Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/b69de0d6-eab7-3ae4-930c-75753b86626f.roa
File:                     b69de0d6-eab7-3ae4-930c-75753b86626f.roa (raw, json)
Hash identifier:          zgLMH3XYAQHi34KSfiMjDbJelj5aHXgZJ/M2zLwld48=
Subject key identifier:   9E:5D:E2:E0:1F:05:D8:67:F4:46:E7:43:DD:F9:B5:03:7F:AA:73:AF
Certificate issuer:       /CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
Certificate serial:       010D0C9F4328584561285FB37B18D3966CE62180
Authority key identifier: A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/b69de0d6-eab7-3ae4-930c-75753b86626f.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     55091
IP address blocks:        2620:115:7000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:5f:b3:7b:18:d3:96:6c:e6:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=ec026e3a-cb1b-43e3-8300-f67feca639fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:51:64:b1:f9:87:74:c1:1d:c8:1e:6c:dd:c6:
                    cb:ea:8f:ec:2e:b8:dd:6c:b4:64:4f:41:f4:63:ea:
                    20:3f:68:b8:e5:90:0b:f3:c2:5e:03:4b:4e:d1:11:
                    56:b4:6a:0a:54:09:7b:3e:6b:a6:51:7b:37:4f:43:
                    4e:3e:80:7e:1e:e9:00:7a:f1:25:17:36:b3:80:10:
                    af:dd:39:f4:85:d8:37:c5:6f:af:7d:e1:da:39:f1:
                    05:38:56:c0:9d:2b:ef:9a:13:4d:a8:c5:51:54:d9:
                    ee:b2:f7:08:99:ab:ff:dd:e5:c1:75:78:31:c2:32:
                    87:c0:62:79:20:bf:14:92:bc:9b:70:63:3f:b6:fd:
                    24:85:a8:a7:8b:e9:d6:5a:ad:51:65:be:4b:a0:72:
                    b6:b2:6a:2c:1f:65:18:6f:55:b4:ec:a2:d3:1d:82:
                    3a:4b:d0:7b:2d:cc:f5:45:c5:f2:c2:00:9c:1b:19:
                    df:c2:2d:aa:d8:cc:8b:53:14:c2:5e:ca:04:fb:62:
                    aa:3e:6e:48:97:02:1e:dd:1d:43:d6:95:25:5e:60:
                    4b:9d:6b:9c:de:ed:78:6d:12:05:ff:9a:6a:32:8a:
                    25:0c:68:7e:cf:1d:93:b3:37:5b:ad:cb:84:84:47:
                    6e:c2:b6:9c:58:3d:d9:85:83:99:ef:e7:8a:34:6b:
                    77:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5D:E2:E0:1F:05:D8:67:F4:46:E7:43:DD:F9:B5:03:7F:AA:73:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/b69de0d6-eab7-3ae4-930c-75753b86626f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl

            X509v3 Authority Key Identifier:
                keyid:A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:115:7000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:de:09:09:7f:00:a3:07:cb:89:3a:19:2a:32:50:0d:8f:dc:
         af:fa:c1:02:6b:15:93:fe:c1:b0:9e:d5:75:b3:c5:f1:69:b2:
         a1:93:fb:40:08:e3:38:c4:14:47:f4:f6:32:c8:6a:d2:97:28:
         a3:da:e0:3f:e1:08:c9:4a:96:e0:66:46:66:a2:9c:6b:ae:1d:
         a0:35:cb:76:5a:d8:c1:62:29:ba:31:cc:f0:45:b8:1f:fc:d1:
         b5:a7:f1:75:d7:67:79:f0:df:ca:47:20:13:60:99:a1:fa:b8:
         f6:29:10:93:dc:b4:77:37:29:52:fc:01:68:4b:04:41:70:f2:
         cf:5d:1e:4b:83:b8:6a:1e:0d:2c:2e:93:0a:cf:11:1c:8e:80:
         55:8c:b5:b8:7c:42:2b:d9:f0:e2:38:17:af:10:7d:b8:f7:6f:
         b8:0e:a4:43:7a:e3:c2:9a:bf:2e:41:fc:92:9d:0d:9d:c2:0f:
         b1:58:b9:e3:3d:35:59:d2:55:dc:e3:fb:02:27:b1:76:cb:25:
         d9:b5:cc:27:d5:d9:2d:5f:7c:80:91:28:6b:58:71:1a:e4:f0:
         bb:05:79:96:74:6b:de:94:15:f3:f5:cc:e5:4e:91:25:cd:35:
         50:59:f0:6e:14:c4:fd:80:5a:68:77:7b:3d:dd:87:ba:ab:eb:
         ac:95:6e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 17:18:57 2024 by rpki-client on console-fra.rpki-client.org