Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/aa767222-4e8d-39e9-9387-7c5ae1e14549.roa
File:                     aa767222-4e8d-39e9-9387-7c5ae1e14549.roa (raw, json)
Hash identifier:          gcgezJyIY0THhGc4fuqacAmAQL28ie3QCVajIcVdDTg=
Subject key identifier:   FC:3E:EB:EA:5D:17:C3:91:39:50:3C:5C:06:80:C8:09:3B:B6:68:6A
Certificate issuer:       /CN=415b363a-8f59-46ca-baf4-e6cb4b8fdf20
Certificate serial:       010D0C9F43285845BD48DC6973EA2F37164A3C00
Authority key identifier: 39:D9:D1:A1:3D:AC:AE:DF:23:16:FE:9B:20:DD:D0:8A:E1:19:11:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/aa767222-4e8d-39e9-9387-7c5ae1e14549.roa
Signing time:             Thu 02 May 2024 13:00:34 +0000
ROA not before:           Thu 02 May 2024 13:00:34 +0000
ROA not after:            Wed 31 Jul 2024 13:00:34 +0000
asID:                     397881
IP address blocks:        2605:5fce::/32 maxlen: 32
                          2605:5fc4::/32 maxlen: 32
                          2605:5fcb::/32 maxlen: 32
                          2605:5fcc::/32 maxlen: 32
                          2605:5fc1::/32 maxlen: 32
                          2605:5fc7::/32 maxlen: 32
                          2605:5fca::/32 maxlen: 32
                          2605:5fcd::/32 maxlen: 32
                          2605:5fc9::/32 maxlen: 32
                          2605:5fc5::/32 maxlen: 32
                          2605:5fc6::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bd:48:dc:69:73:ea:2f:37:16:4a:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415b363a-8f59-46ca-baf4-e6cb4b8fdf20
        Validity
            Not Before: May  2 13:00:34 2024 GMT
            Not After : Jul 31 13:00:34 2024 GMT
        Subject: CN=859f1347-7297-442c-b677-1796f11f18b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:31:97:ee:d8:1e:18:f7:41:07:d9:d5:d9:82:
                    c5:07:d5:ca:92:de:66:78:0c:8f:5c:11:64:f9:a6:
                    5e:b1:0b:74:0a:43:a8:b0:7e:c9:97:23:c9:7f:4c:
                    ad:f7:22:1f:78:04:bb:85:6b:f4:d9:04:c3:ca:8f:
                    8a:ad:3a:d6:28:b5:d6:b1:92:93:f6:7e:70:a0:01:
                    7e:8a:d3:84:89:7f:26:9e:68:a0:58:ac:e4:14:b7:
                    ee:e1:50:c2:ea:0b:80:f8:9b:bf:f2:0c:4a:4f:dc:
                    5f:eb:d0:3e:a0:32:ee:76:52:1d:66:fa:de:6d:ef:
                    d1:f5:94:0f:eb:24:28:46:15:82:6f:1b:ac:64:f5:
                    73:92:7c:84:71:69:cb:5a:a3:53:81:10:24:bc:d5:
                    1c:a6:30:0c:cf:86:ee:33:bd:62:a7:22:1b:23:5c:
                    f5:bd:b9:7f:71:2d:69:55:16:61:ea:45:09:86:9a:
                    2f:aa:27:be:2e:e6:49:6c:06:04:52:63:2d:51:b7:
                    f0:48:33:6a:00:ba:10:af:9c:de:df:29:e9:a5:af:
                    d7:06:ac:fa:d4:2a:7e:bc:ed:55:14:6a:4c:65:73:
                    aa:7e:01:61:9d:f5:66:6e:32:41:fe:e0:8c:e0:b4:
                    cb:7d:c7:d9:59:2d:3d:3f:8b:b7:de:7b:6c:cd:04:
                    9d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3E:EB:EA:5D:17:C3:91:39:50:3C:5C:06:80:C8:09:3B:B6:68:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/aa767222-4e8d-39e9-9387-7c5ae1e14549.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.crl

            X509v3 Authority Key Identifier:
                keyid:39:D9:D1:A1:3D:AC:AE:DF:23:16:FE:9B:20:DD:D0:8A:E1:19:11:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:5fc1::/32
                  2605:5fc4::/30
                  2605:5fc9::-2605:5fce:ffff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:3e:ad:1f:e5:6d:84:a6:64:91:26:6a:8a:46:f3:15:c7:29:
         ad:48:71:41:8e:59:91:8c:28:48:6f:5f:2f:ca:08:97:fb:ab:
         6f:ff:87:95:bb:49:f1:f1:ea:fd:a5:23:a2:0a:98:08:67:d2:
         b3:1e:8a:27:b9:fe:90:d7:75:5e:43:84:2e:b2:87:50:be:64:
         6e:fe:e2:b9:2b:7a:9a:76:16:5e:4e:22:b9:5b:e7:bf:d2:6e:
         2e:c7:d5:8c:d9:0f:50:3c:8d:75:38:f9:5f:48:f3:3d:f9:06:
         f3:11:ad:19:28:5c:6f:5f:0a:7b:67:eb:60:c1:52:44:7a:e1:
         9a:83:6e:bb:16:2a:2a:44:31:e9:7d:ae:c4:7c:20:a7:9f:a3:
         ad:fa:5b:5d:ae:41:7b:6a:56:17:12:00:29:75:09:02:6d:fd:
         4f:b1:41:2f:f7:5f:ec:97:a5:71:6d:20:be:3f:ab:f1:65:11:
         4e:47:16:93:d3:94:f8:19:d2:16:6d:10:48:7c:65:b1:a4:1f:
         05:b9:11:1f:d1:8a:71:a5:68:e0:ce:ea:2d:6d:61:5a:99:77:
         dc:59:f3:67:8b:25:31:22:9a:f7:26:38:fe:7d:2f:14:23:73:
         62:58:e9:df:58:59:df:f2:cd:3a:b6:94:db:cc:e9:94:2d:bf:
         53:46:2a:5c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 18 01:43:18 2024 by rpki-client on console-fra.rpki-client.org