Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/9d1e2949-725d-30e4-9f53-38bd0e6b7df0.roa
File:                     9d1e2949-725d-30e4-9f53-38bd0e6b7df0.roa (raw, json)
Hash identifier:          49a17ejBNSV/FOhStm/tjyvzaatahNrDngwIydyDces=
Subject key identifier:   D8:22:C5:6E:0D:BF:D9:C3:97:51:56:E9:62:F0:9A:A8:BE:DB:DC:BB
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F43285844DF3485A04E2661617B844588
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/9d1e2949-725d-30e4-9f53-38bd0e6b7df0.roa
Signing time:             Mon 12 Feb 2024 23:50:13 +0000
ROA not before:           Mon 12 Feb 2024 23:50:13 +0000
ROA not after:            Sun 12 May 2024 22:50:13 +0000
asID:                     0
IP address blocks:        2601:a001::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:df:34:85:a0:4e:26:61:61:7b:84:45:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Feb 12 23:50:13 2024 GMT
            Not After : May 12 22:50:13 2024 GMT
        Subject: CN=8de39e11-e0f5-44d5-80cd-7f0d801f08e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2b:b6:24:91:5f:b6:a4:83:f6:1b:31:a6:8e:
                    b8:eb:b0:75:52:96:be:10:f3:ba:b2:ab:26:5f:d8:
                    14:82:73:61:fc:81:05:3c:be:53:d9:71:01:28:00:
                    19:e9:53:4a:6c:d8:b5:4a:86:17:b9:8a:75:42:c1:
                    eb:63:42:15:e3:52:f8:94:e6:0d:5b:ef:99:b6:fc:
                    95:49:bb:d0:0b:33:51:9b:ae:e3:96:fa:13:ff:9a:
                    a3:38:ec:c1:fb:bf:9c:6d:c2:8a:91:51:78:b8:75:
                    80:88:bb:b5:90:7a:7d:10:65:96:76:c9:2c:9c:05:
                    a7:c5:ee:18:d5:e8:1e:a6:6d:6b:d8:fe:eb:7e:50:
                    7c:43:35:15:3d:da:76:36:93:0e:e9:2f:d1:11:00:
                    f3:16:f1:5b:c3:9e:38:1f:da:ba:09:43:12:47:ba:
                    17:b7:4b:39:07:25:ad:d9:b1:c1:d3:66:0d:88:f8:
                    97:77:ab:c0:96:c6:63:00:ec:fa:76:5f:a6:68:06:
                    e0:9b:e7:57:37:86:99:d7:f2:52:9e:cc:a6:11:eb:
                    b1:22:d5:7b:5f:56:f7:48:0b:1e:b1:76:30:89:18:
                    f5:36:64:e0:9b:69:ac:72:d0:12:66:40:77:cb:aa:
                    8f:24:53:e4:5c:0d:8a:c9:11:35:68:1a:8f:c2:d7:
                    aa:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:22:C5:6E:0D:BF:D9:C3:97:51:56:E9:62:F0:9A:A8:BE:DB:DC:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/9d1e2949-725d-30e4-9f53-38bd0e6b7df0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:a001::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:ec:b3:d5:f5:c2:03:54:32:f3:d2:53:07:83:28:4e:db:40:
         1a:a5:ec:01:55:ec:0c:6a:ea:1d:3e:c5:62:23:82:61:1a:87:
         07:83:4d:d2:be:e5:44:a8:34:75:08:9d:45:99:1b:29:2c:60:
         c9:69:ae:b7:13:46:c1:52:14:5f:32:e8:1b:62:cb:33:7a:6a:
         31:1b:72:f4:f9:4d:42:93:51:01:03:73:53:99:72:d3:bd:65:
         3f:bf:48:a9:11:f3:ef:90:ec:8d:37:32:46:60:ca:b6:22:2b:
         9b:b7:a4:fa:e2:68:58:6b:c5:89:27:64:ed:ca:b0:52:ea:2b:
         98:5f:8b:a3:ae:64:d2:5e:52:cf:2d:2f:33:e0:6a:fd:4f:8d:
         cd:03:d2:64:49:ac:2d:b5:fd:ef:18:d6:54:be:94:21:14:ac:
         66:71:71:cc:bf:be:90:f0:6a:2e:33:f1:5f:bc:a4:01:ef:ae:
         d8:7b:7b:c5:d1:44:10:2b:0e:50:2d:bd:47:37:bc:5c:f7:4d:
         5e:09:3f:7d:4e:8f:d4:b2:ee:8e:24:50:b4:32:f6:c6:73:cd:
         62:49:08:28:ac:23:c6:08:c9:72:b8:7c:a0:38:f9:bc:61:44:
         3e:9b:e1:1d:0c:ef:41:66:45:01:f1:07:f9:3a:f8:f8:3a:21:
         2b:e2:74:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 13:36:52 2024 by rpki-client on console-ams.rpki-client.org