Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/b640e40a-1d4d-3423-99a0-815a476ab16e.roa
File:                     b640e40a-1d4d-3423-99a0-815a476ab16e.roa (raw, json)
Hash identifier:          XEsn1lOiXzJGZ1oV67QIL76zwCfE0smPlQCNicETIms=
Subject key identifier:   1F:60:B6:E8:6D:5F:30:B3:B4:13:D7:47:4E:32:6E:46:CF:6E:B8:46
Certificate issuer:       /CN=28df346d-3f66-4555-b2ab-67f450efdcb3
Certificate serial:       010D0C9F4328584526A5A556083A37719B63E180
Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/b640e40a-1d4d-3423-99a0-815a476ab16e.roa
Signing time:             Sat 09 Mar 2024 14:00:31 +0000
ROA not before:           Sat 09 Mar 2024 14:00:31 +0000
ROA not after:            Fri 07 Jun 2024 13:00:31 +0000
asID:                     14230
IP address blocks:        2604:9b00::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:26:a5:a5:56:08:3a:37:71:9b:63:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3
        Validity
            Not Before: Mar  9 14:00:31 2024 GMT
            Not After : Jun  7 13:00:31 2024 GMT
        Subject: CN=1bb0c9e5-2c72-4319-8f12-54f06374e977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6c:81:35:2f:b3:a7:3c:aa:80:0e:6a:0e:5b:
                    6b:8a:1a:30:9b:9b:18:3e:e5:70:7e:f8:96:d5:85:
                    7b:d5:cd:e7:4d:b0:be:5f:bb:05:d2:8b:dc:61:fe:
                    84:c4:c7:5b:92:1d:44:a5:4a:aa:65:07:a1:07:a8:
                    f2:4b:1a:65:07:6f:1c:64:0a:66:cf:d5:0b:93:80:
                    71:15:80:9a:0b:c0:01:09:3c:8d:63:0f:76:3c:22:
                    95:aa:82:c9:3e:8d:a6:91:b8:bc:33:f6:a5:ae:23:
                    e3:77:8a:a5:59:3a:0d:3e:89:0a:d3:8b:7e:e7:d6:
                    67:1e:00:16:f6:d1:42:95:80:94:d9:aa:4e:1a:6f:
                    a4:e0:e5:03:52:b3:bd:ee:78:ad:10:e0:70:00:67:
                    cb:b6:f8:7c:d7:e9:53:6f:ed:9c:ea:0c:df:7c:04:
                    fb:04:8d:f9:b7:bf:b7:8b:5b:2a:73:cb:ff:e0:55:
                    f3:65:eb:58:ef:80:89:ed:d4:ba:10:83:1a:80:93:
                    da:d9:dc:20:bc:c6:4e:b4:37:fa:18:b4:b8:96:d6:
                    73:a6:9c:c9:ff:55:e8:2e:57:14:32:f5:ea:01:81:
                    1e:ff:c6:a3:68:48:23:ff:56:89:4e:94:2a:b8:40:
                    c2:c1:57:f1:dc:5c:40:ae:10:5d:a9:e1:97:43:38:
                    04:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:60:B6:E8:6D:5F:30:B3:B4:13:D7:47:4E:32:6E:46:CF:6E:B8:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/b640e40a-1d4d-3423-99a0-815a476ab16e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl

            X509v3 Authority Key Identifier:
                keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9b00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:f7:a3:27:dc:75:9a:75:ec:c3:fc:97:8b:ee:7a:ca:de:45:
         c3:5e:2c:e8:6d:7d:09:aa:1e:ff:8d:5a:39:c2:39:9c:dc:c8:
         cd:fb:e6:3c:2b:82:56:f2:c3:48:31:5d:07:51:4f:d0:58:f1:
         51:fe:08:a1:5d:0b:c6:54:a1:5f:32:ff:10:32:56:0e:63:86:
         e2:81:62:c1:7e:15:e2:5e:ea:a9:a6:2f:96:52:7d:c0:08:e2:
         dd:b8:62:a2:05:08:68:0b:47:97:46:2b:82:92:0e:91:67:f7:
         6d:8c:3a:e3:5c:0d:1f:ab:77:f1:f8:48:0d:33:aa:a6:04:c8:
         83:6d:91:84:e4:ce:09:6a:7a:cc:45:9a:fe:1e:41:e6:97:63:
         ef:fd:3b:2b:a2:71:73:5c:5c:a9:c1:95:61:64:be:a0:e4:22:
         9b:7b:47:0c:fb:ba:5b:1b:f2:d9:bd:5a:3f:32:62:04:28:b0:
         37:1a:24:fb:c9:b2:dd:5c:41:97:ae:10:46:7c:a7:43:4d:c3:
         5f:e6:e2:dd:46:06:7b:41:d5:2c:64:36:89:ee:53:d8:0c:ac:
         f5:ec:29:9e:57:33:ce:b3:56:2b:a6:41:3a:31:bb:5d:89:38:
         a4:a3:93:22:86:81:9d:67:74:ef:b3:81:70:19:67:97:f5:fe:
         7d:49:89:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:06 2024 by rpki-client on console-ams.rpki-client.org