Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/17b03b4a-bdf6-3836-a326-f63024f8e445.roa
File:                     17b03b4a-bdf6-3836-a326-f63024f8e445.roa (raw, json)
Hash identifier:          sgwTusl7/MD9Qetuuo4mKkGJ9Q9fcI+bl+VCAzlt7tI=
Subject key identifier:   3B:8E:89:82:39:1E:23:E8:A2:69:6B:A8:5C:D9:F4:D4:C8:88:19:58
Certificate issuer:       /CN=6a30b207-de04-425f-94e9-ee12d4529f56
Certificate serial:       010D0C9F43285844FB6008A6943CE01CAF121980
Authority key identifier: 4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/17b03b4a-bdf6-3836-a326-f63024f8e445.roa
Signing time:             Fri 23 Feb 2024 02:00:26 +0000
ROA not before:           Fri 23 Feb 2024 02:00:26 +0000
ROA not after:            Thu 23 May 2024 01:00:26 +0000
asID:                     26810
IP address blocks:        2607:f220:610::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fb:60:08:a6:94:3c:e0:1c:af:12:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a30b207-de04-425f-94e9-ee12d4529f56
        Validity
            Not Before: Feb 23 02:00:26 2024 GMT
            Not After : May 23 01:00:26 2024 GMT
        Subject: CN=a16c3a16-4022-4514-9536-e58a9a1b8090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5d:2c:c2:c2:ed:b9:74:b4:97:99:75:54:a3:
                    bf:f0:da:01:56:91:1d:c4:92:44:d2:cb:f1:c8:17:
                    e5:03:38:03:f0:51:d7:01:85:9f:56:29:78:7a:29:
                    b9:f0:7e:73:01:f6:92:d3:a4:ac:92:09:19:b2:23:
                    78:ba:ec:f3:dd:ce:7b:1f:4b:d3:1f:65:e8:f5:3e:
                    17:e7:f1:5f:75:9e:4e:8e:82:df:33:d3:1b:37:1f:
                    b3:ba:14:dc:59:b4:c4:c5:24:a5:13:6f:e9:5b:7f:
                    e6:6a:07:0a:aa:43:54:ee:03:32:26:16:62:6e:e4:
                    e3:6e:cb:32:f0:a7:e7:5e:23:60:0f:fb:d7:51:f2:
                    e2:b3:35:5b:e6:af:3e:9a:96:43:77:a8:b5:8d:3a:
                    bb:c7:1d:b1:26:76:19:a0:e3:14:00:8d:17:62:10:
                    79:d7:6a:ba:4a:09:d5:f7:9b:c3:ea:4c:de:62:8a:
                    31:b6:f8:1a:a9:61:ae:4d:17:19:68:14:0c:3a:14:
                    43:88:bd:29:75:a9:62:75:b3:bc:16:f4:eb:a6:fc:
                    d0:a7:ac:01:89:d7:b3:b3:e7:1e:2a:e1:85:a9:f5:
                    df:4a:38:08:f9:c2:1a:f3:44:be:7f:40:bc:39:d3:
                    16:cc:4d:2f:bf:77:07:cc:e7:96:57:7a:15:ec:f5:
                    a7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:8E:89:82:39:1E:23:E8:A2:69:6B:A8:5C:D9:F4:D4:C8:88:19:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/17b03b4a-bdf6-3836-a326-f63024f8e445.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl

            X509v3 Authority Key Identifier:
                keyid:4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f220:610::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:cf:88:f5:1b:5f:8d:90:ff:e4:38:8f:4a:3f:79:fe:7c:26:
         fe:e2:f7:70:8c:e7:ba:7c:05:a8:60:f3:51:39:df:26:3d:0a:
         7e:8a:44:e0:62:35:9e:64:b3:28:04:17:71:f8:1d:b4:33:e2:
         56:26:94:f6:9e:fc:6c:e2:96:b5:a2:cb:ce:4f:9e:40:1a:b1:
         ec:71:f4:72:45:ce:3d:78:ee:e0:8a:34:2b:33:1f:f5:d0:cb:
         52:f4:d9:df:07:62:13:71:ba:0f:c0:4e:03:f6:4a:ff:9f:f7:
         59:25:f4:48:1d:a4:95:ff:cf:19:07:7b:9d:8b:97:0c:5c:c7:
         cd:2a:2e:de:22:2d:b9:12:f7:03:ff:5a:aa:a2:15:59:36:32:
         03:b2:a4:0a:f8:2d:7e:ec:a3:19:2a:a2:93:e9:26:b3:10:f8:
         55:fc:7f:7f:95:30:49:d3:fb:24:b0:45:e8:9d:32:cd:c9:f9:
         14:32:b8:20:d6:7e:cf:b4:d7:a3:72:49:46:f5:47:0c:42:4f:
         7e:ef:31:24:f0:67:4e:96:ab:3c:81:b5:07:a7:50:31:e8:29:
         18:91:af:24:b0:fe:b7:80:0d:72:46:fa:a5:40:e8:1b:a3:2b:
         e1:7e:e1:5c:b1:95:d4:15:98:f3:0a:52:77:6e:26:62:41:70:
         d1:25:0e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 15:10:14 2024 by rpki-client on console-ams.rpki-client.org