Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/c8cfce96-e8ff-309d-85e4-2921d84133eb.roa
File:                     c8cfce96-e8ff-309d-85e4-2921d84133eb.roa (raw, json)
Hash identifier:          4QpnoyzPCTse6fni+zEuK+QRfvXel/Va0VHCZwesSv0=
Subject key identifier:   94:2F:F5:83:CE:52:2E:03:B6:49:E6:E9:18:4B:AC:AA:C0:A8:90:25
Certificate issuer:       /CN=a92c0e3e-e786-40f1-a211-bf8a9b31315b
Certificate serial:       010D0C9F432858457A486CD1ACE668774BCC6460
Authority key identifier: 2C:1F:35:C9:C3:29:F1:59:1E:9C:2E:E5:82:25:B0:79:F5:67:BA:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/c8cfce96-e8ff-309d-85e4-2921d84133eb.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     29848
IP address blocks:        2605::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/a92c0e3e-e786-40f1-a211-bf8a9b31315b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/a92c0e3e-e786-40f1-a211-bf8a9b31315b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:6c:d1:ac:e6:68:77:4b:cc:64:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a92c0e3e-e786-40f1-a211-bf8a9b31315b
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=4bdd193d-5049-4c61-9a78-56c091db32c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8f:27:11:15:23:28:13:3c:d8:e8:1a:34:52:
                    74:ad:b0:7e:3e:76:c7:9b:12:09:f0:f1:1a:c7:86:
                    4a:d6:38:32:f3:00:05:eb:56:68:95:26:ad:75:ca:
                    fb:0b:71:6d:06:c3:1e:e3:22:f3:26:27:ca:c1:f0:
                    24:3d:a7:8f:a0:75:ce:2c:cb:b9:51:8c:1c:c9:d5:
                    d5:11:cc:14:d4:b7:b5:f2:0e:4d:bd:18:86:26:ac:
                    c8:d1:97:08:b4:a9:73:ca:be:24:9a:00:cf:88:da:
                    36:e9:1e:1b:69:91:54:e3:0c:dc:d7:e7:59:cb:11:
                    13:2b:40:9d:6b:b8:a5:13:c4:41:99:4c:8b:89:8b:
                    98:c1:ab:aa:f3:6a:63:a5:c4:4e:7f:37:85:c6:41:
                    12:3d:0d:d6:98:e9:6a:b2:c0:6e:6b:69:78:11:45:
                    7c:46:b0:99:63:99:93:e0:86:39:a2:85:f0:aa:a7:
                    5f:15:05:04:3d:e0:32:3d:f3:5d:fe:be:7e:79:20:
                    41:4f:cf:f3:7c:c4:ff:6a:fc:8f:58:de:f9:eb:79:
                    80:dd:f9:95:05:60:eb:12:8e:3d:32:48:85:8f:89:
                    47:d7:2f:72:f9:94:4b:4c:ef:af:0d:b1:09:bf:82:
                    fb:9e:19:1b:d0:26:4d:5e:35:06:b1:db:d7:38:da:
                    7d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2F:F5:83:CE:52:2E:03:B6:49:E6:E9:18:4B:AC:AA:C0:A8:90:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/c8cfce96-e8ff-309d-85e4-2921d84133eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/a92c0e3e-e786-40f1-a211-bf8a9b31315b.crl

            X509v3 Authority Key Identifier:
                keyid:2C:1F:35:C9:C3:29:F1:59:1E:9C:2E:E5:82:25:B0:79:F5:67:BA:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:0d:46:5f:0a:c6:9b:04:12:0e:42:d3:35:5e:2e:32:45:a8:
         6d:bc:e0:04:64:2d:c7:50:e2:ff:e9:e0:ea:41:63:7f:d3:ed:
         80:35:46:dd:46:7d:be:65:5a:45:62:a4:3f:14:66:10:80:07:
         72:f6:d6:39:21:21:32:49:7f:72:61:1a:54:0f:8d:31:f5:47:
         61:a6:77:09:1f:8f:86:13:68:31:1c:d7:91:cc:af:b6:94:6f:
         35:0d:0f:51:8c:fb:48:bd:bf:29:bc:25:b5:0d:d2:49:a4:67:
         af:f8:27:9f:dc:b0:f7:a2:b0:3f:70:31:94:2c:13:59:04:41:
         d2:89:a2:a6:df:83:4c:81:79:33:87:34:22:9a:00:8d:04:26:
         a0:e6:df:a9:ea:6a:e9:a3:cd:60:76:3c:27:b6:14:82:65:ab:
         a7:51:52:a7:3a:cf:45:50:ba:c4:a1:c8:ac:bf:9f:92:e0:e6:
         d6:61:c8:38:fa:e3:87:36:82:ae:45:d0:4c:37:b8:af:e3:2c:
         85:4a:f7:0f:30:af:a4:bd:9f:a0:f4:ac:33:88:92:f3:cb:d2:
         be:7e:f5:8e:70:74:5f:aa:a6:73:9d:8e:cb:c3:3d:4c:60:2c:
         1c:da:70:5d:4a:e4:4d:35:1f:fb:13:8f:06:38:2f:d2:03:14:
         97:ea:c9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:56:21 2024 by rpki-client on console-fra.rpki-client.org