Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8b8945c7-3242-3a15-83b1-616402b53b63.roa
File:                     8b8945c7-3242-3a15-83b1-616402b53b63.roa (raw, json)
Hash identifier:          7JzMdvddGdFOwCbooXwTbAZps8Ovp7A9jCnF2qpHy/c=
Subject key identifier:   01:40:39:02:B5:7C:92:6E:41:2F:2A:68:7C:6A:84:7B:C4:8E:AE:84
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584556EC7CD246746C29E9DF5154
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8b8945c7-3242-3a15-83b1-616402b53b63.roa
Signing time:             Tue 26 Mar 2024 21:02:05 +0000
ROA not before:           Tue 26 Mar 2024 21:02:05 +0000
ROA not after:            Mon 24 Jun 2024 21:02:05 +0000
asID:                     8987
IP address blocks:        2605:4300:2c17::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:ec:7c:d2:46:74:6c:29:e9:df:51:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Mar 26 21:02:05 2024 GMT
            Not After : Jun 24 21:02:05 2024 GMT
        Subject: CN=025ba118-aeb5-4461-a31b-9b43b5ad5bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9c:65:9c:ed:4c:7f:5a:dd:c8:77:66:59:b8:
                    6b:65:37:e7:b9:26:2f:95:a4:31:fc:b3:a3:25:c5:
                    0e:49:cb:35:90:ca:7b:0e:b0:f7:1f:d2:a6:af:3c:
                    1f:98:32:e6:15:8c:ee:84:18:d9:95:0f:3a:92:ad:
                    50:1c:9a:1f:c0:07:05:3e:e9:90:7f:db:02:11:e9:
                    fa:ea:fd:77:e3:4b:e9:f7:df:bd:da:10:27:aa:c7:
                    ab:be:73:1a:5f:fa:04:af:c7:05:66:3a:a3:56:52:
                    25:e8:97:85:11:82:08:d1:73:bd:7e:08:13:f4:6b:
                    14:36:12:0a:79:d9:3c:cd:ec:4a:b4:bd:ba:2b:31:
                    64:85:80:57:36:8c:8b:4e:5a:d5:71:8e:3a:34:80:
                    50:cf:a2:85:62:67:71:c2:54:42:3d:3e:8f:3e:0c:
                    15:5e:e4:9c:71:d2:f5:64:78:30:bd:33:05:b0:77:
                    10:62:b8:cd:9d:0f:86:b0:04:48:34:6d:04:69:7d:
                    0c:ac:60:ce:20:79:e6:d3:25:66:b7:d7:0c:1b:e9:
                    93:51:d8:76:72:53:54:65:22:10:2a:0d:fe:91:2a:
                    c8:93:c8:26:4f:f9:03:59:ff:c1:2e:9e:8d:a0:e8:
                    fe:6a:9e:3f:e6:ff:9b:6e:3b:7f:42:86:92:36:77:
                    7b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:40:39:02:B5:7C:92:6E:41:2F:2A:68:7C:6A:84:7B:C4:8E:AE:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8b8945c7-3242-3a15-83b1-616402b53b63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2c17::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:6b:bb:f4:6b:6f:3f:a0:e5:9c:a2:00:c7:3f:69:81:fb:14:
         fb:5c:36:29:b1:36:f2:bd:be:8b:7a:50:29:f7:2a:90:de:7c:
         0c:fe:b0:ed:b8:0e:f8:ba:78:4b:da:0b:7a:72:ed:dd:09:bd:
         6c:8a:4c:37:fd:2c:62:53:b9:52:1f:c4:90:99:54:a5:82:9b:
         04:75:48:05:ef:f7:f8:06:d9:0d:af:01:fe:2c:c9:e1:a3:e0:
         11:c6:b6:49:71:6d:ed:04:8a:46:cf:90:58:8f:9f:61:42:6e:
         63:f1:4b:1b:1e:53:3e:9d:7e:d4:03:15:41:6e:ba:d2:01:f4:
         c0:b4:76:6d:b8:79:62:ec:fa:7b:88:bd:1e:44:08:ac:da:92:
         40:a8:a8:28:43:15:2b:db:08:3a:34:6f:39:77:9c:3a:9d:08:
         dc:af:93:f7:1f:3d:d3:8e:f3:14:69:96:23:e9:0a:27:ed:5b:
         ec:89:e5:bc:1d:b5:27:c5:c2:cb:84:0a:0a:8b:48:69:38:60:
         52:10:d9:ba:b2:f3:51:ad:fa:cd:e6:25:66:80:b1:de:34:09:
         30:c9:4b:0a:64:6d:ed:95:8f:ed:93:4e:ef:07:15:c1:17:be:
         54:e4:d0:ad:7f:8a:90:03:8d:bb:dc:f9:c4:c9:89:3f:3f:7f:
         a7:8c:70:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:27:51 2024 by rpki-client on console-fra.rpki-client.org