Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/3ad17dd4-fbf0-3240-ab82-33c16fbc1bcc.roa
File:                     3ad17dd4-fbf0-3240-ab82-33c16fbc1bcc.roa (raw, json)
Hash identifier:          1cwB2ZYhM/PUNRP0jrPzdv8E6/lYyrjr5o8ySroH45Q=
Subject key identifier:   6A:E1:04:04:F2:F6:56:6C:89:6C:7F:C5:8F:EE:A9:E4:07:95:4D:00
Certificate issuer:       /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
Certificate serial:       010D0C9F43285845549822AFAFA152FA942911C0
Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/3ad17dd4-fbf0-3240-ab82-33c16fbc1bcc.roa
Signing time:             Tue 26 Mar 2024 01:00:25 +0000
ROA not before:           Tue 26 Mar 2024 01:00:25 +0000
ROA not after:            Mon 24 Jun 2024 01:00:25 +0000
asID:                     26383
IP address blocks:        2605:e440:11::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:54:98:22:af:af:a1:52:fa:94:29:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
        Validity
            Not Before: Mar 26 01:00:25 2024 GMT
            Not After : Jun 24 01:00:25 2024 GMT
        Subject: CN=d357c6e8-5269-4301-8ffa-f7b2e47d5bda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:dc:54:3d:8c:6d:a1:09:cb:af:05:f3:d2:6b:
                    a9:ad:78:a7:42:06:85:cb:cd:37:64:c5:40:54:5f:
                    55:07:ee:78:04:45:0e:85:0b:51:36:95:3f:53:c0:
                    ff:6c:fe:d1:69:71:c7:2f:5c:8b:8f:15:50:3d:4c:
                    40:36:26:4f:57:18:58:db:04:0d:53:b2:73:0b:53:
                    ad:0b:d9:36:fe:53:7b:0f:62:c7:06:cc:a6:f8:e2:
                    1a:6d:41:e0:16:71:db:51:17:0c:b0:47:73:80:d2:
                    27:f2:46:ef:46:be:f3:f9:89:4d:a4:2d:48:49:c1:
                    9a:1d:e6:0e:08:61:54:4a:ac:5d:97:61:38:8a:5c:
                    81:fe:15:e2:07:43:26:4e:cd:9e:3d:a1:ad:67:7d:
                    08:20:09:6e:95:0b:ae:9c:09:3c:68:bf:4f:ef:e4:
                    c1:62:6b:fa:9f:3f:2b:ba:be:36:ef:25:2f:87:4e:
                    b9:b4:8a:d0:b7:f9:60:00:89:44:04:28:5f:c9:da:
                    33:42:ce:c6:53:28:32:43:8e:d0:fa:28:43:b6:19:
                    d9:16:75:74:de:2f:ba:67:ca:cd:55:78:01:2e:82:
                    5f:08:4e:34:85:34:29:75:18:46:f8:7a:dd:bd:a3:
                    5b:2b:1e:5a:31:e3:04:8d:c3:55:8c:da:28:92:00:
                    a2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E1:04:04:F2:F6:56:6C:89:6C:7F:C5:8F:EE:A9:E4:07:95:4D:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/3ad17dd4-fbf0-3240-ab82-33c16fbc1bcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl

            X509v3 Authority Key Identifier:
                keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e440:11::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:f4:8f:f6:c8:9e:2b:8f:e2:15:6c:09:4f:5f:d0:bb:fd:9e:
         a0:03:59:6e:86:d5:83:ae:1c:cb:99:e4:68:53:a3:88:3f:ca:
         d9:b8:2f:4d:16:bf:8a:aa:4c:d6:b2:29:49:9c:ef:ee:3d:56:
         2a:95:cf:ed:ad:d4:5f:4f:87:75:a4:f3:e4:7e:db:cf:18:74:
         31:cd:1c:14:1e:b9:38:bb:ce:ed:4e:71:dd:c9:2a:cc:8c:03:
         36:35:75:6c:5c:41:a3:b1:8e:75:65:0e:4b:29:79:e3:4b:fb:
         bd:d8:c6:50:3f:71:97:5d:1b:cf:6a:fd:f1:8e:c8:1a:b2:47:
         53:23:5b:80:bc:a6:6c:78:09:9d:a1:1f:6d:75:eb:97:55:50:
         0f:98:eb:69:0d:a5:59:2a:47:88:48:00:f2:a3:07:17:3c:7a:
         60:8f:ef:0d:40:52:f2:34:55:2a:34:87:76:0f:3a:af:bc:c0:
         46:96:be:fa:a7:d0:12:a2:83:50:9d:cb:27:22:80:28:c7:d6:
         21:22:3c:88:5b:22:02:ff:03:6f:32:24:6e:f9:83:5b:f7:3f:
         74:7c:80:b1:c4:59:c5:44:27:ff:ef:ad:79:67:a7:6d:b5:ad:
         ef:05:86:1e:75:5c:53:6b:ca:3e:f5:73:d7:4d:77:2a:1d:2f:
         e1:ea:8d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:50:32 2024 by rpki-client on console-fra.rpki-client.org