Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/2953b610-a434-3572-bb79-1dcab516be48.roa
File:                     2953b610-a434-3572-bb79-1dcab516be48.roa (raw, json)
Hash identifier:          hFVO2VeCBeXCzn7jcSe7npopblzjA32Fpyj2w6sG76U=
Subject key identifier:   45:33:F3:CA:BB:49:2A:6F:B3:24:2A:DC:E7:F7:3F:5C:4A:2F:5A:A3
Certificate issuer:       /CN=c939804d-392f-4714-a1f1-89eb4660daf7
Certificate serial:       010D0C9F43285845612850CE4F317D03B3EED2B0
Authority key identifier: C6:FC:D1:09:1B:FA:5D:0F:A6:65:0C:1C:14:CA:66:B3:B9:99:A4:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/2953b610-a434-3572-bb79-1dcab516be48.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     11990
IP address blocks:        2605:fa80::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/c939804d-392f-4714-a1f1-89eb4660daf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/c939804d-392f-4714-a1f1-89eb4660daf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:50:ce:4f:31:7d:03:b3:ee:d2:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c939804d-392f-4714-a1f1-89eb4660daf7
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=6023c4c0-6035-4db2-811a-852d58b731ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9d:18:11:1b:7d:9e:f0:33:39:78:83:7b:59:
                    10:5b:93:ec:f0:98:b1:bf:9b:68:49:13:97:b5:53:
                    ce:a7:05:17:e2:a5:92:99:60:05:1c:18:17:8a:ac:
                    d6:5b:9a:c8:b5:f1:bb:78:78:e0:1d:ec:3c:75:ff:
                    6b:bf:2c:35:59:15:ab:fc:d4:52:29:6d:c0:3a:61:
                    02:86:f5:59:25:12:51:ac:e9:e6:31:af:50:f7:6d:
                    48:7d:64:0d:72:13:65:10:ae:52:97:70:e6:45:59:
                    43:e7:26:1e:72:9b:f3:45:21:09:8c:f5:6a:bc:b7:
                    22:5f:eb:ae:6e:de:c3:72:20:56:41:75:12:f0:03:
                    8a:9b:09:c2:d5:12:35:7c:70:c2:89:87:97:12:af:
                    40:3a:65:6b:1b:ce:04:4f:63:21:77:31:dc:42:23:
                    4f:a8:f8:21:c6:1a:5a:a3:56:f7:be:57:d4:18:c3:
                    34:5a:10:e3:1f:4b:d1:4a:dd:30:58:79:38:26:e4:
                    3f:17:b7:2e:f8:b9:28:f1:46:6f:e6:18:7e:ed:ce:
                    6b:f9:cf:9f:9d:b1:5b:e0:1a:14:ea:fb:c4:4e:a3:
                    a0:41:ce:e6:b9:a3:3c:50:33:de:69:0f:98:eb:ee:
                    7a:44:06:92:bd:f0:90:bb:46:6f:b7:df:cc:c5:7a:
                    8b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:33:F3:CA:BB:49:2A:6F:B3:24:2A:DC:E7:F7:3F:5C:4A:2F:5A:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/2953b610-a434-3572-bb79-1dcab516be48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/c939804d-392f-4714-a1f1-89eb4660daf7.crl

            X509v3 Authority Key Identifier:
                keyid:C6:FC:D1:09:1B:FA:5D:0F:A6:65:0C:1C:14:CA:66:B3:B9:99:A4:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:fa80::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:b8:21:af:09:f7:ca:14:4f:1b:de:ad:97:f2:f0:74:e1:b5:
         96:78:e7:0f:f9:6f:4f:ec:de:18:7b:65:48:8a:53:c4:86:0f:
         08:ab:98:0a:54:e4:bd:77:37:71:c6:75:1e:bb:1b:41:e8:f0:
         51:c0:f3:71:3d:04:0c:fb:69:13:4a:f5:e9:2a:47:db:7b:97:
         0b:60:ae:cc:66:d3:01:29:68:d7:3a:b5:51:20:22:68:a3:c3:
         30:b8:40:b6:3c:17:aa:58:15:e6:40:b5:95:05:0c:fb:a3:a4:
         4e:41:c2:7f:d6:77:3a:14:1d:6d:92:93:a6:e1:3c:f8:57:b4:
         9a:82:2f:59:05:7f:38:6d:ec:1d:82:5d:bf:69:2f:52:e4:f9:
         a3:ee:0e:5f:26:2c:b0:4a:86:13:13:2d:96:2b:4f:0b:77:82:
         51:a1:cd:ef:15:8d:c5:79:3b:48:4c:93:0f:38:0b:72:28:01:
         dc:92:1f:6b:05:d5:23:91:77:2e:8e:89:f7:d2:04:99:69:cf:
         88:b1:4a:74:f0:7a:b6:a9:c5:74:07:db:67:94:61:7e:5f:4c:
         7b:2c:9f:e8:d9:e9:6f:15:65:8e:00:de:18:08:c4:e1:87:a4:
         93:c1:79:c3:11:27:04:58:4b:46:f5:58:a2:43:37:04:42:42:
         db:2c:85:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 16:54:42 2024 by rpki-client on console-ams.rpki-client.org