Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/5498b330-0d87-3083-b485-a3ffd5581a13.roa
File:                     5498b330-0d87-3083-b485-a3ffd5581a13.roa (raw, json)
Hash identifier:          oB3pZo9tejbUVZ5hvIKLy12yBxjgiwcHnrm2rhKfa1w=
Subject key identifier:   F4:D4:C8:F0:9B:65:BC:5A:BD:E8:9E:64:BC:C5:A5:3F:7D:D9:0F:9B
Certificate issuer:       /CN=aa363d52-209b-47ac-aa24-f8c86d11fcb9
Certificate serial:       010D0C9F43285845CE08F1BDCAE06A036DBAFC80
Authority key identifier: F2:BC:8C:E9:CC:0C:09:4F:50:2B:F4:AA:DE:CF:CE:3D:BA:40:58:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/5498b330-0d87-3083-b485-a3ffd5581a13.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     12243
IP address blocks:        2606:1040:1337::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:08:f1:bd:ca:e0:6a:03:6d:ba:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa363d52-209b-47ac-aa24-f8c86d11fcb9
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=d54f0982-9cd5-4832-affa-7b85b080864e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:38:82:b3:d9:7c:c8:db:43:94:d7:9c:8d:6a:
                    c5:8d:7c:dc:5f:6c:cd:ac:ca:31:b8:0f:5f:d8:1d:
                    2f:5d:75:84:d0:76:c7:8c:71:ae:4f:02:0b:0e:a0:
                    31:4e:a5:b2:0a:79:bf:ed:6c:10:fb:18:de:01:ca:
                    10:a8:69:dc:8e:04:fb:38:1b:43:94:f6:0e:6d:f6:
                    0b:d0:c7:2e:84:84:2f:d5:b2:84:e0:1c:5e:6a:13:
                    37:93:6d:d5:9f:e5:c5:4e:5a:e9:05:a9:7c:6a:dc:
                    f7:77:9c:18:18:e5:3e:3c:31:64:51:af:a4:7d:95:
                    7c:be:5d:e2:b9:69:80:5e:05:d5:88:e9:71:36:92:
                    63:44:8b:6a:84:58:2d:6d:33:dd:48:10:81:f7:3e:
                    f6:40:e9:b4:45:ed:f9:20:6e:dd:ef:52:ce:c9:a7:
                    53:c9:51:df:2d:d4:f0:7f:06:f3:6f:06:77:21:1f:
                    af:02:90:e9:03:5a:51:5b:7c:01:46:f7:ac:0d:46:
                    5b:87:e2:66:b9:a4:bc:5a:fc:29:b4:5f:cb:86:55:
                    b0:4a:6f:81:39:da:bb:fe:3e:47:57:24:64:2f:97:
                    c3:a0:6f:48:19:f4:20:2e:3b:87:30:03:20:54:a4:
                    b4:59:06:94:3f:b5:c4:48:a8:57:17:2f:b4:73:e4:
                    0d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D4:C8:F0:9B:65:BC:5A:BD:E8:9E:64:BC:C5:A5:3F:7D:D9:0F:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/5498b330-0d87-3083-b485-a3ffd5581a13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.crl

            X509v3 Authority Key Identifier:
                keyid:F2:BC:8C:E9:CC:0C:09:4F:50:2B:F4:AA:DE:CF:CE:3D:BA:40:58:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:1040:1337::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:19:6e:23:ed:ba:14:0d:63:72:5c:dd:1d:cf:c6:b4:9e:38:
         62:8d:7a:25:d0:e2:8b:9c:69:11:44:8d:b6:43:23:54:2c:d0:
         d8:47:16:e1:75:3c:f0:ae:1c:a0:16:6f:4b:2c:da:33:a5:58:
         43:ad:d4:a0:21:46:74:b6:76:4d:ab:79:a2:ab:26:30:2b:46:
         1f:e1:3b:00:19:78:6c:d2:e3:ec:02:ea:5c:6c:61:e6:a9:df:
         21:55:48:19:40:c2:76:2b:fd:e6:7b:88:18:7f:10:06:68:91:
         06:75:df:81:15:32:70:8c:9a:02:73:a6:73:b7:7e:17:ac:f3:
         f5:f7:ae:60:d5:56:41:ae:24:82:f2:55:76:e5:10:5b:5b:d1:
         de:4c:bc:b1:23:95:51:0d:93:4b:3a:07:b7:a8:09:35:5d:20:
         c3:80:f3:7d:f1:b0:49:f0:7b:1d:0a:b5:bb:ce:9b:a8:f6:c7:
         f3:4d:f1:7d:77:c2:58:93:bd:16:61:2b:27:54:44:23:d6:2d:
         6f:87:af:69:5d:1f:f3:a3:93:91:4c:7b:fa:99:b3:78:45:0f:
         ca:35:cd:90:97:dd:db:53:17:b2:b5:13:d1:a3:12:26:7a:7e:
         eb:35:99:44:18:3b:3d:50:36:62:85:59:25:4e:14:a0:6a:c7:
         45:88:cc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:52:15 2024 by rpki-client on console-ams.rpki-client.org