Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/4df2d60c-fcbe-3c61-96f8-141e97cc8c03.roa
File:                     4df2d60c-fcbe-3c61-96f8-141e97cc8c03.roa (raw, json)
Hash identifier:          oLjwjS6mvcV53gRjZM6nP55gDNsrS+3fktrxgW7/unw=
Subject key identifier:   85:8D:DF:BA:30:A3:72:9D:D9:A0:FE:F6:EC:F5:DE:4C:AD:DA:22:C0
Certificate issuer:       /CN=a90f006a-b108-4757-9dfd-b36376534658
Certificate serial:       010D0C9F43285845D39E561601797391191B0D00
Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/4df2d60c-fcbe-3c61-96f8-141e97cc8c03.roa
Signing time:             Fri 10 May 2024 13:00:36 +0000
ROA not before:           Fri 10 May 2024 13:00:36 +0000
ROA not after:            Thu 08 Aug 2024 13:00:36 +0000
asID:                     50131
IP address blocks:        2605:fb80:f000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d3:9e:56:16:01:79:73:91:19:1b:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658
        Validity
            Not Before: May 10 13:00:36 2024 GMT
            Not After : Aug  8 13:00:36 2024 GMT
        Subject: CN=b3c13e7e-7980-4ba6-b093-fc399c317591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:89:3b:02:2f:1c:33:1c:09:57:73:9b:46:f2:
                    5f:46:99:56:c6:d2:86:fe:4e:5c:c3:4b:d9:6b:61:
                    08:c5:45:c7:65:5f:20:13:67:56:7b:b6:68:46:29:
                    7e:96:01:a6:bd:74:c2:9a:71:08:a3:6e:77:52:19:
                    8f:5b:64:82:ae:71:4f:99:77:03:50:1f:42:2b:86:
                    ca:2c:15:e7:e2:f0:5c:4a:ba:bf:73:85:1b:72:83:
                    4f:4b:e6:6b:d5:6e:22:63:09:3b:7e:02:f8:d4:48:
                    61:9f:0c:d8:18:27:f0:ca:a6:55:8b:d4:79:5d:a0:
                    e9:30:ec:62:4e:f9:7e:90:52:18:83:10:06:de:ca:
                    0f:b6:82:83:0b:43:fa:5b:6d:c9:07:e7:4f:2b:e3:
                    42:1f:82:5f:c5:ef:8b:14:82:b2:18:b5:59:3f:bb:
                    07:44:01:11:cc:7f:c3:92:10:58:34:54:58:25:6b:
                    23:53:3d:dc:06:41:42:6e:ac:73:81:6c:d0:77:30:
                    41:cd:b3:cd:55:c3:e1:7e:89:b2:b8:d0:50:3e:c7:
                    8a:37:d1:34:21:b8:53:da:57:ab:f7:c9:39:c6:47:
                    c6:78:ee:27:79:8a:ae:c8:ca:a8:8b:18:ae:f2:db:
                    ff:95:04:b1:db:b7:b0:c4:7a:8e:0a:ce:64:a7:2e:
                    13:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8D:DF:BA:30:A3:72:9D:D9:A0:FE:F6:EC:F5:DE:4C:AD:DA:22:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/4df2d60c-fcbe-3c61-96f8-141e97cc8c03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl

            X509v3 Authority Key Identifier:
                keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:fb80:f000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:13:f7:80:76:83:5e:9a:78:0c:c6:98:d3:f5:b9:e5:e5:1f:
         2c:53:1e:2e:71:e8:cd:6e:93:47:0e:eb:80:1e:ca:6b:3a:8c:
         0f:92:87:97:61:1f:b5:70:fd:d0:ff:89:4a:a1:da:2c:af:15:
         5f:03:69:e9:60:48:18:a2:bc:e0:13:0d:0d:33:0f:4b:07:ae:
         cf:68:81:57:0a:ab:91:c2:b8:39:6e:38:69:2b:da:0c:c4:6e:
         45:b7:d9:45:3b:4f:cf:ab:f1:3a:47:8e:7c:54:bf:18:65:d7:
         0b:44:d8:65:59:5b:74:74:b3:76:fa:f8:c4:2d:7c:b0:9a:c8:
         a0:d5:e0:c3:54:4c:92:58:7b:c0:ed:e3:e5:24:1c:cb:7c:d2:
         fe:77:12:21:98:3e:66:72:36:fc:7d:1e:bf:24:24:6e:c0:04:
         4e:97:e3:83:7c:b7:ab:e7:d5:74:38:83:2c:c6:91:f2:02:31:
         5e:0f:c8:4e:e5:28:f1:87:de:ca:91:70:0a:13:a1:11:2d:11:
         db:92:5d:33:4d:b9:d7:29:85:a7:5c:37:55:ca:93:0a:4d:75:
         11:7f:f7:ef:70:bb:44:6a:f3:dc:b5:5f:e8:9e:61:08:98:7d:
         3d:39:2e:61:6c:04:2f:c9:83:9b:ba:21:18:52:9d:ec:91:28:
         11:a1:20:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 14:50:15 2024 by rpki-client on console-fra.rpki-client.org