Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/4b4001fc-7190-3b7b-ae3a-61581acffc5f.roa
File:                     4b4001fc-7190-3b7b-ae3a-61581acffc5f.roa (raw, json)
Hash identifier:          OfRe8qOiozuXFW+VSltyD9/C+KpR92rQqxFSihK0dOE=
Subject key identifier:   B1:56:6A:6A:63:D5:D8:A7:95:D9:85:57:26:A2:0E:41:60:C8:6D:EA
Certificate issuer:       /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Certificate serial:       010D0C9F43285845CF6E3575C18FDBE4AA73F800
Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/4b4001fc-7190-3b7b-ae3a-61581acffc5f.roa
Signing time:             Thu 09 May 2024 01:00:26 +0000
ROA not before:           Thu 09 May 2024 01:00:26 +0000
ROA not after:            Wed 07 Aug 2024 01:00:26 +0000
asID:                     88
IP address blocks:        2604:4540::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cf:6e:35:75:c1:8f:db:e4:aa:73:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
        Validity
            Not Before: May  9 01:00:26 2024 GMT
            Not After : Aug  7 01:00:26 2024 GMT
        Subject: CN=a9060d79-d862-44a8-acb8-b8432076ee35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b4:bc:67:49:5b:6b:b2:c1:69:11:2c:f9:22:
                    85:58:63:7c:4e:15:11:56:32:7f:37:66:3a:15:92:
                    73:ba:68:11:f4:e2:2c:c1:0c:21:48:5b:f8:0d:5f:
                    75:1f:39:78:f3:31:17:f1:53:34:96:4e:86:86:f4:
                    cf:7f:e4:e1:f8:e8:d6:b5:dc:e4:e2:e9:07:79:7d:
                    91:46:81:f4:2c:72:0e:e4:ed:69:72:48:b2:fd:4e:
                    d8:81:9c:64:b3:8d:76:20:61:4c:b4:fc:d6:cd:ce:
                    81:47:bb:3d:a9:02:e2:5f:b3:19:b0:b3:5e:ff:7f:
                    f8:4a:11:1a:97:c2:67:23:b4:ca:87:b4:9d:49:6b:
                    eb:c3:05:21:1b:ea:b2:58:1e:11:73:a3:ab:68:87:
                    14:78:d6:49:08:67:89:e5:85:15:da:b4:40:5b:49:
                    a4:5f:1c:91:9f:53:22:f6:fa:76:87:e7:68:c0:d8:
                    ce:fb:1b:7f:b0:bc:0f:b1:94:37:8a:b9:17:f6:06:
                    86:86:47:d7:c9:a9:d4:a4:70:3a:ea:e8:6d:54:1a:
                    49:88:d1:16:24:f4:db:6b:d1:ac:d7:5c:d7:cc:ae:
                    73:64:f7:78:e3:c3:b6:2d:3f:c0:c6:82:d2:15:e2:
                    5a:1b:7d:fa:ed:c6:a1:cf:2d:e3:00:94:7b:ae:24:
                    2e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:56:6A:6A:63:D5:D8:A7:95:D9:85:57:26:A2:0E:41:60:C8:6D:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/4b4001fc-7190-3b7b-ae3a-61581acffc5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl

            X509v3 Authority Key Identifier:
                keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4540::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:06:76:81:01:32:fc:72:82:8e:90:7b:3c:df:bc:77:11:0c:
         d1:6d:fa:16:c8:78:31:ea:90:aa:82:0e:f2:8c:7e:29:27:e7:
         63:5b:8f:93:3b:bc:39:c6:89:e9:4a:b9:e9:f3:4b:97:23:52:
         92:ec:6e:79:b5:c9:f3:d5:eb:e5:43:2a:dc:4a:49:ce:91:ce:
         81:47:75:5f:1d:48:e2:43:a7:6c:75:9d:4a:9b:26:99:92:19:
         39:a5:35:d1:d2:7f:55:ca:60:29:25:e2:1d:fb:93:fd:d9:9d:
         6d:d1:46:c2:a1:94:e2:f1:99:8e:c3:8f:e7:94:55:9d:ef:11:
         57:dc:d1:e6:5f:78:d8:b4:73:9e:54:66:82:3f:04:8b:b8:e2:
         49:81:f5:35:4a:d9:d8:37:74:de:b9:d2:05:c6:a3:98:5b:85:
         84:7e:9f:1b:2c:28:5b:b6:b5:57:a4:59:00:92:10:ec:0e:af:
         8f:fb:05:5e:f0:f4:2f:0d:a3:30:21:f5:c2:20:87:6c:9a:b5:
         5b:00:bf:c1:9c:85:11:04:bc:22:0c:44:a0:2f:07:f5:32:10:
         21:7a:8b:ad:c4:1f:d1:46:18:46:42:46:e5:fa:be:8f:eb:8e:
         e9:20:c6:3a:ab:06:5c:cb:fc:9b:f9:5c:2c:c9:dd:98:35:39:
         1c:73:84:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:56:19 2024 by rpki-client on console-fra.rpki-client.org