Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/a588bbaf-450f-36f1-ae20-8742ee82982c.roa
File:                     a588bbaf-450f-36f1-ae20-8742ee82982c.roa (raw, json)
Hash identifier:          ttdU+QdMBoEr9SIu3rbB1xSG9UgS1fUohnOeXGaqoSo=
Subject key identifier:   1F:DE:54:12:23:E9:A0:A8:0E:E7:15:FF:33:5F:7A:DA:88:CF:64:2F
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F432858457D89F200B320107D2E845BC0
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/a588bbaf-450f-36f1-ae20-8742ee82982c.roa
Signing time:             Tue 09 Apr 2024 17:00:04 +0000
ROA not before:           Tue 09 Apr 2024 17:00:04 +0000
ROA not after:            Mon 08 Jul 2024 17:00:04 +0000
asID:                     271
IP address blocks:        2607:f8f0:600::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:89:f2:00:b3:20:10:7d:2e:84:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Apr  9 17:00:04 2024 GMT
            Not After : Jul  8 17:00:04 2024 GMT
        Subject: CN=28db3344-f223-4e8a-9006-a61b0805d371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ac:f1:c0:1a:4c:db:c0:6f:35:20:44:03:65:
                    01:2d:24:ed:50:4e:f2:25:f7:48:3c:27:8b:2e:7f:
                    35:08:1b:66:fa:25:f6:7c:93:d5:5d:e7:80:dd:9c:
                    8e:77:82:f0:87:8b:d7:a2:d0:57:20:e5:42:12:24:
                    96:5b:6e:96:8e:ca:a5:c2:80:f1:02:ee:b5:80:7f:
                    0e:86:18:2a:bb:8e:0e:e1:22:5d:6c:8a:07:e8:7d:
                    79:8c:9e:7a:04:f1:2a:dd:dd:e5:22:78:a9:aa:40:
                    66:30:01:b3:d1:27:4d:9b:56:42:d8:94:52:71:44:
                    65:06:89:a5:ae:a8:f4:da:39:c6:98:cf:a8:de:b3:
                    0b:b6:3f:b0:f9:a7:96:06:e9:af:fe:f5:cf:8d:1d:
                    64:e3:cc:b9:86:cf:bd:72:c5:65:0e:dd:30:4e:c0:
                    6d:7f:42:58:8c:e9:01:c4:30:0d:19:53:8d:19:64:
                    e3:c9:91:df:6b:0b:34:6a:bf:7b:f1:9c:7b:37:8a:
                    46:30:36:92:67:15:18:b1:45:80:46:de:27:45:50:
                    ba:a8:3f:85:9b:f3:21:d3:84:61:75:cb:fd:00:41:
                    52:88:25:80:e4:e9:0e:fa:9f:40:e7:7d:aa:22:14:
                    3f:51:4b:9c:f6:89:c6:38:71:fb:45:5b:f5:3d:ff:
                    dc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:DE:54:12:23:E9:A0:A8:0E:E7:15:FF:33:5F:7A:DA:88:CF:64:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/a588bbaf-450f-36f1-ae20-8742ee82982c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:600::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:6a:9e:3a:c4:7a:3a:ad:ba:dd:e3:f0:53:47:6d:8a:01:4a:
         c1:58:01:e3:17:8d:99:9d:96:c6:31:42:74:d9:ab:89:48:bf:
         57:59:02:a5:31:e6:74:4f:91:76:b8:28:d6:49:69:26:8e:e2:
         46:23:0f:cc:15:8e:70:cc:8a:a3:db:ac:d3:c4:a3:89:25:ea:
         51:6a:80:f3:44:41:91:f2:24:9a:3d:5c:38:16:00:03:56:49:
         e9:d6:6f:d5:a6:86:97:c9:62:50:07:4a:7b:86:57:c2:cc:fa:
         f0:07:67:5d:3c:ae:73:a0:83:5d:48:12:9d:c6:3b:b4:33:c5:
         3b:d2:87:d0:26:21:c5:b3:e5:65:2c:94:e3:a5:a5:ed:af:dc:
         bc:6e:b2:ca:31:df:a8:bb:67:b6:7a:05:08:38:5b:85:34:51:
         ba:52:e6:f6:e2:9a:ce:95:be:46:99:b4:63:1a:32:fa:ff:4b:
         c2:65:17:a0:71:18:a8:e1:66:6d:4a:ef:24:fd:46:0b:f0:80:
         29:7e:38:78:f6:f1:3b:8f:fc:b2:ec:9b:e2:36:ac:86:8c:77:
         9d:88:ab:91:4f:ea:4d:fb:ec:b6:28:26:82:1b:f1:f3:b3:f8:
         b7:6c:c9:fc:b0:6f:77:1b:55:cc:bb:af:5b:2d:54:6a:e8:38:
         cc:2b:8c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 21:17:42 2024 by rpki-client on console-ams.rpki-client.org