Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39/c3c1a8ce-55f1-3f4a-8ead-e068a83a5118.roa
File:                     c3c1a8ce-55f1-3f4a-8ead-e068a83a5118.roa (raw, json)
Hash identifier:          xkpenv1KUkivt2apzXNB6P/r5E31Yey7z9UsItensIM=
Subject key identifier:   9C:47:7E:C2:EF:F4:92:BE:DE:FC:B9:CA:46:94:67:56:8C:8E:A2:EE
Certificate issuer:       /CN=61d234b0-9ab0-449d-88ec-f11a00956a39
Certificate serial:       010D0C9F4328584647799DF3079B86F0512F763C
Authority key identifier: D4:6E:14:D6:CA:9F:6B:26:96:64:FE:38:21:09:CD:3C:D0:8D:E4:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39/c3c1a8ce-55f1-3f4a-8ead-e068a83a5118.roa
Signing time:             Fri 21 Jun 2024 01:00:26 +0000
ROA not before:           Fri 21 Jun 2024 01:00:26 +0000
ROA not after:            Thu 19 Sep 2024 01:00:26 +0000
asID:                     13823
IP address blocks:        2605:d600::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39/61d234b0-9ab0-449d-88ec-f11a00956a39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39/61d234b0-9ab0-449d-88ec-f11a00956a39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:47:79:9d:f3:07:9b:86:f0:51:2f:76:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61d234b0-9ab0-449d-88ec-f11a00956a39
        Validity
            Not Before: Jun 21 01:00:26 2024 GMT
            Not After : Sep 19 01:00:26 2024 GMT
        Subject: CN=e310fcc1-c976-46b8-98ae-0b7619060d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a0:c6:7b:2b:f1:1a:9f:ff:38:4d:47:ad:f3:
                    9d:5a:4a:e1:59:fd:47:23:a9:26:94:a1:db:5b:0b:
                    61:21:80:f8:9c:50:07:1b:43:fc:57:fd:8f:e7:17:
                    38:eb:cb:1c:a5:76:de:37:4b:39:85:e7:4e:c1:33:
                    2b:8f:be:da:35:75:69:75:5d:20:09:2b:7c:43:a5:
                    20:d3:5e:f5:76:83:12:4e:d9:d5:09:c3:b9:ec:ad:
                    45:0a:d3:76:3f:9e:e9:5e:11:42:0a:ad:27:1a:9e:
                    81:7b:87:56:f1:0f:ef:86:46:6b:bf:b5:96:4b:ea:
                    fb:6d:a3:93:79:e4:2d:9f:9c:32:6d:4f:1c:8a:83:
                    6e:7b:dc:8c:70:d9:f2:95:c9:fb:78:b5:9d:58:43:
                    ed:d0:5a:d4:7f:11:8f:9f:67:b5:fe:4f:b4:56:d1:
                    83:55:51:2e:77:1e:5e:eb:bf:02:21:a3:73:d5:6e:
                    f5:b5:ff:13:ad:3a:8f:2e:e9:6c:e7:0c:e9:82:7c:
                    b2:ab:c8:7c:35:f0:a7:d4:7f:43:ab:44:82:02:6e:
                    3f:5e:23:07:cb:a9:40:fd:f5:0d:66:ff:66:7b:72:
                    7d:af:4b:97:a2:cb:85:76:d5:ca:b3:fa:84:b1:38:
                    c2:0f:c6:9f:b8:c2:56:13:eb:96:15:48:49:3e:72:
                    67:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:47:7E:C2:EF:F4:92:BE:DE:FC:B9:CA:46:94:67:56:8C:8E:A2:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39/c3c1a8ce-55f1-3f4a-8ead-e068a83a5118.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39/61d234b0-9ab0-449d-88ec-f11a00956a39.crl

            X509v3 Authority Key Identifier:
                keyid:D4:6E:14:D6:CA:9F:6B:26:96:64:FE:38:21:09:CD:3C:D0:8D:E4:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:d600::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:50:2d:b1:97:ec:f1:9c:93:9a:ce:88:0b:ac:46:a4:c2:f3:
         a7:29:45:47:94:31:74:c5:ed:a7:18:06:9e:f4:8f:cd:da:77:
         21:17:65:03:8b:4e:dd:24:cb:d2:e9:ad:a4:ce:0a:4f:f6:7b:
         cc:97:d3:e0:2e:da:48:ea:85:7c:01:37:ce:93:02:0e:63:2c:
         9b:95:6e:d0:2e:6d:a8:e4:a8:69:9d:37:72:e2:5f:7b:b0:5e:
         0c:1d:82:61:22:06:0c:ae:32:e6:de:18:28:e9:69:73:eb:6e:
         53:39:99:7a:e6:07:52:7b:d9:97:0e:50:50:81:0c:40:0e:e2:
         e9:e3:29:1e:3b:e9:66:fe:ac:b1:71:a1:cd:ab:76:8c:ea:0a:
         b1:79:50:5e:c7:04:3a:c0:00:8c:7c:5e:80:91:4e:f3:5c:96:
         1c:b5:1b:61:6b:f1:af:9f:2a:4d:cd:a9:f1:28:43:b8:da:68:
         8e:f5:10:04:0a:a8:58:cb:06:40:06:45:13:d4:5f:f5:fd:4c:
         d4:6c:4c:c4:db:e7:11:57:27:a9:9a:9d:4e:6a:6f:b5:18:bb:
         7f:58:b4:69:c1:37:b4:68:c9:43:92:a3:1d:55:55:06:ac:85:
         1d:3d:d5:64:3b:f9:06:e2:05:bf:1c:f7:a5:6b:32:c9:2b:13:
         aa:7e:c6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 16:22:15 2024 by rpki-client on console-fra.rpki-client.org