Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/519d7374-012d-3f46-a81f-44fdab54e5b1.roa
File:                     519d7374-012d-3f46-a81f-44fdab54e5b1.roa (raw, json)
Hash identifier:          wy9n27ZtHI47Q9shX6QEN3okyLtnDELdVta8ya08anU=
Subject key identifier:   B1:AB:95:7B:98:0D:47:B5:3F:EA:F3:0B:E1:58:09:FC:02:8C:69:50
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F432858452EE7E86CBD2F2A812CD59C00
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/519d7374-012d-3f46-a81f-44fdab54e5b1.roa
Signing time:             Tue 12 Mar 2024 13:00:28 +0000
ROA not before:           Tue 12 Mar 2024 13:00:28 +0000
ROA not after:            Mon 10 Jun 2024 13:00:28 +0000
asID:                     40676
IP address blocks:        2607:6b80:68::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2e:e7:e8:6c:bd:2f:2a:81:2c:d5:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Mar 12 13:00:28 2024 GMT
            Not After : Jun 10 13:00:28 2024 GMT
        Subject: CN=5b91f6ed-d858-4c38-9833-029f167697c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f4:2f:fc:1a:42:43:c7:ca:80:b0:ea:25:a5:
                    b8:02:88:67:b4:c5:a8:af:70:af:f3:aa:84:f9:fa:
                    8d:45:e0:b1:1e:5b:af:15:45:4a:8e:9e:b2:c8:b4:
                    42:ae:c3:d0:20:8a:a1:85:7f:ee:be:3b:b1:2f:ba:
                    1e:82:3b:a2:91:5a:0c:22:f0:39:36:d8:21:86:be:
                    ee:cc:bf:5d:b5:85:77:c1:fa:66:60:d0:f9:da:b1:
                    5d:db:2c:97:24:da:3d:09:52:f1:d3:ef:24:1f:b0:
                    4b:c1:b1:99:c2:16:48:e4:75:a4:6f:05:7f:46:e8:
                    cc:1b:26:29:93:18:c9:af:1a:09:65:ae:aa:84:2d:
                    70:0d:a3:68:9d:d5:ab:fc:76:1c:2f:90:24:70:29:
                    bf:d6:96:80:e5:88:93:a9:15:69:3f:80:ec:15:ae:
                    c6:3f:5b:db:5f:4e:8d:da:6d:f7:99:92:a3:2a:88:
                    f8:8b:08:f9:de:ee:db:09:6b:b0:18:7c:15:29:50:
                    c8:69:4d:d5:92:b4:17:a1:67:39:1e:eb:e1:10:99:
                    0d:43:2f:11:f6:9f:8e:5c:ee:97:aa:b5:53:e1:ec:
                    a4:2c:f4:6b:59:20:e7:0d:2b:6a:bf:80:95:90:1a:
                    ca:5b:08:c6:28:ff:99:fb:fd:26:5e:bb:95:63:b9:
                    9d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AB:95:7B:98:0D:47:B5:3F:EA:F3:0B:E1:58:09:FC:02:8C:69:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/519d7374-012d-3f46-a81f-44fdab54e5b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:68::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:8e:ad:7c:a3:83:7e:c4:95:2a:4d:2a:a2:06:7a:66:ca:66:
         5f:bb:5f:7d:fa:64:02:eb:49:cb:3b:85:9e:f7:ee:1b:7d:02:
         b8:7f:89:c1:42:b6:14:86:70:f6:b6:a9:57:f5:46:f6:ea:00:
         a2:52:95:a1:c4:4b:0d:a6:c8:62:33:43:13:50:f8:47:5c:ae:
         6b:ac:af:9a:09:12:84:98:2b:f2:00:4f:a9:cf:1a:ff:9b:b9:
         8f:63:d9:32:45:42:e0:51:6e:88:cd:42:e3:94:07:ca:09:e4:
         1a:1b:09:56:73:22:46:56:61:a6:28:a4:c4:3e:71:9b:9b:fa:
         fa:ed:fc:e1:73:20:20:04:41:24:a2:36:df:7a:fa:5f:2b:57:
         1a:d3:35:2d:a7:cb:0b:ea:a4:63:7c:c3:a3:ef:64:14:d1:ac:
         9d:c9:b4:a4:c8:af:16:b0:55:c4:ea:d9:6a:c5:a9:2b:91:59:
         e7:4f:74:7f:03:49:af:59:45:e8:4f:c1:4a:de:81:41:3a:20:
         9b:60:ed:5b:f7:a7:ee:78:78:93:fd:07:1e:bf:42:90:57:70:
         d6:3f:05:c3:48:23:35:1b:af:f5:72:18:0b:46:0d:a7:e9:2f:
         f3:6b:25:64:a0:d7:9a:8a:fe:e2:8d:28:8b:c8:ca:19:f6:6e:
         6b:b6:43:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:01:54 2024 by rpki-client on console-fra.rpki-client.org