Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/df71ebf9-f641-3f00-b880-4b494a56937e.roa
File:                     df71ebf9-f641-3f00-b880-4b494a56937e.roa (raw, json)
Hash identifier:          UIxwYa3WM/a9pUPlZRZn0LvQKnCpf61omnZ+MMECRFM=
Subject key identifier:   DD:62:BF:F2:52:FB:68:16:C5:D6:7B:90:C0:29:3F:89:BA:F4:6E:50
Certificate issuer:       /CN=84071564-b087-4d9c-88d0-6fa5a30617a3
Certificate serial:       010D0C9F43285845D0D39CA33EB0E18EB88BA900
Authority key identifier: 83:51:B7:FD:D5:53:2D:4E:D1:C9:ED:AF:24:F1:9E:41:2D:7E:15:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/df71ebf9-f641-3f00-b880-4b494a56937e.roa
Signing time:             Thu 09 May 2024 13:00:33 +0000
ROA not before:           Thu 09 May 2024 13:00:33 +0000
ROA not after:            Wed 07 Aug 2024 13:00:33 +0000
asID:                     16717
IP address blocks:        2607:d580::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/84071564-b087-4d9c-88d0-6fa5a30617a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/84071564-b087-4d9c-88d0-6fa5a30617a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d0:d3:9c:a3:3e:b0:e1:8e:b8:8b:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84071564-b087-4d9c-88d0-6fa5a30617a3
        Validity
            Not Before: May  9 13:00:33 2024 GMT
            Not After : Aug  7 13:00:33 2024 GMT
        Subject: CN=adec4142-3bdd-4301-82e4-94017e7ee4a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:93:b1:ba:d3:16:7e:43:e7:9b:5a:2a:fb:e6:
                    f0:49:79:76:05:cd:2d:80:36:d6:e5:ae:99:a7:c1:
                    91:22:9e:4d:21:cc:6e:85:d3:a7:a5:53:06:b9:a6:
                    fb:5e:6b:ab:13:53:cd:17:5b:dc:9b:ba:74:a1:31:
                    6b:a1:fb:da:e5:1f:af:27:28:16:bc:8d:ae:f6:a8:
                    1c:d7:a0:58:f1:4c:1d:4c:d0:8c:1a:11:af:77:db:
                    94:59:9c:b5:c9:dd:3b:e3:56:3a:93:2d:c9:07:42:
                    64:7f:5c:29:9c:c0:8b:21:00:8b:dd:68:29:70:03:
                    37:72:26:f5:ba:79:89:9c:8b:e3:c1:02:97:28:41:
                    65:00:a0:d9:14:57:39:37:51:4b:43:88:62:60:92:
                    a2:86:e4:5f:1f:fd:c0:91:6c:0d:fe:ea:62:38:d9:
                    6b:01:4b:c2:54:a6:9e:87:74:fb:10:d7:f0:d6:84:
                    72:59:6c:2a:f0:22:1a:ac:56:87:21:aa:e9:7a:bf:
                    e4:b0:85:8a:35:a9:1d:ae:33:4e:9e:41:3c:02:43:
                    8f:2e:1f:9c:fb:62:9e:7b:aa:de:75:48:ba:d2:cb:
                    96:8b:d8:35:3a:ad:7b:ca:e7:fb:fb:d0:3b:ed:40:
                    e5:4b:f9:f2:a9:16:52:3c:17:c3:e4:82:8b:32:0d:
                    37:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:62:BF:F2:52:FB:68:16:C5:D6:7B:90:C0:29:3F:89:BA:F4:6E:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/df71ebf9-f641-3f00-b880-4b494a56937e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/84071564-b087-4d9c-88d0-6fa5a30617a3.crl

            X509v3 Authority Key Identifier:
                keyid:83:51:B7:FD:D5:53:2D:4E:D1:C9:ED:AF:24:F1:9E:41:2D:7E:15:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:d580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:9e:99:da:91:0a:0c:56:07:2b:b3:ca:0d:24:c7:32:1a:f3:
         ee:44:f4:84:65:11:fb:6c:b1:fd:b9:8e:dd:6a:fa:bd:1c:5f:
         6b:1a:c1:28:be:d8:a4:fa:1f:c1:55:e7:6d:51:b5:8f:ca:75:
         d5:62:a2:65:9a:6c:a0:65:39:bd:c6:b7:82:b4:ae:36:1d:dc:
         87:18:ee:81:ef:8e:cc:58:cf:c6:df:0b:d1:1b:6a:9b:64:73:
         68:7d:be:b0:f7:c2:d7:8c:a7:fc:ba:39:e0:d4:59:8c:9d:ae:
         ea:5a:c6:b5:ea:bb:f5:35:95:4f:62:6f:d6:d3:bf:78:f9:7e:
         57:4f:f8:79:5d:28:7d:eb:86:09:f3:50:ec:32:59:2a:64:ae:
         d5:93:e7:20:a5:32:10:89:8c:11:b1:33:7e:e2:ae:cd:59:d4:
         ae:be:eb:89:aa:82:e9:1b:a5:4c:a7:8c:3d:21:6b:d2:b0:34:
         31:73:74:3b:e8:9f:2c:5d:91:1e:fe:cc:6c:6e:aa:1f:56:10:
         ec:6c:3c:49:80:eb:84:a2:2e:b1:10:fa:dc:86:d4:82:07:f6:
         73:58:99:7b:b6:a2:6b:87:39:08:f8:9c:ca:f2:cb:c5:32:13:
         73:79:ec:fc:da:be:7f:01:d2:fd:4a:c7:40:16:2f:66:21:ca:
         32:03:8b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 10:57:35 2024 by rpki-client on console-fra.rpki-client.org