Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/bbb44bae-4365-3fc0-865c-775668938f93.roa
File:                     bbb44bae-4365-3fc0-865c-775668938f93.roa (raw, json)
Hash identifier:          KkMa0P6qkRGKBijOvQo1twW61RIjG4dr7aGfRTM5ygA=
Subject key identifier:   79:55:00:7E:B6:24:5E:AE:D5:2B:DD:3A:E4:56:7B:60:AE:EA:FE:20
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F432858459125969B67F8BC8A4BDA0C80
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/bbb44bae-4365-3fc0-865c-775668938f93.roa
Signing time:             Tue 16 Apr 2024 17:34:01 +0000
ROA not before:           Tue 16 Apr 2024 17:34:01 +0000
ROA not after:            Mon 15 Jul 2024 17:34:01 +0000
asID:                     271
IP address blocks:        2607:f8f0:670::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:91:25:96:9b:67:f8:bc:8a:4b:da:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Apr 16 17:34:01 2024 GMT
            Not After : Jul 15 17:34:01 2024 GMT
        Subject: CN=7343e50f-f648-4c51-85f6-659b2658b0af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:49:34:32:82:56:b4:1c:b8:07:e5:0a:37:e2:
                    e6:f4:97:55:0b:43:f1:8a:81:6c:fb:a2:b6:f6:95:
                    0f:0b:b9:bf:9b:ac:51:d0:67:c8:d7:c8:c3:24:a0:
                    4a:56:a2:bd:9d:7b:28:7e:d0:84:51:d4:c6:52:62:
                    f3:7b:3d:49:49:f3:7b:2c:f1:4b:e6:0d:bc:da:d0:
                    2b:91:54:51:15:fc:2f:3d:4b:3f:5a:64:46:7a:09:
                    03:1f:0a:4f:76:00:2b:ea:96:28:46:67:cc:78:52:
                    67:5f:0b:f3:08:50:59:1f:a3:d7:b0:65:cd:cb:89:
                    b2:80:9b:f8:32:3a:e7:f1:3c:ec:dd:53:49:e6:95:
                    79:28:27:e8:5e:91:7e:ad:4a:b5:45:7c:60:5a:8e:
                    2b:19:43:f9:fa:c1:a6:c3:5b:f0:59:1b:77:82:5f:
                    cb:49:0a:13:30:bc:dd:f0:fd:ed:2c:71:bf:ad:b0:
                    9e:76:c1:c1:0e:d5:76:c1:55:9e:5b:8c:3a:eb:d8:
                    24:6a:b2:1a:99:3f:f5:db:c5:8c:75:d6:cd:f4:38:
                    30:ae:37:82:f9:98:e3:d0:e9:0b:90:63:1c:fa:80:
                    e9:eb:93:64:8c:a0:38:16:62:f6:3d:2c:72:b3:72:
                    76:49:52:d8:1c:af:52:04:39:0e:5d:c7:cf:01:32:
                    87:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:55:00:7E:B6:24:5E:AE:D5:2B:DD:3A:E4:56:7B:60:AE:EA:FE:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/bbb44bae-4365-3fc0-865c-775668938f93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:670::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:98:66:91:92:60:59:52:ea:05:a2:09:8d:c1:03:8c:4e:51:
         fd:33:ab:02:cc:a1:13:02:c3:94:05:70:66:26:5d:68:71:22:
         44:6c:aa:fb:10:aa:21:3c:7f:ca:9e:39:76:b2:e1:44:03:1b:
         ec:be:eb:98:c9:b4:31:1e:04:df:4a:9b:c4:78:e2:e8:bc:08:
         ce:58:c3:35:d6:10:a0:61:4e:8a:8e:81:79:24:8e:73:67:c8:
         14:9a:85:69:a6:ab:12:f8:7a:91:e5:61:65:96:a2:09:a9:63:
         3b:7d:60:30:bd:f5:bd:69:49:a0:b9:ef:db:34:e3:e2:6a:31:
         00:54:b3:9d:26:5f:7b:c5:7c:bc:4b:19:e6:ab:49:53:a1:8f:
         d9:c7:c5:ed:0a:26:5f:ac:96:6b:84:a1:b3:68:4c:30:39:d2:
         9c:38:93:2a:96:59:e4:70:36:c3:de:37:08:c7:b7:76:ad:65:
         6f:49:9a:e5:42:ca:61:2e:83:a5:49:40:cd:d0:8a:f5:b4:f4:
         35:70:25:56:c4:a7:5f:29:ca:ea:90:4c:7b:f8:0b:99:01:4d:
         02:54:34:3e:5b:7f:50:27:24:0b:51:ce:a4:b1:45:b8:55:6d:
         40:68:e0:28:a7:30:d4:c4:3f:da:46:7d:6b:aa:e4:bf:b4:b2:
         dc:84:69:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 21:17:42 2024 by rpki-client on console-ams.rpki-client.org