Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/7e3414e2-f1b6-3c94-be9d-196c56b0d9dc.roa
File:                     7e3414e2-f1b6-3c94-be9d-196c56b0d9dc.roa (raw, json)
Hash identifier:          fEmhy1mC1mWOyBvGWCJHICOpLKqLp/DAoJpTel9XDuA=
Subject key identifier:   01:BA:DE:14:9D:3E:DB:82:58:2A:F8:DD:85:34:4C:CB:F6:B3:FA:39
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F432858450D857E56400F0D052030D5C0
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/7e3414e2-f1b6-3c94-be9d-196c56b0d9dc.roa
Signing time:             Thu 29 Feb 2024 14:00:31 +0000
ROA not before:           Thu 29 Feb 2024 14:00:31 +0000
ROA not after:            Wed 29 May 2024 13:00:31 +0000
asID:                     140096
IP address blocks:        2604:d6c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0d:85:7e:56:40:0f:0d:05:20:30:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: Feb 29 14:00:31 2024 GMT
            Not After : May 29 13:00:31 2024 GMT
        Subject: CN=ee07a19c-c9fc-4d6f-9aee-ca151bf0961c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d6:82:5c:17:d2:a3:5e:0f:1d:de:c5:72:48:
                    28:5b:31:31:d5:d5:bc:dd:05:37:48:71:36:1b:2a:
                    de:ce:23:a9:b7:63:01:99:35:cc:23:5e:7c:0c:75:
                    b6:b9:7c:16:29:51:ed:e3:89:e0:7c:d2:bb:95:c8:
                    af:84:ed:0b:2a:59:fb:68:ce:25:a9:7b:aa:fc:e0:
                    68:8c:91:c2:b2:41:be:cd:3c:69:d7:f7:f8:a2:8d:
                    9d:d6:e3:9a:60:75:d2:94:42:86:a5:72:d3:4a:cf:
                    79:8c:06:6f:85:ab:56:b1:4e:d8:f6:2f:2e:84:8f:
                    a4:92:bc:3a:e3:70:54:29:ec:6b:b0:1f:17:fd:01:
                    5f:90:77:83:79:2d:9b:75:84:80:e1:6c:20:32:1b:
                    71:04:9c:e7:c9:ad:14:35:a1:60:c8:b5:77:08:31:
                    61:3d:25:7e:7c:e8:cd:9c:20:9c:c8:74:86:c4:b2:
                    22:cf:2c:fd:65:56:96:81:4f:2b:10:7d:b6:a3:d6:
                    cc:53:c8:95:a2:07:59:8a:c7:ba:60:d0:02:fc:76:
                    7e:8d:f3:81:9f:89:cc:22:18:78:d3:4c:9c:fc:09:
                    20:13:d7:4f:71:20:bb:09:20:26:ef:e0:7e:80:3e:
                    50:6f:1a:be:76:e3:fc:c7:e1:09:75:53:6d:58:b0:
                    a3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BA:DE:14:9D:3E:DB:82:58:2A:F8:DD:85:34:4C:CB:F6:B3:FA:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/7e3414e2-f1b6-3c94-be9d-196c56b0d9dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:d6c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:61:b1:87:b5:9f:e7:15:0e:d8:16:9a:ed:11:7a:73:a1:5d:
         b9:b2:56:03:b3:be:5c:dd:ea:9c:46:98:41:dd:14:fb:47:e7:
         b9:41:6f:79:36:dd:b6:0a:0a:a9:de:8f:4d:50:45:27:91:ed:
         4c:65:ac:d4:3c:06:87:74:0e:8e:c6:6b:04:d4:18:a0:92:f1:
         9a:50:b6:32:c4:57:29:80:c4:1b:14:4e:70:a3:47:d8:8d:17:
         85:f0:18:99:35:0b:30:a9:da:cc:da:3b:84:ef:83:01:e4:cc:
         76:f9:9b:3f:f0:0a:0b:fc:b0:8c:cb:ea:60:e9:6c:96:35:09:
         31:d8:da:ed:c8:62:48:00:2c:af:13:75:b0:78:03:9c:b4:e7:
         2e:ff:3d:a3:ff:e9:08:37:39:70:c9:a9:a2:30:b3:0e:df:70:
         53:35:22:7e:3c:3b:3e:5e:00:33:6d:39:19:af:2d:6f:e4:55:
         7f:32:a9:2c:06:c3:9f:3e:ad:69:a1:92:d3:f2:80:32:d3:63:
         b0:4e:bb:36:80:5f:3e:9a:e4:05:21:7a:71:b5:ae:e6:6d:28:
         1e:29:77:c8:09:b1:53:ba:28:81:82:d0:78:01:01:d0:b3:e5:
         46:ae:04:31:18:26:d4:85:e2:4a:53:df:43:e9:6d:54:d7:f1:
         99:df:a0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 16:48:45 2024 by rpki-client on console-ams.rpki-client.org