Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/aed858b5-50fa-3f1c-8b7e-7068c9e11199.roa
File:                     aed858b5-50fa-3f1c-8b7e-7068c9e11199.roa (raw, json)
Hash identifier:          Qhx166/hHswyOGgAAixM9uzni8hj7P2MnOrTLXQSuoM=
Subject key identifier:   7A:CB:58:B3:74:37:42:C4:B7:A1:B8:71:DF:D2:F9:E4:B1:49:C3:9B
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584563F30DB76ACDE14C65495580
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/aed858b5-50fa-3f1c-8b7e-7068c9e11199.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     11164
IP address blocks:        2001:468:f0ff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:0d:b7:6a:cd:e1:4c:65:49:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=f4ebb62e-b0c4-4aed-8414-c892bb33b238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:58:b5:45:80:c5:bd:3a:c4:70:df:ac:52:68:
                    63:20:ca:c0:61:48:7c:0e:80:cf:f0:76:e0:6b:c1:
                    32:57:54:6b:20:52:80:d3:f5:ec:01:69:89:38:88:
                    b8:d9:03:f3:7b:71:fd:3a:b3:57:e3:61:14:e5:5d:
                    f0:ab:a0:22:7d:be:e5:76:ff:e8:e1:3d:33:97:84:
                    2d:4f:13:78:10:48:ba:a1:1e:ce:18:2d:8b:b4:07:
                    f1:d7:ad:41:f9:db:95:9a:fb:87:da:4f:1b:4d:50:
                    f6:55:05:15:5e:7e:0d:f6:0f:0a:1d:11:ec:28:2c:
                    43:f1:e8:82:12:21:e1:fb:da:9c:b4:7d:ab:d0:62:
                    0e:fe:b8:26:3a:f4:c1:0d:84:9a:cf:46:56:c7:66:
                    e2:9c:64:e0:cf:d8:e6:bd:80:33:95:18:1d:73:4e:
                    f1:7a:b0:60:36:41:44:8f:33:7c:07:e2:11:82:23:
                    72:6e:aa:a6:ad:b1:73:7b:3e:bf:06:2b:58:32:0d:
                    38:bf:19:7b:53:6c:e8:ba:31:bb:61:12:c6:c4:cd:
                    70:e4:ba:b8:86:07:86:68:23:89:7d:d3:c3:71:6f:
                    b5:99:84:db:97:04:d3:3c:43:3b:e5:82:60:02:41:
                    26:e0:04:ac:ad:13:25:fd:38:d1:a8:ef:14:7a:82:
                    22:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CB:58:B3:74:37:42:C4:B7:A1:B8:71:DF:D2:F9:E4:B1:49:C3:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/aed858b5-50fa-3f1c-8b7e-7068c9e11199.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:f0ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:a5:0e:41:66:b0:c5:0f:2d:81:bd:3d:46:d1:d5:1d:6f:1a:
         a4:6e:ec:99:4b:85:55:d6:e9:25:6d:60:d8:69:27:33:65:3c:
         7e:6d:c6:9d:48:4d:f4:e3:88:84:56:00:f4:7f:1e:9f:7f:cf:
         68:59:fd:2b:11:b2:d9:eb:a7:83:f3:1f:0c:d8:80:5d:c7:03:
         e0:bd:b0:77:46:95:d3:45:35:15:f0:11:e2:0b:0a:1f:49:f0:
         f9:79:f8:9d:3c:b2:76:67:8c:7b:b6:cd:b2:3b:c4:cf:1d:56:
         f6:a3:6b:24:54:6d:c8:10:ef:60:49:fa:24:43:47:b0:cc:0b:
         5c:fa:22:ba:97:1c:99:c4:1a:e8:ba:8a:3d:a9:67:d4:96:98:
         cd:1c:df:4b:4a:01:b5:b6:ed:07:0c:b6:2d:03:b8:1c:f0:54:
         6e:be:bc:26:85:92:b9:69:be:68:75:23:ee:b7:89:a9:e1:6a:
         fa:24:f5:5a:ea:a2:d3:a0:a6:db:df:89:1c:cf:da:f4:a7:58:
         0b:df:44:5e:0d:0a:a8:b8:67:19:ae:3b:72:aa:c8:73:8e:20:
         87:dd:65:42:62:86:51:b4:bc:8d:f7:7d:78:d0:f2:5a:50:e5:
         b1:36:07:13:bf:bc:87:11:bc:a5:30:a9:cf:ab:1e:f6:97:6f:
         71:6b:c1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:02:54 2024 by rpki-client on console-fra.rpki-client.org