Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a0bffdaa-855e-3b5b-bc22-19615208b92b.roa
File:                     a0bffdaa-855e-3b5b-bc22-19615208b92b.roa (raw, json)
Hash identifier:          ifdrNFDhBYquCEJqUsH0c251kpE4Om9pVFnaVnKKpbQ=
Subject key identifier:   CC:9F:15:DE:8E:9B:A5:0A:43:CD:6C:91:CD:4A:56:F3:3A:2B:7E:D5
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285845BA7E2C5B69B1B8990AD68AC0
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a0bffdaa-855e-3b5b-bc22-19615208b92b.roa
Signing time:             Wed 01 May 2024 13:00:34 +0000
ROA not before:           Wed 01 May 2024 13:00:34 +0000
ROA not after:            Tue 30 Jul 2024 13:00:34 +0000
asID:                     30133
IP address blocks:        2001:500:61::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:7e:2c:5b:69:b1:b8:99:0a:d6:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: May  1 13:00:34 2024 GMT
            Not After : Jul 30 13:00:34 2024 GMT
        Subject: CN=29e267ee-90cf-49d1-92e6-96d62ca7ce56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:57:fb:f0:63:70:b2:35:01:ff:63:21:10:52:
                    5b:a9:f2:e4:01:15:74:64:23:cc:3d:49:5c:ae:27:
                    8a:97:43:3a:fd:94:51:ac:44:c1:7f:52:d6:10:8c:
                    c1:55:34:0c:16:97:89:72:28:34:31:e8:a7:af:55:
                    85:13:74:27:a5:37:ad:93:64:be:9f:d6:31:72:ec:
                    99:a4:73:96:05:c4:d1:84:ff:53:49:bf:53:32:90:
                    44:14:15:85:bf:5c:07:1e:9d:a0:c3:36:c4:ab:85:
                    0a:77:61:44:0b:8d:0e:ae:d7:80:df:8a:44:e6:a3:
                    e4:64:14:5b:ea:f4:0d:83:90:ac:9f:cb:3c:c1:14:
                    ba:6e:3d:51:04:61:75:57:87:41:f8:a4:80:10:32:
                    35:c8:93:0b:fe:54:da:e9:9b:c1:0e:c3:98:09:1c:
                    3a:1d:d3:a6:43:a8:09:32:da:0d:fe:e4:7f:4c:3e:
                    83:69:bf:e4:dc:2c:b5:d5:2e:05:ea:bb:b7:68:db:
                    ab:46:b3:33:76:49:8d:18:ae:c1:d1:4a:dd:37:6d:
                    54:8e:61:54:50:8e:7d:be:0f:ac:25:d7:58:05:f1:
                    3e:b8:77:89:2a:ff:4b:31:62:bc:60:26:0b:28:8f:
                    05:a6:20:0f:6b:dd:75:cd:81:a0:8c:55:e8:6c:19:
                    a5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:9F:15:DE:8E:9B:A5:0A:43:CD:6C:91:CD:4A:56:F3:3A:2B:7E:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a0bffdaa-855e-3b5b-bc22-19615208b92b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:61::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:33:69:e0:b7:13:1a:f0:8f:77:17:a0:9b:d2:84:fa:0b:7e:
         0e:7c:73:64:9f:9c:34:f0:6f:59:78:0f:7d:87:5c:e2:ad:9d:
         0d:b7:68:b7:21:fb:8e:fe:6d:2c:51:66:8f:ba:30:f9:e6:a1:
         62:a1:d4:43:c0:0a:82:a7:db:bf:09:f3:96:7e:a1:23:4a:06:
         30:4c:26:f9:5d:98:33:6e:34:5d:8f:7b:82:a9:70:be:31:73:
         95:28:00:7d:85:de:8a:d6:9f:b5:28:a5:75:c4:88:70:32:e3:
         1a:5d:43:67:96:df:ed:14:59:a8:39:77:80:d5:af:83:f3:bd:
         45:9a:00:07:9e:59:59:28:ef:e2:04:53:f9:78:66:b4:07:5b:
         e6:79:03:71:d4:83:87:63:02:11:b8:14:a0:55:4f:af:94:96:
         a9:31:46:01:3b:e5:23:42:39:d9:5b:9a:6e:2b:80:04:12:74:
         fb:fe:06:2b:7a:65:3d:ff:5c:de:b6:f8:48:25:1a:0f:a2:51:
         a2:ec:18:94:6f:42:91:af:83:4b:fc:90:44:f4:45:10:f5:5f:
         bd:f7:ef:3f:66:c2:04:25:ad:8c:9f:8a:36:e8:68:5e:be:2a:
         12:e7:b7:5d:3c:42:ad:38:c1:c6:59:22:05:c9:aa:5d:7d:f5:
         f3:86:15:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 01:59:44 2024 by rpki-client on console-fra.rpki-client.org