Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/4dbde640-83c6-3be6-b46f-2ae2a17ab41c.roa
File:                     4dbde640-83c6-3be6-b46f-2ae2a17ab41c.roa (raw, json)
Hash identifier:          Qh+bf2XWpImLG/GbTHlN3lVhJzkwDLIUIMyVDDRpGBk=
Subject key identifier:   69:43:EB:25:82:85:06:FC:F9:07:E4:F4:60:2C:25:2F:E3:E0:D9:75
Certificate issuer:       /CN=33097e36-cef3-418b-a895-cacb797d1eeb
Certificate serial:       010D0C9F43285845DEC9105D671D58605C94BB00
Authority key identifier: F3:D2:56:2B:76:FF:3B:36:71:0B:45:B0:C7:99:53:16:86:A7:8F:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/4dbde640-83c6-3be6-b46f-2ae2a17ab41c.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     10958
IP address blocks:        2606:7a80::/28 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/33097e36-cef3-418b-a895-cacb797d1eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/33097e36-cef3-418b-a895-cacb797d1eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:10:5d:67:1d:58:60:5c:94:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33097e36-cef3-418b-a895-cacb797d1eeb
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=229c8358-e624-4cf8-b21b-b37deceaac38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a5:45:20:8f:7e:b7:26:d4:cd:e1:c8:16:6c:
                    e5:86:5f:bf:ba:8c:92:98:fe:f3:42:5a:9f:37:9b:
                    79:40:5b:91:0b:6e:3a:7a:e5:49:76:67:4b:62:33:
                    27:34:d5:fe:fd:ce:72:5c:7b:69:48:65:96:aa:6a:
                    49:10:27:2a:d0:8e:18:8b:72:6e:eb:30:db:1b:53:
                    21:01:82:24:00:d8:ef:f9:35:32:03:eb:d3:c7:54:
                    06:8b:3f:f9:f0:82:5d:9d:e5:1a:f7:22:5f:f9:a8:
                    57:8a:a7:87:60:cf:69:1c:8f:d1:37:80:cb:84:8c:
                    39:61:b5:11:b5:25:e1:01:e8:15:de:3b:4b:3c:6a:
                    75:48:3d:f6:ae:ea:72:93:5b:e4:72:d1:a2:75:10:
                    81:3d:7d:35:3f:ef:b4:62:ba:84:ed:d1:2a:d9:cc:
                    c0:7f:66:e8:fb:f0:08:b8:5c:2a:c2:20:2c:87:5c:
                    54:da:c2:c4:84:9a:5e:e7:ff:2d:d6:b9:d9:d9:13:
                    43:38:d5:88:65:9e:69:9d:55:2f:8b:c8:a3:ce:01:
                    f3:8d:ce:ff:70:f3:c7:89:fb:94:20:24:ce:4e:c8:
                    af:fd:33:ac:0a:a8:76:32:c5:d5:21:10:35:86:53:
                    24:a8:c4:b5:55:67:c9:b1:13:cf:77:9f:52:66:89:
                    6e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:43:EB:25:82:85:06:FC:F9:07:E4:F4:60:2C:25:2F:E3:E0:D9:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/4dbde640-83c6-3be6-b46f-2ae2a17ab41c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/33097e36-cef3-418b-a895-cacb797d1eeb.crl

            X509v3 Authority Key Identifier:
                keyid:F3:D2:56:2B:76:FF:3B:36:71:0B:45:B0:C7:99:53:16:86:A7:8F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7a80::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:47:6e:2a:10:51:08:8e:4d:36:37:9a:4f:33:2f:59:1a:1c:
         a1:04:b6:91:60:ff:ee:6c:02:51:4a:0e:38:bf:9d:e9:99:bc:
         3a:7b:79:dd:64:54:92:cf:0e:0f:6e:1c:e0:b0:3d:cf:55:b3:
         c8:97:ee:56:56:a4:73:e4:7c:51:c4:bb:7c:4c:f8:9d:a0:1f:
         dd:53:ba:a5:c1:28:f2:96:88:48:ad:43:f3:c3:e8:7e:21:92:
         44:89:f2:d5:f5:c7:42:f2:55:c6:77:96:0c:f6:69:f2:9a:4b:
         41:73:bb:ca:72:02:74:21:22:e4:2b:18:7a:2b:c3:75:35:c4:
         23:10:69:4d:0d:79:55:94:28:c2:0d:5b:aa:2b:15:ea:68:ac:
         f0:e4:ae:88:ee:cd:ac:01:cc:36:28:d0:58:9e:e4:c9:e8:e8:
         34:b8:aa:27:ef:68:1a:a6:06:6c:09:f9:4b:47:ed:1f:48:1b:
         37:9a:8f:36:2d:5b:7f:66:9a:79:f8:ff:44:4b:79:30:95:af:
         f6:5d:fb:40:aa:2a:98:aa:b1:ac:b8:10:b8:29:b4:00:1d:0d:
         8d:b6:74:f6:4d:15:0d:1f:0b:93:17:66:46:41:f3:bd:7d:93:
         a5:e1:52:8d:6d:a1:9b:67:81:8f:32:83:63:0b:36:08:c7:e5:
         06:c2:35:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 01:58:10 2024 by rpki-client on console-fra.rpki-client.org