Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f/f2690dcb-7274-3a91-b111-27eacc8e75e5.roa
File:                     f2690dcb-7274-3a91-b111-27eacc8e75e5.roa (raw, json)
Hash identifier:          RN7/zxwXRigPsO3zLIrVbKZK27CFDIFzZgZ723PX9Bo=
Subject key identifier:   90:E2:5A:1E:04:09:C5:7B:95:28:01:79:6A:B5:C6:90:C0:20:23:F1
Certificate issuer:       /CN=e9967e8f-a4c2-4d89-82dd-95d9c3feb83f
Certificate serial:       010D0C9F432858452952943E67CA13A6DCAEE500
Authority key identifier: 68:E5:E5:13:2F:23:6D:BC:3B:1C:7C:0A:61:E4:CD:D0:B0:0F:E1:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f/f2690dcb-7274-3a91-b111-27eacc8e75e5.roa
Signing time:             Sun 10 Mar 2024 13:00:31 +0000
ROA not before:           Sun 10 Mar 2024 13:00:31 +0000
ROA not after:            Sat 08 Jun 2024 13:00:31 +0000
asID:                     400735
IP address blocks:        2605:dfc0::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:29:52:94:3e:67:ca:13:a6:dc:ae:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9967e8f-a4c2-4d89-82dd-95d9c3feb83f
        Validity
            Not Before: Mar 10 13:00:31 2024 GMT
            Not After : Jun  8 13:00:31 2024 GMT
        Subject: CN=43625e5c-857f-45f5-884c-79db50f3b6df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0c:f9:53:db:65:e2:ce:90:dd:3f:19:22:96:
                    a0:b2:3c:e9:74:35:7b:6b:ac:97:3c:7a:70:8d:be:
                    3d:42:99:72:06:8d:12:19:36:80:51:31:bb:98:9e:
                    90:7b:51:9b:19:ba:bd:bc:6f:8d:52:e1:70:48:65:
                    c7:14:fb:56:99:c0:fe:2f:6c:47:a3:64:ac:2b:ee:
                    0c:fd:a4:8a:02:42:6d:71:f8:b1:d0:c1:54:e6:3d:
                    d8:a6:10:23:9d:84:c9:93:cf:6d:8c:74:9e:a9:42:
                    cd:ea:77:78:d6:8c:88:41:cd:81:12:9e:1a:bf:46:
                    80:b1:ea:43:ca:37:1e:8c:5d:2f:5d:b4:e3:9b:75:
                    8f:c8:45:9f:61:9b:16:d7:09:1f:74:2c:3d:04:e8:
                    c4:34:04:09:e2:03:f1:cf:46:2f:60:eb:e2:a5:9d:
                    7d:38:47:1f:f2:1f:dd:28:30:53:6c:d0:2f:90:4b:
                    93:a8:61:fa:b8:68:fa:50:d7:a6:f9:70:fb:dc:d1:
                    be:62:2d:55:89:ec:f7:79:08:28:c4:81:2d:14:5c:
                    f4:e8:5e:2d:f7:67:d2:fc:80:b0:fb:ed:07:06:36:
                    65:14:ee:05:25:cd:ec:b7:7d:ba:c8:b9:18:91:6f:
                    ad:b1:e7:86:20:22:5b:29:5c:1a:75:29:0a:be:bb:
                    49:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E2:5A:1E:04:09:C5:7B:95:28:01:79:6A:B5:C6:90:C0:20:23:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f/f2690dcb-7274-3a91-b111-27eacc8e75e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f.crl

            X509v3 Authority Key Identifier:
                keyid:68:E5:E5:13:2F:23:6D:BC:3B:1C:7C:0A:61:E4:CD:D0:B0:0F:E1:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dfc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:80:de:51:cf:f7:6d:2a:12:33:40:bb:f7:1f:a9:ba:94:10:
         70:66:ef:90:be:16:23:bd:cd:57:3b:0e:cf:9b:ae:94:8d:cb:
         16:74:00:0d:c1:c3:e8:fa:47:b2:d9:10:91:1d:f2:57:0f:30:
         66:5b:06:2b:98:c6:56:96:00:5f:1d:93:a4:95:2e:79:c7:0a:
         c8:a4:aa:e2:73:ce:f1:af:a6:27:f7:05:b1:c6:c0:6b:be:18:
         91:85:6c:46:e9:15:cf:48:14:53:33:0a:d3:80:a6:eb:b5:ad:
         e7:b8:ca:0a:82:cf:a8:07:c0:8c:d1:80:0f:19:83:af:e1:3e:
         7a:15:3c:f8:a8:52:7f:e0:2b:0d:54:48:98:30:2d:28:1e:a8:
         24:df:7e:66:ec:60:a7:9a:10:5f:d5:c3:d5:5b:61:4a:8e:e9:
         8a:03:d6:86:bb:71:31:45:34:8a:b6:18:68:b5:8d:22:f3:b6:
         33:1c:40:02:da:c9:73:86:db:76:e6:85:e8:92:e6:6d:9c:4e:
         d5:e7:46:7d:3c:80:83:a3:35:34:9d:06:02:34:f2:72:90:a6:
         25:1e:70:af:70:ed:ee:b2:7e:d5:9c:59:08:9f:ef:37:98:cf:
         76:85:10:07:eb:5a:61:b6:06:f8:76:0f:80:c5:eb:c4:79:4f:
         ad:f5:b1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:15 2024 by rpki-client on console-ams.rpki-client.org