Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b0468f05-4a1c-32a8-8d70-464afb5fd296.roa
File:                     b0468f05-4a1c-32a8-8d70-464afb5fd296.roa (raw, json)
Hash identifier:          P4kIghFZk+awCahUwzNOG38VMdcjQKKM1b4LJdP93d0=
Subject key identifier:   FF:C4:D4:BF:8E:FB:00:7D:8D:16:37:BC:94:7A:F5:41:0F:CF:FF:30
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F432858455400F4EE72E1A60ED4C87700
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b0468f05-4a1c-32a8-8d70-464afb5fd296.roa
Signing time:             Mon 25 Mar 2024 19:55:54 +0000
ROA not before:           Mon 25 Mar 2024 19:55:54 +0000
ROA not after:            Sun 23 Jun 2024 19:55:54 +0000
asID:                     14618
IP address blocks:        2606:f4c0:6000::/36 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:54:00:f4:ee:72:e1:a6:0e:d4:c8:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Mar 25 19:55:54 2024 GMT
            Not After : Jun 23 19:55:54 2024 GMT
        Subject: CN=bf9d2b29-799e-4696-9f93-3df0603440ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:85:03:9c:d4:65:f6:a7:9d:8e:32:ff:dc:f3:
                    30:6e:4f:95:df:90:b4:44:0e:1e:8f:a0:bc:43:f2:
                    6d:5c:b3:26:60:ea:9c:4d:65:9d:03:76:5f:9d:5e:
                    b8:df:ed:8c:6b:df:de:25:1f:4d:fa:3e:c8:66:5b:
                    7d:61:88:b3:2c:8a:4f:6d:98:be:41:e6:66:52:a9:
                    79:c6:e1:51:ab:7d:65:29:08:d5:b7:74:63:af:a7:
                    38:21:8f:e9:47:e9:ab:21:6f:af:3e:30:37:10:a5:
                    71:a2:b2:2b:1a:00:26:0d:a3:e8:b2:95:2f:8b:b0:
                    c6:c0:98:09:45:b9:93:50:6e:0e:ab:e8:71:f7:62:
                    0d:13:fa:64:66:fa:c0:84:31:eb:bc:a3:e0:08:1c:
                    90:ca:b6:bf:e1:1a:30:b7:e0:8f:4d:7d:9a:61:8a:
                    34:41:05:4f:e9:c0:4e:74:d8:58:02:1f:e6:cc:66:
                    e7:75:79:49:3a:c7:79:c9:71:ea:34:eb:93:3a:8e:
                    39:1e:16:0f:8f:26:ee:06:aa:93:b5:af:b9:63:f3:
                    89:95:44:f7:49:b8:47:1d:f4:02:17:f8:98:56:f8:
                    77:e2:6e:e1:85:a3:83:a1:ad:12:61:f0:e9:d4:06:
                    1a:9b:33:f6:48:18:9a:07:39:c4:eb:b8:c6:96:d8:
                    ae:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C4:D4:BF:8E:FB:00:7D:8D:16:37:BC:94:7A:F5:41:0F:CF:FF:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b0468f05-4a1c-32a8-8d70-464afb5fd296.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f4c0:6000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:38:e4:7f:ca:b5:9e:85:78:e1:bd:23:bc:01:1f:a8:db:49:
         15:13:7b:e8:03:5e:e0:0b:c0:3d:20:fa:83:82:dc:9b:e7:9d:
         c7:83:8d:c0:4d:9d:d1:8c:c0:64:6e:85:a5:a1:14:d9:f1:b9:
         e1:87:fb:4e:a9:10:f5:f3:a6:53:c7:cf:36:60:e8:1d:51:89:
         69:84:cf:fb:45:42:68:ef:26:71:c3:e3:6b:51:c4:53:59:89:
         9a:7b:d1:5d:e9:d3:8f:4c:ba:74:6a:b3:5d:05:f2:59:01:25:
         57:c7:c7:88:a0:d9:14:0e:4e:97:5d:73:81:d6:d1:55:55:99:
         69:07:e0:6b:2e:69:40:25:2d:a5:a0:40:3e:3a:d0:d3:2a:64:
         82:08:8e:be:ee:73:0a:07:e8:45:fc:ad:ad:a2:15:bd:a8:8c:
         27:85:9a:dc:d0:77:93:f7:91:0d:1c:c6:f7:82:68:c0:6f:67:
         bf:c3:fe:aa:3a:77:b3:27:5f:80:bb:60:fd:eb:9f:2a:19:37:
         bd:f6:54:ca:66:50:c4:63:ea:04:17:aa:6c:a0:72:10:16:50:
         30:55:1b:f6:13:d6:02:28:bc:96:96:d6:66:13:51:fb:29:fd:
         cc:6c:a2:00:00:fe:80:61:2a:9c:74:f8:02:99:bc:68:74:b1:
         19:60:5d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:53:33 2024 by rpki-client on console-ams.rpki-client.org