Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/6fb12a3d-949f-3ab1-bc3a-f4a698faa8b5.roa
File:                     6fb12a3d-949f-3ab1-bc3a-f4a698faa8b5.roa (raw, json)
Hash identifier:          bWRaEJL7vo72Gq6y+51yETgAc4jMbDzI6HmOxz1XKJA=
Subject key identifier:   B1:84:1D:62:55:74:CA:32:55:7D:6C:80:1B:F5:41:25:0C:70:68:2B
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F432858456C530ADF01B7E7A8ED65F180
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/6fb12a3d-949f-3ab1-bc3a-f4a698faa8b5.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     4181
IP address blocks:        2600:3400::/28 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:0a:df:01:b7:e7:a8:ed:65:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=c1e38252-1176-4aa1-aa29-917517114e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:db:ba:66:89:28:77:af:fa:4a:49:9c:dc:1c:
                    08:c1:99:bf:1d:af:b8:6d:e1:3e:e1:1e:e4:01:3e:
                    ba:65:b7:4b:b7:75:dd:32:d6:2b:6e:da:f2:95:db:
                    7b:cb:d7:df:98:fb:85:9e:b4:92:a0:b2:b8:1b:fb:
                    e4:1a:29:2d:ff:93:5e:fe:55:eb:20:fc:18:63:c2:
                    c4:fb:d0:5f:e1:2b:e5:5a:7d:9b:d7:0c:65:29:af:
                    c9:0e:c7:60:bd:a0:b8:a0:77:4f:68:d8:fd:b3:b7:
                    12:99:90:7e:44:16:06:1b:92:df:89:3e:a9:02:3e:
                    45:3e:db:22:b8:53:c3:39:ce:c2:0a:40:1a:bf:e0:
                    d0:fd:58:26:9b:7f:5f:25:b4:25:81:b4:76:bf:f3:
                    79:4c:d2:0b:df:eb:cb:fd:67:45:ac:a7:92:7a:8a:
                    a1:a0:63:05:88:c8:66:6c:4d:35:40:42:82:92:b7:
                    cc:e1:7b:77:fe:95:d7:cc:cc:f3:6e:fc:a3:90:d4:
                    61:fe:de:5a:9d:26:4e:2b:4b:7b:a6:93:2a:ed:e9:
                    01:38:72:75:36:55:b9:80:00:92:48:c1:de:c9:72:
                    19:65:ee:f0:ac:94:bb:c5:ba:4b:f6:ca:c2:2a:fa:
                    77:d3:43:17:28:51:91:89:98:cd:5d:42:eb:e7:d5:
                    0a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:84:1D:62:55:74:CA:32:55:7D:6C:80:1B:F5:41:25:0C:70:68:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/6fb12a3d-949f-3ab1-bc3a-f4a698faa8b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:3400::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:1b:51:cf:a1:c2:b3:d1:18:7f:67:a6:c8:23:b5:b4:1d:f1:
         10:97:36:77:c2:46:c8:e2:56:21:9e:3c:e9:74:73:c1:a0:c4:
         50:35:eb:b7:76:12:62:f3:10:88:0c:29:c7:81:db:fb:0e:ed:
         ed:5b:3e:12:df:3b:47:54:be:85:47:43:5d:9a:47:bd:59:7d:
         06:78:f0:17:f2:1e:c7:9e:65:7b:df:b3:89:ad:9d:ba:26:ff:
         d2:b0:03:3e:c6:d2:30:9b:c0:13:db:9c:c5:bb:60:0e:16:07:
         33:a0:da:4e:90:0d:ff:12:59:ae:e1:51:fb:65:a7:5e:62:9b:
         b7:90:3c:95:dd:f8:3c:18:b0:d5:1a:01:71:e4:11:3a:89:08:
         b1:c6:5c:86:f2:89:75:00:fb:b6:02:69:a9:bb:d3:b2:ac:74:
         00:51:f6:ad:86:be:d4:c5:89:20:26:72:9d:58:e4:d3:20:1e:
         e7:5b:37:93:17:88:89:fc:37:a3:a7:7c:62:c3:9c:09:41:ff:
         3e:fe:35:97:ea:12:49:9e:50:e1:06:5a:3c:fc:ec:bd:ef:cb:
         57:f6:e2:99:f0:06:bf:e3:79:48:1c:4f:e5:43:f8:98:fe:c3:
         5d:42:ba:98:0a:9e:1c:84:fe:14:94:b6:18:cb:c1:cc:2e:9e:
         3d:4f:3c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:47:02 2024 by rpki-client on console-fra.rpki-client.org