Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/0bd014e3-1dac-37fb-adcf-b5d01bda751e.roa
File:                     0bd014e3-1dac-37fb-adcf-b5d01bda751e.roa (raw, json)
Hash identifier:          1emXtO8C+IdbtTdrrtuajqxOBCiqMeVpOid/CKAsmUY=
Subject key identifier:   EC:9C:AF:BE:C6:1C:ED:BC:95:38:A9:24:46:FF:09:AD:2F:29:A0:35
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F43285845D50396582D51BDCE686B9C80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/0bd014e3-1dac-37fb-adcf-b5d01bda751e.roa
Signing time:             Sat 11 May 2024 01:00:27 +0000
ROA not before:           Sat 11 May 2024 01:00:27 +0000
ROA not after:            Fri 09 Aug 2024 01:00:27 +0000
asID:                     54113
IP address blocks:        2620:11a:c040::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d5:03:96:58:2d:51:bd:ce:68:6b:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: May 11 01:00:27 2024 GMT
            Not After : Aug  9 01:00:27 2024 GMT
        Subject: CN=1a787eec-de60-4344-9278-ccf7d8b7fee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9b:2d:be:78:eb:7d:4a:a4:3b:94:dd:6f:ca:
                    4a:9f:7e:3c:4e:89:b2:24:f4:3d:0b:f5:49:42:af:
                    4a:9f:80:fe:63:23:16:9b:aa:13:4d:52:5a:57:77:
                    ce:1e:b5:0c:92:d6:fc:04:be:7d:c3:72:2b:c5:56:
                    15:1f:3f:bb:59:52:99:13:99:ed:9a:3e:34:9b:35:
                    69:80:8d:8a:af:f7:31:23:10:c7:fa:de:46:e5:28:
                    84:2d:bb:a6:cd:9e:45:3d:e7:f2:9e:a7:a1:98:9d:
                    43:f3:26:2c:8f:5c:54:6b:a4:a4:a7:b8:c5:8d:58:
                    a6:21:f7:c0:82:48:34:04:9f:7f:bf:9d:78:95:c2:
                    58:2d:79:55:cc:73:10:36:79:ec:b0:00:3a:70:96:
                    e3:21:75:c1:80:9a:6c:b1:34:83:be:57:1c:d6:2b:
                    17:79:c4:03:b7:1d:0a:3d:d4:11:a9:50:d2:d5:2d:
                    65:54:57:fd:4d:69:43:90:4a:79:34:f8:c5:ee:45:
                    a1:13:bd:06:f1:36:9f:68:2f:f7:13:99:85:a1:e9:
                    62:ee:d7:5c:49:ec:c6:1b:c3:3b:dd:30:9c:fe:a0:
                    f8:26:4e:1b:43:6d:6f:fe:95:53:5f:1f:d4:c2:11:
                    f6:18:dd:e2:85:95:a8:32:ad:8d:e5:b4:2f:08:07:
                    e4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9C:AF:BE:C6:1C:ED:BC:95:38:A9:24:46:FF:09:AD:2F:29:A0:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/0bd014e3-1dac-37fb-adcf-b5d01bda751e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:c040::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:03:ea:6f:5f:47:54:4e:d2:ca:54:a2:e8:55:83:79:8e:67:
         de:c1:8f:ea:a2:7f:f8:d7:be:47:f5:24:2d:81:fa:f8:b1:f7:
         6a:2c:99:ec:37:45:90:75:cc:3c:7a:15:7e:ba:7a:48:59:7c:
         a5:9f:54:ee:60:70:7a:2b:e9:5f:8d:6f:ce:be:0d:75:fa:9f:
         92:bf:97:89:14:dc:b5:25:68:dd:b6:76:10:58:3a:1e:40:7b:
         a5:d7:b8:41:16:66:c7:43:01:fc:56:9d:54:9a:09:c7:89:b1:
         a4:5b:00:a8:1d:38:a9:3d:52:0e:bc:ee:6b:b9:46:3a:dd:a6:
         2c:d0:6a:88:3c:5a:23:4b:80:83:55:7e:48:2b:e8:ca:16:a5:
         ad:4c:01:71:6f:c8:16:58:e3:bf:dd:94:6a:fe:4f:6b:0f:0a:
         97:c0:d3:50:7c:d6:6a:79:d8:47:d9:92:68:3e:99:db:b3:22:
         5c:32:6e:ff:8b:43:5e:ae:7c:42:2f:8e:4a:4a:78:63:d1:af:
         05:47:c9:c0:42:c8:ca:88:40:34:0e:ec:cd:21:ba:39:2b:41:
         3b:4d:20:38:3e:67:8e:bb:ed:a5:e6:7e:54:f5:6e:2c:5d:fe:
         dd:08:dd:1f:17:f6:ab:8b:b8:ea:02:9c:e4:b0:d9:ab:82:9e:
         be:29:c0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 01:33:02 2024 by rpki-client on console-fra.rpki-client.org