8b:8b:73:2a:6b:00:c5:69:a9:53:df:47:f8:0f:
         47:b9:bb:5c:b6:d9:a7:ff:d1:27:ed:cb:0c:55:ea:c0:ba:7e:
         dc:56:f1:c7:3f:a4:16:5f:32:2e:a5:7e:9b:89:e8:cf:7e:79:
         f4:b7:01:2a:fc:a5:a4:bf:52:f5:a8:0a:6c:fa:00:17:1b:4f:
         17:e6:de:50:3a:ed:0a:ee:cf:85:45:1c:7c:05:4d:94:e0:e4:
         8a:43:03:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 01:54:10 2024 by rpki-client on console-fra.rpki-client.org