Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d355633e-4ce4-383d-a8cd-f57ef09d250f.roa
File:                     d355633e-4ce4-383d-a8cd-f57ef09d250f.roa (raw, json)
Hash identifier:          3BOzkHZ1hj1iXPkhywqQZ5OeMQIOGgN8IhV3iIyfq5E=
Subject key identifier:   FB:B2:2C:5D:5E:49:D8:31:37:FB:B9:F3:E1:B1:5D:50:B0:1A:E6:26
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285845462F80B5FDCC58CA43E50900
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d355633e-4ce4-383d-a8cd-f57ef09d250f.roa
Signing time:             Wed 20 Mar 2024 21:08:22 +0000
ROA not before:           Wed 20 Mar 2024 21:08:22 +0000
ROA not after:            Tue 18 Jun 2024 21:08:22 +0000
asID:                     15169
IP address blocks:        2607:f8b0:4004::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2f:80:b5:fd:cc:58:ca:43:e5:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 20 21:08:22 2024 GMT
            Not After : Jun 18 21:08:22 2024 GMT
        Subject: CN=f4e5e9a9-9356-4266-89aa-254342157c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d1:f0:2e:b0:95:5f:bd:5d:d3:ee:b0:85:93:
                    cc:be:bb:94:81:21:97:1f:61:70:10:98:c6:14:34:
                    88:4d:60:40:03:ff:e8:b7:a9:1f:f8:54:31:f6:39:
                    26:0e:55:6e:93:42:78:de:70:60:61:46:56:e6:a3:
                    53:6f:d6:93:68:d6:19:7e:52:0d:5a:70:ad:cf:73:
                    ec:fc:71:19:e5:ad:f1:85:0b:cc:60:8f:0d:e8:b6:
                    41:f2:cf:18:f5:c0:d8:81:c1:b3:14:48:98:cc:4a:
                    d0:36:b1:bb:00:9c:68:60:3a:98:f3:14:21:a1:06:
                    5b:b1:9c:25:cf:9a:c0:52:9b:ca:ce:6e:b2:63:45:
                    ef:00:33:b7:e2:97:ba:87:eb:95:6d:80:25:85:ef:
                    66:bb:f3:6a:55:82:b6:3b:d9:a0:e7:c6:23:24:87:
                    ad:83:08:60:d2:78:3d:98:74:a1:99:c3:5f:8e:95:
                    8f:5b:a7:00:e7:4b:15:21:2d:64:66:40:02:2a:84:
                    20:b3:3e:84:dd:bc:af:bf:a6:6b:73:59:86:4a:45:
                    0e:8b:01:a4:d9:53:3e:3b:45:fe:36:7b:06:1f:92:
                    8a:16:19:46:72:a3:2f:80:9e:e1:f7:de:3f:85:45:
                    8f:20:8a:45:64:9e:11:87:7b:03:39:d5:3e:19:c2:
                    73:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B2:2C:5D:5E:49:D8:31:37:FB:B9:F3:E1:B1:5D:50:B0:1A:E6:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d355633e-4ce4-383d-a8cd-f57ef09d250f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8b0:4004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:05:69:74:81:25:13:d0:dd:f6:c0:a6:a5:0b:e1:f3:f4:f1:
         0a:fa:af:df:a4:81:09:82:fa:19:db:8d:b0:21:a7:92:e1:e3:
         83:53:aa:66:30:84:82:28:0f:ea:38:5a:4a:95:ac:42:61:8a:
         42:16:a2:8b:9f:d0:47:90:2d:fb:e7:c4:49:fd:f7:99:5d:c5:
         8c:11:0b:f8:c9:43:e9:26:d9:85:e9:50:7e:e3:d7:a2:99:a8:
         67:3f:c0:d6:a1:81:9e:31:0d:b4:72:fc:b2:12:67:73:30:f5:
         2b:95:cb:c2:1f:f6:71:f4:b4:b2:76:ef:7c:e6:ea:a7:c1:b3:
         bc:6e:79:b0:0b:79:e2:9b:01:8b:5c:2b:80:d3:8b:c8:00:c0:
         5a:a1:91:ad:18:25:6f:ea:2e:b5:85:1d:8b:67:0e:93:c0:86:
         61:c7:c7:8b:b5:97:a0:9c:77:60:e9:ea:9a:1c:66:38:9d:c2:
         73:e6:5b:18:47:28:f0:fd:fe:63:92:05:0b:96:aa:cc:0a:55:
         a7:56:3e:4b:24:1b:e2:8f:28:c5:3a:48:8c:2d:4c:8e:ac:01:
         7d:d7:9a:41:d2:56:d1:17:21:c3:a9:90:0a:72:55:86:82:00:
         87:8b:f3:9f:00:6d:70:d7:bd:d1:2b:de:52:19:7e:82:5b:e7:
         cd:4b:64:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:58:21 2024 by rpki-client on console-fra.rpki-client.org