Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa
File:                     bc669675-4f09-3100-852b-f89b8e4fa0ee.roa (raw, json)
Hash identifier:          QrGKtabDByCpBJz94KZAU9ABFeZvA1o8fhDyw25nirE=
Subject key identifier:   14:9B:3A:00:EF:64:A3:72:09:62:D9:F4:02:9B:7A:14:9E:5C:92:E5
Certificate issuer:       /CN=da61f786-99c2-4468-90f7-0b35abd168e5
Certificate serial:       010D0C9F43285845D503C68608F70120352007E0
Authority key identifier: 9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa
Signing time:             Sat 11 May 2024 01:00:27 +0000
ROA not before:           Sat 11 May 2024 01:00:27 +0000
ROA not after:            Fri 09 Aug 2024 01:00:27 +0000
asID:                     54650
IP address blocks:        2604:bb40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d5:03:c6:86:08:f7:01:20:35:20:07:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da61f786-99c2-4468-90f7-0b35abd168e5
        Validity
            Not Before: May 11 01:00:27 2024 GMT
            Not After : Aug  9 01:00:27 2024 GMT
        Subject: CN=1741ff4c-9038-4333-bedf-e8c429cf0af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e5:69:31:4c:d7:e2:b2:2f:fa:18:bc:02:4b:
                    aa:be:b9:12:11:ae:83:44:6f:3c:74:3a:f2:5f:a3:
                    54:e6:15:b1:f7:14:90:6a:da:28:9b:34:70:0a:6e:
                    94:03:f3:e5:ee:80:8c:aa:aa:5d:0c:8d:91:96:7b:
                    61:ee:37:f1:7b:14:f9:11:d3:80:16:86:ca:29:9e:
                    d6:c1:af:52:f2:f5:06:19:ee:6d:31:9e:8e:0d:f3:
                    79:ce:f1:af:13:90:29:60:b6:ab:64:b9:c3:f2:e5:
                    62:d4:d2:91:e4:a0:67:c3:e8:da:a1:5a:fe:53:66:
                    22:0c:75:a3:1f:9a:4e:0c:27:b9:c5:34:db:e2:e2:
                    c9:6c:ec:02:15:27:8e:25:28:a8:2e:66:30:3e:38:
                    fb:4c:02:43:0f:35:4f:bb:ed:3e:d4:50:67:1d:06:
                    df:b4:6a:fe:af:6f:63:21:87:e4:61:1d:d3:61:2e:
                    a9:43:ac:45:2e:86:ef:b1:50:ac:22:8f:08:6c:17:
                    06:cd:d4:34:42:7f:64:b1:b0:93:9c:7a:7a:3d:c6:
                    3a:e2:a7:5d:d6:e9:85:27:42:fa:b3:3c:60:1d:07:
                    5d:14:d1:6b:bd:83:d8:8b:13:c0:33:42:a0:ee:30:
                    4e:6e:83:57:80:6e:67:0c:52:26:a7:65:2c:f8:b8:
                    3f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:9B:3A:00:EF:64:A3:72:09:62:D9:F4:02:9B:7A:14:9E:5C:92:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.crl

            X509v3 Authority Key Identifier:
                keyid:9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:bb40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:98:7d:0c:0d:c8:8e:db:b8:dd:cf:ad:d7:67:62:b5:6f:69:
         0a:f4:61:54:a5:89:f0:21:ce:0d:b8:d7:62:0c:90:8d:e0:72:
         76:46:b0:8f:b8:f6:36:35:a9:a6:ab:e9:0a:6d:d1:0e:8e:e3:
         9a:54:0b:cf:53:ed:38:fa:ed:a8:bd:e3:ec:75:23:0d:64:01:
         ff:43:27:4d:2c:8a:c1:65:77:f0:64:42:fd:f5:65:5f:9c:9e:
         d4:b1:51:ca:38:38:89:dd:12:eb:c8:91:5b:c2:51:77:50:b3:
         21:96:77:4a:5e:1c:05:86:62:27:2a:c3:ca:f7:7d:7e:77:dc:
         af:20:fa:0e:b9:55:b1:eb:f1:05:42:e8:28:f3:ac:98:9a:ae:
         af:55:e4:be:9a:12:8e:57:36:81:aa:91:ae:e5:f9:23:4b:4e:
         d5:83:68:b6:1e:40:db:1e:dd:93:e7:e4:3c:c0:de:ad:35:d5:
         6b:52:e7:b4:55:85:d1:52:0f:1d:b4:0a:af:da:99:6f:38:68:
         50:a4:08:72:d4:ad:e3:63:33:3d:10:d3:e4:2a:2e:f5:dd:e2:
         d8:9b:d7:04:2a:6f:3d:5c:45:f6:56:7f:c6:bd:4a:84:9a:a6:
         51:49:b5:8d:bd:77:c5:b5:b1:2a:f7:df:0c:47:5d:49:c8:f5:
         f5:c5:41:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:48:03 2024 by rpki-client on console-fra.rpki-client.org