Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/08565d01-5f90-39d0-b9b2-6839bb80d5c0.roa
File:                     08565d01-5f90-39d0-b9b2-6839bb80d5c0.roa (raw, json)
Hash identifier:          VzEJm2Vgo6pqSn+FtphyqTCjYBY55aHY2GCod0OuFNw=
Subject key identifier:   A3:C0:5D:78:C9:42:BB:F1:4B:0A:FE:8E:E5:0D:61:B6:DC:70:1D:9C
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285845777DD4EA59806F6980806AC0
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/08565d01-5f90-39d0-b9b2-6839bb80d5c0.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     28753
IP address blocks:        2607:f5b5:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:d4:ea:59:80:6f:69:80:80:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=1b0db65a-c7c2-4902-b4e6-71d399e99f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ff:f9:e7:2f:0b:ad:1a:f4:a6:60:20:3d:08:
                    27:bb:c7:1b:c0:ba:c0:cb:fe:87:86:45:73:03:42:
                    dd:6f:47:12:cc:fc:22:59:62:7c:ce:73:82:1d:8f:
                    8e:74:a3:d1:b0:77:13:4c:23:db:00:cb:62:cf:53:
                    d5:fe:38:14:49:7a:c4:4a:14:8a:c0:42:b8:28:0d:
                    31:db:c0:70:7d:89:2b:2b:d0:fe:bf:14:94:3b:17:
                    49:9e:8c:a9:b8:3c:3b:00:d7:db:72:af:c7:c1:4a:
                    ec:75:6b:15:00:5d:24:f8:e4:aa:21:35:42:7c:ba:
                    20:47:7d:aa:a4:67:b0:29:68:52:36:f1:10:20:4d:
                    dc:1d:c3:e9:14:cd:ee:2f:ed:ec:cc:a2:cd:06:f8:
                    e4:1d:42:88:3a:07:09:fc:13:cb:41:78:99:f4:0f:
                    a5:0b:90:51:39:39:65:9f:3c:62:5b:a7:bf:38:46:
                    74:11:71:27:14:41:10:c9:29:84:49:3f:c4:55:fb:
                    a8:6b:53:30:1a:a7:63:1f:39:20:e3:83:72:a2:f2:
                    22:f4:fd:b5:f1:68:88:a4:72:0d:f9:4a:1a:76:1d:
                    66:be:5e:c3:81:59:6b:dd:84:47:02:39:79:f3:0a:
                    23:47:be:53:c0:1a:42:cf:c3:60:30:1c:31:79:ce:
                    44:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C0:5D:78:C9:42:BB:F1:4B:0A:FE:8E:E5:0D:61:B6:DC:70:1D:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/08565d01-5f90-39d0-b9b2-6839bb80d5c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5b5:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:c2:e6:8c:ac:48:45:a0:bc:dc:58:fd:e8:68:31:34:7e:ac:
         01:4d:ce:e8:49:db:63:21:56:59:f9:5b:f6:cb:52:a5:c2:6e:
         e4:c0:7a:c8:2b:2d:bb:97:e8:0d:e6:8f:43:97:cb:19:29:28:
         b0:24:d9:eb:b1:01:c4:f8:5a:05:96:97:be:b8:0b:ec:1f:6d:
         69:78:c5:f7:14:dc:bd:37:78:9a:61:89:e7:53:b9:c8:50:c5:
         da:09:9e:ab:8c:14:b0:60:10:50:ba:c2:41:2a:db:1d:66:5b:
         44:23:16:7d:7d:92:74:c6:0f:06:98:17:05:9f:01:96:fe:9d:
         22:bf:39:4c:71:5a:10:6d:26:b7:78:7c:74:c4:9a:e8:a2:ff:
         61:6e:ee:55:f4:dd:b6:6a:06:72:60:5f:44:b3:a5:86:c6:39:
         2b:b7:19:7b:c6:6d:e3:98:6b:07:b4:3b:a7:7a:a5:d9:e0:49:
         24:53:20:37:c0:48:4f:d8:79:4f:93:cd:15:4e:45:c8:f2:bd:
         4f:56:e5:63:94:72:02:bc:02:a6:ee:d9:43:cf:39:a2:34:10:
         b1:2b:d7:4b:fe:84:50:2e:a9:11:a3:23:05:74:e2:c1:d4:b3:
         2b:a3:ba:bf:8c:04:89:23:00:2a:80:84:5f:fa:fa:6f:06:04:
         df:fc:78:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:52:02 2024 by rpki-client on console-ams.rpki-client.org