Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/4f0fe6e7-b8ab-3dac-9155-001ac64dc382.roa
File:                     4f0fe6e7-b8ab-3dac-9155-001ac64dc382.roa (raw, json)
Hash identifier:          41KmEBMwbJ12uV2tWCTGxfRzNnXto3poLkfDytD3JJQ=
Subject key identifier:   99:00:77:0D:29:36:E5:55:6D:00:A1:46:7A:68:6D:BA:F4:5B:9C:50
Certificate issuer:       /CN=d8a0f176-b4a2-4e32-8a98-4e12e07d8996
Certificate serial:       010D0C9F43285845E72920E1647BE8DE0936A240
Authority key identifier: DC:75:7C:13:7E:A8:82:8E:7C:F9:53:75:19:D0:B1:85:4E:C5:3F:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/4f0fe6e7-b8ab-3dac-9155-001ac64dc382.roa
Signing time:             Fri 17 May 2024 13:00:34 +0000
ROA not before:           Fri 17 May 2024 13:00:34 +0000
ROA not after:            Thu 15 Aug 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        2600:400:ff00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e7:29:20:e1:64:7b:e8:de:09:36:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8a0f176-b4a2-4e32-8a98-4e12e07d8996
        Validity
            Not Before: May 17 13:00:34 2024 GMT
            Not After : Aug 15 13:00:34 2024 GMT
        Subject: CN=144edc19-7ab8-4bde-891b-24a0bdbfed3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5e:7a:84:1a:89:6c:65:bb:41:3c:5d:8b:9f:
                    ac:d6:90:e4:f4:7c:a6:00:54:0a:6f:3e:36:79:cb:
                    5f:28:93:6e:42:cc:3b:ff:7c:27:2b:04:b4:3c:ce:
                    c2:dd:92:94:22:37:be:f2:eb:7d:98:bb:2c:f3:c9:
                    0f:31:87:47:b4:96:1e:c9:17:bc:16:23:d6:a1:83:
                    e7:f3:a2:11:9d:e1:9e:f5:82:a3:f3:b3:66:37:ed:
                    58:18:9e:3f:a8:32:aa:8b:15:61:ec:4a:b0:99:98:
                    f2:e1:48:21:91:6e:34:cf:27:62:41:e9:72:c3:07:
                    cd:9b:0f:68:42:0b:06:7b:8c:a6:a7:d9:71:d8:03:
                    32:44:db:ff:ec:27:69:eb:61:97:c9:b9:07:a5:1e:
                    53:4e:3e:ee:02:35:f1:f9:a0:10:73:37:c7:d1:fc:
                    b7:da:a2:f6:a8:25:9d:ee:7d:54:95:1f:3f:87:c0:
                    02:70:f3:7c:5e:d9:90:2e:3d:5f:74:1e:c0:d8:c4:
                    53:2e:13:0f:3b:22:61:fd:f3:dc:c8:52:06:a1:3c:
                    b4:3d:12:6a:bd:a7:db:c0:28:1d:fb:55:c8:ea:2d:
                    d1:84:16:8b:37:44:55:cf:84:10:df:6e:c2:66:14:
                    07:9e:bb:17:a7:60:d5:a8:83:0e:32:ca:19:cf:61:
                    5b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:00:77:0D:29:36:E5:55:6D:00:A1:46:7A:68:6D:BA:F4:5B:9C:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/4f0fe6e7-b8ab-3dac-9155-001ac64dc382.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl

            X509v3 Authority Key Identifier:
                keyid:DC:75:7C:13:7E:A8:82:8E:7C:F9:53:75:19:D0:B1:85:4E:C5:3F:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:400:ff00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:63:e2:80:16:c5:75:c9:9c:15:6f:a3:9d:1b:9c:b5:6f:5e:
         12:13:1b:c4:9e:9a:4f:0d:d9:8e:43:a8:9a:2b:c1:56:b3:64:
         b4:c3:98:8f:fb:2e:8e:90:84:84:72:aa:b4:6c:9f:a0:5b:de:
         14:a9:38:ee:86:cb:48:f3:a0:96:1f:08:1f:85:ab:fb:8b:be:
         ce:22:f2:74:2c:88:0a:29:d3:a3:72:96:45:07:e4:d7:5a:d9:
         1d:79:aa:be:20:3b:fb:e9:c1:42:54:e6:0d:6f:12:97:33:5b:
         02:30:b8:81:f1:55:b3:f3:39:77:5a:c5:c2:fd:7c:a6:37:aa:
         9d:04:d1:70:9a:d8:08:44:a5:58:75:bf:56:6a:96:61:54:b2:
         e1:f8:4d:24:27:61:8d:81:aa:b3:dd:45:73:63:40:e9:a1:df:
         b2:ad:46:18:dc:0f:81:70:32:e1:91:90:6a:9d:fb:ad:5d:f2:
         44:73:08:f5:54:ae:9b:e6:d2:e4:bc:fa:d5:9f:84:30:7e:6c:
         a1:0f:1c:2d:2d:48:48:3f:82:7e:0b:6e:9d:7b:26:5d:9e:00:
         e4:f8:e5:96:84:1a:c0:40:c4:6c:8d:cf:6b:fa:fc:5b:52:f2:
         4a:4f:08:bb:c2:fd:b6:c1:82:a6:20:04:9a:90:4c:55:13:3d:
         d5:b5:19:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 15:13:51 2024 by rpki-client on console-ams.rpki-client.org