Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/31950082-4be3-32b1-a7fa-5cf9605a7c17.roa
File:                     31950082-4be3-32b1-a7fa-5cf9605a7c17.roa (raw, json)
Hash identifier:          sarqjXrzVwj9Rbdm/yTkgGL+eisj2Zu+Jmeh2kA5Ct8=
Subject key identifier:   D5:55:F2:AC:48:D2:B7:A7:D4:00:0F:FC:2F:CF:EC:1B:EE:3F:4B:B5
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F432858452952903BA3A19EC8292B8840
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/31950082-4be3-32b1-a7fa-5cf9605a7c17.roa
Signing time:             Sun 10 Mar 2024 13:00:31 +0000
ROA not before:           Sun 10 Mar 2024 13:00:31 +0000
ROA not after:            Sat 08 Jun 2024 13:00:31 +0000
asID:                     32133
IP address blocks:        2606:8e80:1800::/37 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:29:52:90:3b:a3:a1:9e:c8:29:2b:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: Mar 10 13:00:31 2024 GMT
            Not After : Jun  8 13:00:31 2024 GMT
        Subject: CN=b8eaeacf-a889-4e12-8e96-6a673e88c8c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e8:de:fb:76:17:03:a4:18:ee:de:08:cc:15:
                    08:9d:9c:6f:c4:01:d8:2e:fb:af:5b:70:02:fb:27:
                    af:db:66:27:5d:e6:08:30:a5:7f:f2:33:d8:11:fc:
                    12:ba:8d:1f:03:62:cc:b3:fe:cb:ad:f4:46:c1:66:
                    90:23:f3:9b:45:d8:e5:9a:ab:7e:0d:a1:6f:84:6a:
                    e0:cd:c7:83:83:9d:5c:12:a7:d4:b3:ee:1a:a3:59:
                    4a:0d:7b:54:99:1b:c3:f9:2a:18:c6:cc:46:13:c1:
                    35:ee:7c:e1:41:26:67:32:94:50:62:49:35:8c:f3:
                    4d:da:a9:2d:7a:75:da:a2:43:dc:5f:da:c0:8d:97:
                    6a:a0:7a:35:36:44:8d:07:52:1c:0a:07:c0:b7:ec:
                    77:a5:30:bc:aa:2c:1e:07:93:07:5d:4b:c9:d1:b8:
                    82:52:dc:bd:a1:a4:0a:20:0e:d0:37:54:7f:74:e9:
                    21:73:e9:40:79:08:e0:41:37:99:98:67:c9:d1:e6:
                    56:77:c0:de:c8:a0:47:9c:8d:07:39:9d:13:76:28:
                    7e:01:2d:cc:97:27:c6:2f:67:e1:f3:b8:f8:00:2f:
                    02:67:84:1f:bd:9a:28:86:9b:b0:03:76:de:e6:6f:
                    8f:68:28:d2:af:7e:90:8d:9b:6c:26:98:4f:31:8f:
                    60:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:55:F2:AC:48:D2:B7:A7:D4:00:0F:FC:2F:CF:EC:1B:EE:3F:4B:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/31950082-4be3-32b1-a7fa-5cf9605a7c17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8e80:1800::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:28:16:a3:de:c5:3f:0b:8b:ed:87:3b:78:16:a4:33:cc:e1:
         94:4c:6e:f1:ed:14:ae:7f:46:43:5a:45:25:72:c6:0c:eb:6c:
         36:23:3e:9a:98:dc:03:7f:1c:34:8f:c1:53:b6:68:0a:da:fc:
         a6:1d:18:b2:15:77:2a:0c:c0:db:1d:c6:ec:23:28:7e:f6:82:
         ad:e8:50:e9:01:4f:f4:79:3c:a0:81:f8:e7:79:66:b9:30:73:
         7e:c4:d8:e0:07:3a:47:bc:57:d3:b1:a9:e7:1b:64:8b:49:f0:
         15:31:3c:f3:72:2b:5d:7e:07:54:62:98:f5:50:b0:9a:bd:a6:
         6e:1f:d3:f1:47:36:63:73:c9:94:45:82:eb:02:49:b9:ec:84:
         df:92:d9:23:02:c6:34:f2:f9:ac:2c:82:68:af:33:37:b3:6e:
         30:98:a4:1a:65:00:18:c6:e3:6e:d1:db:45:1a:2f:d6:38:11:
         db:07:f1:87:ce:46:0d:69:99:ca:6f:b9:16:b0:9e:1d:a0:59:
         de:7c:e8:bb:17:d7:82:94:0c:38:d1:da:3a:23:fb:2b:16:22:
         f1:11:ea:4e:9d:f7:11:78:39:d4:20:62:ac:67:fe:ee:e6:de:
         21:21:94:1b:91:58:ae:70:59:a9:ba:1e:a7:c8:15:91:67:49:
         be:fc:75:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 14:57:32 2024 by rpki-client on console-fra.rpki-client.org