Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/e66ddf74-7469-3ada-9b35-1cbbb155b25e.roa
File:                     e66ddf74-7469-3ada-9b35-1cbbb155b25e.roa (raw, json)
Hash identifier:          +RpOmwGG1v/IiZVZ4bNPwl96eFHFWSeLRIu11FsIMHo=
Subject key identifier:   F5:93:12:92:28:5D:AE:4B:7F:C6:A4:C4:6B:D3:1A:8D:18:1E:28:8C
Certificate issuer:       /CN=0dc32e52-7919-4ad4-a486-4bed23a5c3ab
Certificate serial:       010D0C9F43285844E23FD942707D8CEA8D7BD300
Authority key identifier: E5:FD:14:F3:B0:8F:71:D2:1F:E9:CA:63:A4:F4:70:53:F8:F0:02:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/e66ddf74-7469-3ada-9b35-1cbbb155b25e.roa
Signing time:             Wed 14 Feb 2024 02:00:25 +0000
ROA not before:           Wed 14 Feb 2024 02:00:25 +0000
ROA not after:            Tue 14 May 2024 01:00:25 +0000
asID:                     394434
IP address blocks:        2606:86c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e2:3f:d9:42:70:7d:8c:ea:8d:7b:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dc32e52-7919-4ad4-a486-4bed23a5c3ab
        Validity
            Not Before: Feb 14 02:00:25 2024 GMT
            Not After : May 14 01:00:25 2024 GMT
        Subject: CN=ae8dae8d-59e7-45f0-bdb2-ba5a55525477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:31:17:3c:18:9a:4c:62:84:eb:35:67:93:e9:
                    19:5e:09:8a:f5:64:f0:01:9b:98:7d:e5:55:43:de:
                    27:34:b6:52:07:a1:c7:b3:06:85:4d:93:8f:90:01:
                    70:d4:ed:d9:6a:b9:fb:a6:a5:92:15:10:4f:a8:c9:
                    a8:ab:ef:64:26:08:76:48:be:d6:9e:2d:c2:32:b8:
                    b5:ff:95:c4:3a:e1:57:94:a3:76:a2:df:16:4f:98:
                    a4:41:03:eb:4a:fe:88:b8:a0:e1:f3:c0:0d:d8:c0:
                    6d:ea:e8:61:f2:ff:09:a4:bb:8b:3e:3d:28:5a:96:
                    70:1f:10:73:72:ca:f2:0e:27:4c:4b:ed:23:10:f8:
                    c5:d2:5a:5c:29:df:9b:a7:e9:36:60:36:97:13:41:
                    34:56:50:54:21:cf:89:b6:e6:45:d0:ad:96:1a:de:
                    63:7a:65:06:3f:02:34:20:eb:4a:47:d9:14:c5:dc:
                    68:c9:bd:d2:51:42:07:be:a5:9a:fc:13:d6:58:e9:
                    56:fd:12:95:f5:91:85:06:98:b8:5d:30:fc:12:22:
                    8a:8e:a3:1a:65:72:bf:42:89:2a:cd:32:52:1d:44:
                    c2:da:dd:fe:b9:d4:f8:7d:d6:1e:fb:f0:fa:a2:6d:
                    b4:4c:40:c6:c6:8b:f2:ce:57:70:ee:67:6f:d4:d5:
                    a9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:93:12:92:28:5D:AE:4B:7F:C6:A4:C4:6B:D3:1A:8D:18:1E:28:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/e66ddf74-7469-3ada-9b35-1cbbb155b25e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.crl

            X509v3 Authority Key Identifier:
                keyid:E5:FD:14:F3:B0:8F:71:D2:1F:E9:CA:63:A4:F4:70:53:F8:F0:02:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:86c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:e7:62:48:e1:04:e3:c6:9c:63:71:69:c3:47:d4:ad:29:19:
         eb:c9:a7:f9:74:78:be:6e:9e:94:f9:e1:c2:d7:50:88:09:a2:
         98:4a:e6:b6:61:d9:de:12:10:30:d2:36:a2:97:15:ac:e1:51:
         75:36:a0:1b:20:5f:7c:37:e6:63:e6:04:55:14:fb:e5:06:39:
         69:00:b1:e5:fa:49:7c:b5:96:40:2d:60:b6:3a:4c:5d:7f:74:
         8b:20:9c:58:02:96:98:91:c2:94:e7:cf:3f:81:59:2b:f8:90:
         61:be:90:6d:95:0e:e5:6c:d6:1c:21:cb:9c:37:d1:53:49:f7:
         28:dc:b2:df:68:bf:83:47:e5:5c:61:5f:69:57:9c:21:5f:7a:
         16:3d:10:c9:b8:68:48:b8:10:9f:42:75:41:c0:37:81:b9:f9:
         62:34:0c:e5:91:8b:07:82:e6:dc:d2:09:fc:f1:b0:15:3d:ea:
         e0:48:e1:54:cc:bc:e2:0d:1a:5d:5c:e5:7e:ce:69:76:06:a8:
         1e:81:b0:fb:b5:0b:95:d1:45:13:5b:d3:70:12:a7:57:8b:0e:
         48:9b:87:96:9f:43:2b:ad:d1:ad:9d:cb:8f:2a:99:df:31:21:
         dd:63:17:b9:bf:1c:6e:f5:48:47:84:3e:89:c0:7a:91:15:93:
         0d:3a:a7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 16:12:08 2024 by rpki-client on console-fra.rpki-client.org