Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa
File:                     935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa (raw, json)
Hash identifier:          zvLRgBwOSz29Cvc5gPwNwoa5bbf86VbnvXLOz2xamCE=
Subject key identifier:   F7:D8:C5:87:3D:50:6C:B9:2B:3E:64:A3:8D:6E:ED:8B:E1:6A:8E:76
Certificate issuer:       /CN=256d2a2e-9ac7-4d29-bd15-75874d49df66
Certificate serial:       010D0C9F432858452EE7EAC813DF68A754B9BD60
Authority key identifier: E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa
Signing time:             Tue 12 Mar 2024 13:00:28 +0000
ROA not before:           Tue 12 Mar 2024 13:00:28 +0000
ROA not after:            Mon 10 Jun 2024 13:00:28 +0000
asID:                     33000
IP address blocks:        2605:fdc0::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2e:e7:ea:c8:13:df:68:a7:54:b9:bd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256d2a2e-9ac7-4d29-bd15-75874d49df66
        Validity
            Not Before: Mar 12 13:00:28 2024 GMT
            Not After : Jun 10 13:00:28 2024 GMT
        Subject: CN=05443cce-a9c8-4e0f-ab27-1059c974a212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ae:27:b5:c6:40:f8:5e:8d:ad:19:dd:37:03:
                    df:d6:7b:90:99:e5:c4:35:f7:72:c1:d5:da:ab:1c:
                    c7:81:2e:7e:29:84:51:f0:23:e3:3c:17:f2:bf:bb:
                    34:39:18:10:66:94:b0:6b:47:1f:f1:86:2c:5f:56:
                    c9:b0:12:39:b9:2d:dd:f0:e5:65:b3:f4:1c:8d:8b:
                    ca:45:77:13:76:d9:8f:26:e7:d5:9f:56:92:c5:ec:
                    f9:74:f6:47:28:66:9d:d2:15:b0:29:a8:42:7b:45:
                    b1:74:89:78:c5:34:b6:59:01:b5:fa:9b:4b:e2:5c:
                    16:09:e8:4f:6b:67:da:07:65:2f:16:2a:82:f2:d5:
                    78:c2:ea:a1:9f:00:a5:43:5f:0b:0a:cc:9b:68:3f:
                    2c:a4:73:26:15:39:e6:26:c4:40:a5:5b:c4:3b:01:
                    00:fd:29:98:a0:bc:43:43:fc:62:31:59:dd:33:e8:
                    36:18:44:85:0e:b1:3f:b1:74:5b:51:db:3d:a1:54:
                    1e:66:3b:1a:5c:0a:3c:70:1d:4f:96:5e:a1:0a:4e:
                    5b:24:98:19:b7:84:16:d0:ea:40:86:d9:ae:f7:20:
                    56:cc:47:29:0f:2f:67:13:ce:91:c9:8c:9a:19:5d:
                    02:48:87:06:24:78:1a:2d:15:bb:78:bd:19:18:fd:
                    8b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D8:C5:87:3D:50:6C:B9:2B:3E:64:A3:8D:6E:ED:8B:E1:6A:8E:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl

            X509v3 Authority Key Identifier:
                keyid:E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:fdc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:80:30:e4:e2:e1:3b:22:fa:ec:63:69:e7:75:6a:00:bb:49:
         e4:6e:d1:59:09:64:cb:e0:b7:4b:fd:43:e6:1f:b6:c8:6c:bc:
         91:c3:7b:24:c8:64:16:66:d2:d7:d6:1e:c5:46:77:a1:ce:29:
         cd:ee:25:0f:ab:ac:4a:fc:5e:3a:ed:3f:2f:a0:8b:15:d5:7f:
         ba:44:06:d2:b9:21:04:06:fe:81:a1:06:87:e2:d7:3c:2e:f2:
         f2:0c:3f:78:32:e2:b7:f3:93:7b:68:d7:b8:b6:b3:2e:55:24:
         8c:ee:d0:f0:68:24:53:99:0c:42:27:53:81:de:9b:05:06:64:
         17:58:b3:10:44:ac:99:c9:f1:5e:b3:aa:6d:01:ff:68:56:75:
         ba:a9:49:10:00:91:af:97:7e:44:e2:e9:d1:04:9b:41:14:30:
         db:8f:fe:55:4f:38:e5:73:28:70:8c:6c:f0:ce:1e:02:5a:d5:
         48:c9:11:e9:b0:27:5a:d1:a0:59:2e:46:fa:8c:88:f4:3f:63:
         44:fa:7f:08:f8:4c:fc:c3:b9:e0:ad:a8:94:b3:56:ca:46:92:
         39:28:14:56:51:74:8d:8e:73:81:cd:a0:29:8f:a1:2f:e8:cd:
         35:5d:87:58:de:44:c8:96:70:42:7b:c6:7d:3c:9f:cb:18:50:
         32:6f:44:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:09:00 2024 by rpki-client on console-fra.rpki-client.org