Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/d0ee2888-029d-3033-aaf8-55220aa70a0a.roa
File:                     d0ee2888-029d-3033-aaf8-55220aa70a0a.roa (raw, json)
Hash identifier:          tRD9s5qPINVuzfSDgLNTIUa9gP6RUB/RJJ31+2SAlP8=
Subject key identifier:   BD:76:47:90:82:3A:2E:96:33:E8:57:85:F7:7E:AC:63:C6:7F:05:65
Certificate issuer:       /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial:       010D0C9F43285845506828EDB8381319BE19E4C0
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/d0ee2888-029d-3033-aaf8-55220aa70a0a.roa
Signing time:             Sun 24 Mar 2024 13:00:33 +0000
ROA not before:           Sun 24 Mar 2024 13:00:33 +0000
ROA not after:            Sat 22 Jun 2024 13:00:33 +0000
asID:                     16433
IP address blocks:        2605:f00::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:50:68:28:ed:b8:38:13:19:be:19:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
        Validity
            Not Before: Mar 24 13:00:33 2024 GMT
            Not After : Jun 22 13:00:33 2024 GMT
        Subject: CN=1306c178-ece8-403a-81a8-bfb21c4b5081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d1:35:b1:78:7b:3a:ea:6b:2e:2a:5b:a3:54:
                    fd:ac:75:d8:4f:a5:28:fc:bd:99:5a:1c:be:aa:6d:
                    0c:78:67:3e:b6:ae:d0:7d:b4:9e:e0:ca:27:d6:69:
                    44:a3:f6:7b:ff:84:ea:d0:3b:b2:f4:0b:8b:98:89:
                    08:d3:f3:55:70:58:93:45:0b:80:71:86:11:3b:96:
                    86:a3:16:8f:2d:7f:64:a2:1c:c4:1c:55:b1:11:89:
                    e7:b5:50:ba:85:cc:15:b4:5a:20:91:16:88:7f:c3:
                    28:d8:73:e6:94:84:08:12:9e:e0:59:8c:03:cd:a0:
                    c7:d3:78:3e:51:0f:b2:96:cd:58:7a:45:51:ea:eb:
                    60:ad:0b:86:da:4f:2c:a8:ac:86:3a:4d:07:79:ed:
                    17:2e:9e:78:9d:9b:c9:a6:13:3e:fe:fc:57:a4:5e:
                    b1:79:90:20:4d:66:04:ee:9c:48:5b:4f:0e:5f:05:
                    45:91:cb:5b:cd:21:93:f4:9f:35:c9:79:53:9b:b7:
                    25:02:57:70:38:4d:92:34:49:6e:73:0b:be:e7:cc:
                    42:7a:47:dd:25:b8:3f:84:22:30:11:0e:d5:e8:da:
                    aa:8a:c4:80:58:93:90:26:72:98:3b:18:13:d3:d1:
                    ba:5a:82:7b:d9:da:70:12:50:3f:e7:9d:ef:bb:fc:
                    82:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:76:47:90:82:3A:2E:96:33:E8:57:85:F7:7E:AC:63:C6:7F:05:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/d0ee2888-029d-3033-aaf8-55220aa70a0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl

            X509v3 Authority Key Identifier:
                keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:83:17:2d:20:e3:3b:6a:2f:4c:c6:2c:dc:0f:35:e5:69:5a:
         07:79:06:aa:1f:7c:81:62:a8:e2:41:7f:91:64:15:83:c7:e6:
         3a:4e:62:6f:29:19:08:21:34:22:29:9a:70:7c:b4:4f:90:f1:
         b8:76:9b:58:7f:35:40:5e:eb:38:88:b8:21:c9:4b:0a:a5:fb:
         0e:4d:02:a7:62:a7:3f:8f:a7:1a:2f:d1:5d:72:65:a7:f2:9b:
         8c:47:e6:68:4d:eb:1c:dc:fc:ba:71:48:39:ff:a3:be:f5:0b:
         f1:5f:59:ce:04:36:0e:16:d2:97:13:8a:de:24:8d:60:bc:02:
         b0:4c:31:96:bc:df:6b:d1:8c:cf:39:c3:02:b1:04:b1:84:c5:
         f4:8f:54:6d:de:c6:35:c4:a8:55:02:36:4e:00:35:25:a7:e6:
         8f:fd:df:9b:57:c5:22:fe:37:04:ab:56:0c:2b:cc:19:e8:2c:
         55:8e:ba:46:1b:c5:1d:68:c9:2b:6b:cc:73:30:18:4b:80:4d:
         fb:66:6e:72:8e:c8:a4:7c:82:1f:18:d7:4d:b8:d0:98:dc:45:
         29:d0:0c:25:6a:b8:f5:b5:6d:fd:0c:40:3a:c7:22:96:46:4a:
         84:0d:ee:2e:42:4c:bd:e3:ec:e7:54:fb:63:75:b8:d8:69:e1:
         be:23:e1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:09:00 2024 by rpki-client on console-fra.rpki-client.org