Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/ae87ef36-6fbc-35ed-9adc-6585fddb1361.roa
File:                     ae87ef36-6fbc-35ed-9adc-6585fddb1361.roa (raw, json)
Hash identifier:          SlECE7E0N9olKB3wq5+KHuNI603gba0XHW23QS7v2vY=
Subject key identifier:   7E:34:74:41:7E:FA:BD:01:12:9B:45:BC:88:34:50:D6:14:23:87:73
Certificate issuer:       /CN=7746dca1-2236-41ce-ab1a-952e06f4769c
Certificate serial:       010D0C9F43285845777DE3E64397028E2BD43E80
Authority key identifier: 0A:E6:84:83:00:60:D5:76:67:3F:01:3B:83:A3:7B:45:F1:C2:1B:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/ae87ef36-6fbc-35ed-9adc-6585fddb1361.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     0
IP address blocks:        2001:504:90::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/7746dca1-2236-41ce-ab1a-952e06f4769c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/7746dca1-2236-41ce-ab1a-952e06f4769c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:e3:e6:43:97:02:8e:2b:d4:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7746dca1-2236-41ce-ab1a-952e06f4769c
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=31a7c51a-8d46-4c64-8e40-1b9bafef19d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0d:28:9c:da:77:88:0a:9a:f2:54:11:63:87:
                    27:40:ab:2d:34:e8:4c:ad:4a:c6:79:9d:70:73:81:
                    d4:f4:fe:c3:c7:52:85:33:54:ff:36:16:84:3e:97:
                    25:55:e2:6a:17:aa:20:be:90:a8:db:23:11:9c:75:
                    3a:25:b9:3e:fd:c0:f9:06:8d:5e:6a:a4:01:b4:34:
                    a7:74:86:aa:6e:23:6f:96:f6:fb:3d:f1:83:a0:68:
                    56:68:00:de:f5:d2:fe:5c:db:06:3b:00:9f:63:d0:
                    24:85:54:5f:4c:1c:7b:72:71:c9:5a:60:92:f8:c5:
                    52:f8:36:ef:8a:c9:82:ad:b2:12:bd:c8:bb:d4:8e:
                    46:38:5d:38:db:00:f5:70:8a:a0:b7:49:bf:84:6e:
                    41:b0:33:1b:75:1e:26:b4:fa:ee:0b:82:90:96:45:
                    cf:64:d6:b3:af:1e:3a:0b:7e:2e:c4:60:91:03:3b:
                    8b:9b:b0:2f:9e:12:54:ef:e6:7a:e2:ef:6c:b6:52:
                    3f:2e:cd:62:ac:82:6e:b3:05:f8:d6:94:58:b8:a4:
                    5c:df:c7:93:0b:a2:e7:35:51:e7:fb:d1:b4:23:43:
                    5d:1f:ad:17:af:ba:a6:50:db:2e:71:e5:e7:2a:ba:
                    c0:57:9e:a4:63:96:e8:f2:a2:c4:0d:46:5e:6a:ae:
                    86:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:34:74:41:7E:FA:BD:01:12:9B:45:BC:88:34:50:D6:14:23:87:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/ae87ef36-6fbc-35ed-9adc-6585fddb1361.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/7746dca1-2236-41ce-ab1a-952e06f4769c.crl

            X509v3 Authority Key Identifier:
                keyid:0A:E6:84:83:00:60:D5:76:67:3F:01:3B:83:A3:7B:45:F1:C2:1B:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:90::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:de:64:03:df:51:b5:8d:76:18:4e:26:c4:c1:af:77:31:45:
         a7:6a:62:42:85:11:c9:db:94:99:2f:d7:38:49:02:3c:fd:8e:
         ec:28:55:fc:59:f9:94:85:93:67:9c:24:f7:51:c3:a8:01:a7:
         a6:cb:5e:47:7f:74:8d:67:df:fa:7d:4a:fd:b4:76:9a:73:07:
         55:03:a4:a1:fa:a1:65:6f:1e:82:3a:ed:d4:df:44:a5:f3:ce:
         73:9d:14:09:98:b5:65:54:29:e5:e0:cb:c9:cb:fb:b8:ea:8d:
         01:6d:e4:a7:ee:c7:ce:0d:67:53:99:03:ae:48:ef:d1:1c:a5:
         17:7b:1f:71:3b:77:9b:c0:89:dc:da:53:c0:68:13:86:ef:48:
         94:05:34:21:20:3b:58:98:33:20:03:1c:9f:29:05:86:15:f1:
         dc:3b:35:6e:5b:e3:53:7e:7d:8c:4c:f5:a9:72:7e:60:f9:d9:
         bb:ed:d0:ec:a7:20:8e:70:46:e2:5a:e7:5e:bc:eb:15:7b:96:
         c4:33:7b:17:ed:98:63:b5:e7:45:d5:f2:49:a9:df:3e:c1:02:
         78:5c:f8:fb:49:dd:1e:9a:60:c7:32:f3:04:21:e2:31:0f:62:
         2c:95:e4:b7:14:e7:7d:f2:75:99:b7:e0:03:35:96:d0:da:62:
         2e:b1:43:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 22:06:02 2024 by rpki-client on console-fra.rpki-client.org