Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/9ddbc802-5834-3c9c-9aff-9c73771f288f.roa
File:                     9ddbc802-5834-3c9c-9aff-9c73771f288f.roa (raw, json)
Hash identifier:          +CPAXChy4b07QNm7dyUTvRyPKrCPZEdlFGMQRiNITeQ=
Subject key identifier:   B1:31:CD:28:01:CC:2B:22:BC:D4:6E:DC:05:9F:1E:4D:8E:0E:EB:78
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F43285845DA98F461FE1120FB18FD6500
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/9ddbc802-5834-3c9c-9aff-9c73771f288f.roa
Signing time:             Mon 13 May 2024 01:00:25 +0000
ROA not before:           Mon 13 May 2024 01:00:25 +0000
ROA not after:            Sun 11 Aug 2024 01:00:25 +0000
asID:                     271
IP address blocks:        2607:f8f0:200::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:da:98:f4:61:fe:11:20:fb:18:fd:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: May 13 01:00:25 2024 GMT
            Not After : Aug 11 01:00:25 2024 GMT
        Subject: CN=f30390c0-e66d-4ff4-bd2f-63d28788315e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0f:ec:66:98:6d:7b:db:26:fe:fe:52:5a:f6:
                    ff:36:bb:06:7b:d7:4d:99:62:5b:d9:58:da:17:d4:
                    81:e8:29:02:25:6e:36:37:c5:3f:f8:4f:4f:fb:ef:
                    f7:63:97:b7:3f:f0:34:b9:64:f2:72:5a:fa:67:87:
                    48:19:50:6b:e5:65:48:e1:8c:ca:66:2c:c4:4d:ca:
                    27:38:21:0b:49:f3:c9:04:b1:c1:56:20:7a:ad:12:
                    f3:82:aa:1b:de:e2:90:27:0f:6c:61:83:e8:e4:8a:
                    c6:ba:ea:c3:c5:9d:7b:5b:7e:93:ac:07:3d:db:84:
                    aa:25:1d:94:0e:65:0c:13:1c:7c:bd:3b:b2:d4:b7:
                    87:c6:28:89:67:20:51:d0:95:c8:f8:7e:54:b6:37:
                    1d:75:78:e9:58:ea:d1:b2:61:a8:4e:d2:0f:9a:2c:
                    81:52:e4:d6:9d:6f:f0:69:d5:4e:63:d7:fe:23:de:
                    79:04:bb:77:5e:0c:15:9b:f2:75:ad:dc:28:29:bd:
                    d9:e7:1f:3e:61:2a:0e:7d:92:01:ab:21:fe:83:0b:
                    c5:aa:32:da:2b:27:af:c0:48:6d:18:07:0b:69:7a:
                    64:86:6b:d5:6b:7f:91:30:dc:c5:3b:f1:54:ff:39:
                    e7:48:b2:8a:ea:e5:81:2f:98:c8:6c:b1:f6:2d:60:
                    9f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:31:CD:28:01:CC:2B:22:BC:D4:6E:DC:05:9F:1E:4D:8E:0E:EB:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/9ddbc802-5834-3c9c-9aff-9c73771f288f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:85:e7:da:e3:35:0c:da:4d:99:62:75:cf:16:dc:ec:a1:b4:
         c7:f1:19:c0:f3:66:66:72:6f:5b:db:d6:d8:fc:9b:3a:71:ce:
         6d:56:5e:1c:7d:f6:c6:a0:9c:dd:84:e8:72:53:68:70:a0:b1:
         01:c8:3d:37:d0:70:2e:02:a2:25:c2:61:3a:35:e5:27:8c:02:
         9a:1f:b4:07:82:d2:94:09:4b:fa:c3:df:97:32:72:6e:81:e0:
         01:b4:06:68:ad:3b:d7:ae:ca:17:12:30:d1:1a:36:4e:ec:2b:
         6c:9f:b8:79:05:67:d0:d9:aa:0f:a1:9b:48:71:30:fb:9f:98:
         08:a3:62:28:53:8a:c4:00:e3:d5:83:82:6a:d2:fe:e0:bf:2c:
         66:f2:68:ba:20:45:c0:c8:09:2a:7f:fc:d5:75:77:fb:57:76:
         3a:7e:76:1f:68:be:a4:69:84:25:68:c4:8d:5c:88:42:02:66:
         54:30:37:e7:ee:bc:5a:48:8e:d3:88:48:62:38:0e:36:46:5f:
         ab:0f:a3:b4:17:42:c6:22:c6:69:1d:78:2b:b6:51:69:fa:65:
         1c:9e:bd:d0:37:62:76:fb:fe:87:8f:79:f3:d8:23:e4:09:c5:
         84:81:1f:5b:33:2c:e3:11:3c:3a:24:b2:81:7e:33:da:50:50:
         7b:da:7f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 21:17:42 2024 by rpki-client on console-ams.rpki-client.org