Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/dd4d84db-7a3d-35ad-a1db-6e770c1c76fb.roa
File:                     dd4d84db-7a3d-35ad-a1db-6e770c1c76fb.roa (raw, json)
Hash identifier:          +7nqGAyg2lXSmyokjwEpuwu2hm/Zhy0rytOn+kteB20=
Subject key identifier:   CD:1D:83:B4:28:81:BE:23:E9:67:BF:AE:1C:46:D7:55:BA:D0:A5:C9
Certificate issuer:       /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Certificate serial:       010D0C9F43285845CE09065B1B81C46C16693290
Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/dd4d84db-7a3d-35ad-a1db-6e770c1c76fb.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     400065
IP address blocks:        2604:4540::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:09:06:5b:1b:81:c4:6c:16:69:32:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=1a09d09a-6462-4872-8342-e78c54948509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:68:6b:b9:9d:7a:5a:f8:32:fb:7e:24:ae:23:
                    f1:e2:85:e2:8c:24:bc:c5:53:6d:c3:c7:32:43:e0:
                    65:39:47:7a:0f:20:f6:40:38:39:3a:25:c5:8a:bb:
                    d1:64:c9:62:75:49:0c:e6:9f:00:18:71:f1:33:49:
                    8d:a2:62:36:64:5d:00:17:33:95:df:ee:82:65:24:
                    aa:7f:08:07:e5:4a:22:19:71:18:00:47:31:62:9c:
                    f2:25:da:a1:56:28:9e:5d:82:9e:f1:9c:65:9e:fe:
                    14:13:57:21:88:1b:58:b0:f3:cc:5a:7f:03:f0:bb:
                    8b:ac:d6:29:43:d4:f2:04:8a:5e:72:ac:ca:bb:1d:
                    7f:89:a6:1f:26:d6:81:a0:1d:5e:66:cf:85:12:e8:
                    b6:02:c0:9c:8a:df:c8:07:32:e6:e4:91:0b:f8:b7:
                    4e:51:a8:43:77:cc:14:9e:5b:ea:87:3e:ac:bb:b8:
                    d6:8f:10:bf:12:20:90:a6:44:fb:2f:e5:e9:39:37:
                    7e:da:97:72:da:26:28:b7:10:b8:08:f0:48:bd:de:
                    e5:6a:78:42:1c:cb:54:a3:2a:36:f5:41:40:79:53:
                    63:b9:c9:c7:97:93:d7:44:01:8e:99:9c:76:79:3b:
                    0a:85:5f:5e:74:2a:c3:24:91:2f:8c:1b:07:8e:6e:
                    51:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:1D:83:B4:28:81:BE:23:E9:67:BF:AE:1C:46:D7:55:BA:D0:A5:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/dd4d84db-7a3d-35ad-a1db-6e770c1c76fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl

            X509v3 Authority Key Identifier:
                keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4540::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:bd:22:9f:0f:ec:6a:38:af:6d:5d:af:73:72:8e:00:cd:aa:
         6c:78:3b:2a:6a:ee:a0:8b:ca:c0:5e:b1:ee:4e:84:82:0d:19:
         33:02:c5:e8:25:d1:8f:a5:6c:7c:21:07:c3:cb:68:ed:91:f6:
         54:57:90:db:d7:72:78:c6:85:b2:51:88:75:72:7b:58:de:93:
         41:e3:9e:fc:cf:07:56:a4:84:e1:e0:49:a1:99:aa:7a:12:d1:
         fb:aa:c6:00:a9:e1:1d:ac:4d:50:10:d2:d0:7e:7e:62:0b:5e:
         c1:96:70:87:0f:e0:99:68:1e:3d:b7:47:99:ff:4b:16:48:cb:
         84:e1:43:56:9e:44:2a:14:1b:6b:4e:04:3a:13:e9:b7:26:5c:
         d7:ae:42:c1:f3:fa:71:83:83:a7:44:d5:f6:73:3b:2d:69:1e:
         60:07:83:b1:c4:0d:f3:fa:79:af:00:53:15:a3:38:fa:25:70:
         f2:9e:a7:e9:d4:d2:85:f5:44:7b:d4:02:53:a7:c0:ea:e1:ab:
         53:73:6d:fa:27:0a:f2:5a:2e:89:22:bb:e7:3a:c0:e6:ee:1e:
         8f:34:11:36:76:05:4a:cc:85:e7:74:fe:86:a5:6c:06:1f:14:
         19:56:13:ba:20:de:a4:9c:52:00:e5:be:58:a8:25:8e:6a:94:
         a1:57:18:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:56:19 2024 by rpki-client on console-fra.rpki-client.org