Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d/c657d9ae-6d6b-3cf4-b1d3-7d13c4771f7d.roa
File:                     c657d9ae-6d6b-3cf4-b1d3-7d13c4771f7d.roa (raw, json)
Hash identifier:          ju3IzEscTRvbR+y8E+w+NFYZJsalUXlyOwW1OVo1xCk=
Subject key identifier:   19:81:6F:73:9C:F1:2C:9F:8F:3E:D2:D6:35:E7:49:26:63:2F:66:7D
Certificate issuer:       /CN=64cf176b-c737-492c-95a5-54695fc5bc2d
Certificate serial:       010D0C9F43285845AC88CFB517682E312C218400
Authority key identifier: 33:62:F0:BF:7D:FD:C9:04:AD:3A:12:76:E3:B0:8B:4B:15:79:4C:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d/c657d9ae-6d6b-3cf4-b1d3-7d13c4771f7d.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     32181
IP address blocks:        2604:2700::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d/64cf176b-c737-492c-95a5-54695fc5bc2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d/64cf176b-c737-492c-95a5-54695fc5bc2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:88:cf:b5:17:68:2e:31:2c:21:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64cf176b-c737-492c-95a5-54695fc5bc2d
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=f10b20b2-ccf8-449b-a8ee-53c9f5944016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a0:69:42:89:47:40:22:ad:4d:7a:f4:6e:bf:
                    ce:b3:fb:61:02:a7:16:5c:da:3c:a2:0a:6b:c6:c1:
                    5d:3e:b9:45:dd:ef:7d:35:97:9e:49:a6:18:00:5c:
                    d0:1a:19:26:ae:6e:f0:42:80:b4:38:94:09:81:6e:
                    5c:3b:7c:fd:04:84:21:91:71:b6:fe:64:5b:0f:9b:
                    b5:6e:ef:5b:7b:6b:74:82:e2:89:03:cf:29:09:ef:
                    cb:ae:ed:c0:0e:f0:6d:0c:97:1b:3e:98:2b:e4:c2:
                    7e:26:97:cd:9c:26:ad:20:e7:d6:db:34:3b:84:0c:
                    77:59:af:93:4f:4c:da:7e:39:ac:3c:49:bf:32:3a:
                    87:0b:54:7d:8d:72:10:06:c6:75:49:a0:67:7e:6b:
                    99:33:d9:8e:6b:4f:e9:21:a2:2e:14:b4:80:79:1c:
                    3b:da:5c:d3:8c:f5:f1:87:a8:60:75:d7:94:0c:04:
                    11:46:57:5e:65:80:9f:e6:6b:f1:0b:0e:27:d5:19:
                    13:14:8b:4e:76:6e:25:68:8e:0b:40:1c:8f:b6:31:
                    d9:12:44:11:77:2b:f0:5b:bf:fc:0e:2f:74:00:d9:
                    0b:40:08:48:e7:63:7b:23:ac:b5:f6:49:ed:50:57:
                    a2:8c:9f:b3:50:e1:37:2a:1a:1f:d4:a9:f9:03:99:
                    ac:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:81:6F:73:9C:F1:2C:9F:8F:3E:D2:D6:35:E7:49:26:63:2F:66:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d/c657d9ae-6d6b-3cf4-b1d3-7d13c4771f7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d/64cf176b-c737-492c-95a5-54695fc5bc2d.crl

            X509v3 Authority Key Identifier:
                keyid:33:62:F0:BF:7D:FD:C9:04:AD:3A:12:76:E3:B0:8B:4B:15:79:4C:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2700::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:34:4a:62:eb:10:25:dc:a2:9c:df:ee:20:c1:ae:9a:e7:e9:
         5a:d2:22:f3:97:1b:0a:b6:55:83:63:cd:bf:c7:ef:8d:9b:67:
         8b:d3:88:23:26:11:18:a9:54:a6:62:ef:e0:07:d7:7c:a0:69:
         69:07:29:df:59:68:75:b1:9f:82:b2:0d:88:c6:21:35:79:3e:
         13:ca:4d:ca:bc:99:16:b6:ad:ed:4b:63:63:54:d0:b7:2e:42:
         03:d5:e1:c2:26:c3:2c:42:53:1b:13:70:c6:a0:0e:3f:af:b9:
         63:3e:e6:eb:0e:95:31:a4:5d:55:83:89:29:47:87:3c:fe:f0:
         62:f3:48:ad:1e:e8:1d:6c:fe:38:df:93:a4:70:d1:29:92:42:
         41:97:46:ed:99:9d:f8:3c:d2:d7:f8:b0:ca:58:22:48:16:0e:
         b4:fd:50:8d:81:2d:68:76:ae:ba:52:f3:9f:c3:8b:41:75:34:
         52:5d:ec:ab:db:c9:75:63:5f:c4:8e:9f:28:ce:00:c3:a0:b9:
         1b:3d:a0:f5:40:b1:0d:e3:cf:ed:37:42:65:6b:98:8d:09:35:
         8b:bd:ad:e4:43:18:f5:40:70:33:2d:a6:f9:ec:c8:f0:aa:ff:
         5d:66:b2:77:cc:4c:7e:d7:af:00:b8:2b:56:17:6f:07:31:6b:
         01:e4:34:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:09:02 2024 by rpki-client on console-fra.rpki-client.org