Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/3f0ae8de-6fa6-3bc8-b541-87a1990df9bb.roa
File:                     3f0ae8de-6fa6-3bc8-b541-87a1990df9bb.roa (raw, json)
Hash identifier:          hv0yqO8a3gSzfDbdapOIwVA1OGGtyl2n5/jL/VR9GuM=
Subject key identifier:   B1:8C:7C:F5:4D:CC:78:4C:73:71:B4:89:CC:2A:EF:83:73:B2:55:43
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F432858457A486F608EE15BD40C2DBD80
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/3f0ae8de-6fa6-3bc8-b541-87a1990df9bb.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     27321
IP address blocks:        2001:500:6b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:6f:60:8e:e1:5b:d4:0c:2d:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=2af9b97a-f14a-471a-8259-a0e9f858df13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:53:f9:b5:6a:c9:6e:60:5b:81:e9:79:0d:2c:
                    02:37:59:7b:f6:d9:8f:b8:9d:39:b2:78:5b:d4:15:
                    41:51:dc:64:57:69:75:44:01:c7:02:d3:89:b3:93:
                    da:35:8c:24:5d:1a:04:c6:cc:8c:5c:e2:1f:16:0e:
                    8a:bb:f7:6d:55:d4:8e:d8:de:52:d4:ac:d5:f2:3a:
                    24:6d:17:3f:36:08:a2:62:94:3e:90:c6:27:82:4e:
                    2a:de:98:60:f3:b6:72:32:28:bb:9e:1d:d2:71:7d:
                    21:00:ce:2c:9d:2b:c8:c6:88:e3:f4:ec:8a:c1:36:
                    22:c0:77:85:25:60:81:fe:8a:53:09:50:e7:4b:30:
                    d1:ce:1c:4f:c8:da:b1:c7:5e:b9:e2:63:bc:54:e8:
                    73:1c:4d:62:2f:87:d3:d2:8c:df:a9:71:ee:a3:c4:
                    98:b7:c1:f3:f0:3a:26:6e:b2:1a:1b:d7:c8:3b:19:
                    c6:35:11:d8:56:02:5e:f4:08:0c:36:3b:51:cf:53:
                    e0:5c:98:c0:73:52:74:d2:b4:e7:36:bc:24:e6:17:
                    3d:00:66:72:32:25:1d:55:c9:d6:9a:e5:33:16:7d:
                    f5:28:9d:9a:fc:94:72:3d:a7:18:26:8d:d6:d2:af:
                    a4:b5:3c:55:4a:60:16:c7:9f:e1:59:f6:63:48:ca:
                    4b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8C:7C:F5:4D:CC:78:4C:73:71:B4:89:CC:2A:EF:83:73:B2:55:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/3f0ae8de-6fa6-3bc8-b541-87a1990df9bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:6b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:e8:9a:ff:3b:3d:04:27:13:7f:7d:69:91:12:8f:93:78:b3:
         f3:c5:c8:db:98:0f:d6:9d:ae:a4:04:6e:60:50:55:0f:a1:f5:
         4d:77:dc:c9:99:d1:e4:75:8e:d1:60:af:6a:e8:4c:b3:0e:30:
         c9:b5:55:ea:a7:70:58:27:6e:7d:ff:1b:13:f8:ad:6a:b8:fb:
         e3:16:74:c6:5b:0b:88:be:63:47:ce:fe:da:9a:48:f0:4d:10:
         30:ec:49:8f:98:8b:2d:f0:c8:fa:b7:41:17:1e:9f:66:9f:46:
         a7:62:1d:aa:f1:9e:48:06:fb:05:1d:c5:e1:db:b2:c4:d3:32:
         01:aa:69:1e:6c:43:3b:fc:23:8d:74:37:65:b5:cf:b9:05:90:
         3b:87:70:fe:a6:69:f2:54:0a:bc:9d:de:69:a4:28:f5:9a:f8:
         c0:bf:28:bb:87:35:bc:04:1d:7b:14:17:6e:e3:3a:41:9a:90:
         e1:29:1c:91:1b:80:4a:14:02:b3:27:13:9b:d2:6d:12:1d:b9:
         7a:6d:d3:78:69:0c:88:2e:5b:9c:c9:d7:fd:02:15:a8:f4:1b:
         64:44:ed:95:44:55:40:5c:e1:c3:11:8c:8a:f6:4e:3f:ff:8f:
         eb:12:76:53:3d:c2:52:50:8a:28:25:cb:ee:f4:56:49:92:5e:
         a4:c4:24:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 03:12:24 2024 by rpki-client on console-ams.rpki-client.org