Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/706a9542-5b90-3186-b2aa-86e2e6a16930.roa
File:                     706a9542-5b90-3186-b2aa-86e2e6a16930.roa (raw, json)
Hash identifier:          YPawgqbQaR6RpZouKaLWy5ElFIW8zj36Pgu4mGhAOH0=
Subject key identifier:   5A:5F:95:1E:BE:80:2F:10:FA:53:B6:FA:79:8B:BC:BF:2C:AF:EB:07
Certificate issuer:       /CN=c1428d99-ad23-4d58-b5f4-17da4a50d59a
Certificate serial:       010D0C9F43285845BD48D92D16B7F0C6724D54C0
Authority key identifier: 3D:27:AE:90:5A:81:00:51:55:1E:44:B7:E5:3D:AD:8B:B5:6D:7E:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/706a9542-5b90-3186-b2aa-86e2e6a16930.roa
Signing time:             Thu 02 May 2024 13:00:34 +0000
ROA not before:           Thu 02 May 2024 13:00:34 +0000
ROA not after:            Wed 31 Jul 2024 13:00:34 +0000
asID:                     198949
IP address blocks:        2606:2b00::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/c1428d99-ad23-4d58-b5f4-17da4a50d59a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/c1428d99-ad23-4d58-b5f4-17da4a50d59a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bd:48:d9:2d:16:b7:f0:c6:72:4d:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1428d99-ad23-4d58-b5f4-17da4a50d59a
        Validity
            Not Before: May  2 13:00:34 2024 GMT
            Not After : Jul 31 13:00:34 2024 GMT
        Subject: CN=bc118f10-e1ab-4b62-99c4-ee343e07fd79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:56:3e:16:62:51:86:89:95:0a:e0:e7:37:0a:
                    fb:9f:c9:99:9e:4b:ae:39:60:93:40:39:38:8a:b6:
                    e4:52:86:f9:b9:e9:f1:5c:b7:e9:8c:cf:4e:79:b0:
                    e8:86:81:d5:7e:b8:d5:65:f1:b3:ef:7a:e1:d8:03:
                    24:82:76:eb:ec:61:6f:43:bd:b7:20:3b:26:07:c7:
                    61:15:5e:8f:c5:9c:33:44:db:9f:03:82:84:c7:6c:
                    f4:32:ca:44:26:39:08:4b:cd:f5:8c:6d:18:63:e2:
                    d2:5a:62:d6:c9:23:1b:e1:85:fb:07:44:82:09:74:
                    bc:21:4f:65:fe:cc:aa:55:df:fa:7f:d0:1d:e0:54:
                    23:81:cc:ea:79:11:47:9a:da:93:1b:9f:2b:fe:86:
                    ec:10:45:9d:6a:e7:5c:ae:bd:a6:c2:c4:77:37:dd:
                    49:b1:10:af:6b:09:3f:4b:57:ea:48:f7:b5:22:a3:
                    45:57:86:20:a7:24:88:57:fa:1f:36:c1:50:d3:0e:
                    36:df:56:7b:46:12:7c:8e:bc:f1:73:63:60:c4:93:
                    f1:12:87:21:80:c0:62:8d:13:64:52:da:ac:43:46:
                    da:f6:57:66:6b:a3:d4:c5:94:d8:cb:33:74:60:d0:
                    d8:fb:69:cf:47:cb:69:b1:56:ba:40:86:a5:75:d6:
                    fd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5F:95:1E:BE:80:2F:10:FA:53:B6:FA:79:8B:BC:BF:2C:AF:EB:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/706a9542-5b90-3186-b2aa-86e2e6a16930.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/c1428d99-ad23-4d58-b5f4-17da4a50d59a.crl

            X509v3 Authority Key Identifier:
                keyid:3D:27:AE:90:5A:81:00:51:55:1E:44:B7:E5:3D:AD:8B:B5:6D:7E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2b00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:3b:a3:84:60:d7:b1:b0:87:e2:3b:43:cb:d4:a2:0d:05:e9:
         6b:cb:8a:4f:58:f8:89:58:3a:75:79:74:9b:65:d4:70:52:ec:
         a6:7b:82:7a:56:af:34:d2:5d:f7:ad:a9:c0:9e:71:6d:bc:27:
         ab:9a:58:7a:ee:a5:64:1f:55:4b:3f:49:43:c8:d4:fd:48:56:
         d9:41:e2:40:63:40:47:83:ba:a0:9c:a2:99:be:04:37:a9:71:
         b1:62:be:de:b1:03:ab:e3:c5:99:ff:94:42:63:50:04:f2:03:
         ef:7d:b4:3e:2d:2c:b0:4e:e1:e7:16:7a:9d:19:a6:c2:3a:ee:
         87:5f:ea:df:70:b2:31:a2:76:1e:f0:0b:cb:59:bf:1d:84:d6:
         01:3f:00:96:12:79:b5:e1:54:ca:4c:a8:83:7f:eb:2a:e8:b7:
         0d:53:06:6e:ce:55:aa:2b:b2:97:78:0b:0c:da:29:91:d0:0c:
         02:d0:ca:b5:a8:3b:02:b5:7d:20:d4:21:15:8b:d8:a5:53:8d:
         05:92:96:1d:9e:a4:97:16:f8:75:4e:f0:97:66:0a:28:16:11:
         6e:45:c3:4d:64:5c:07:f7:4d:c7:0d:fa:fd:63:61:56:92:58:
         40:49:7c:f4:7c:7c:ae:52:63:80:5a:2d:84:fc:97:22:09:2a:
         54:4a:fb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 01:46:56 2024 by rpki-client on console-fra.rpki-client.org