Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/b88e8e9d-d863-32b1-bedf-c6884509f836.roa
File:                     b88e8e9d-d863-32b1-bedf-c6884509f836.roa (raw, json)
Hash identifier:          qUTYtCVVbxQoRZso4bK0drfEvhSJmJSXBPi2Iew2KmQ=
Subject key identifier:   10:1C:4D:BA:95:07:86:BE:69:6F:8E:B9:FF:DB:04:59:2D:15:E5:01
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F432858458B0882D38501B939866D7400
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/b88e8e9d-d863-32b1-bedf-c6884509f836.roa
Signing time:             Sun 14 Apr 2024 13:00:34 +0000
ROA not before:           Sun 14 Apr 2024 13:00:34 +0000
ROA not after:            Sat 13 Jul 2024 13:00:34 +0000
asID:                     32133
IP address blocks:        2606:8e80:1000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8b:08:82:d3:85:01:b9:39:86:6d:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: Apr 14 13:00:34 2024 GMT
            Not After : Jul 13 13:00:34 2024 GMT
        Subject: CN=be4e1f53-801d-41d2-bc62-6b37d12eccdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e7:35:d8:e2:5f:82:dd:25:c7:8a:60:92:89:
                    94:fa:20:6c:65:8d:43:ee:f1:41:ce:dc:f5:ef:3f:
                    15:57:0d:68:f4:1b:24:c8:d7:5f:fd:5c:88:16:6a:
                    6d:d2:dc:af:61:1a:49:7b:62:f2:fa:9b:d0:b5:6d:
                    66:e5:92:62:68:06:4f:29:52:22:90:bb:cb:5f:9e:
                    88:df:ed:f1:83:45:e6:80:e5:ff:73:a4:0a:8a:0f:
                    26:5c:d0:7c:b8:a2:54:65:21:50:ce:35:83:9d:c2:
                    f0:37:4b:22:ab:21:3b:30:dd:08:34:c5:a7:26:b2:
                    ce:40:bb:c5:85:f0:46:9b:3c:5f:d3:0a:1e:df:3d:
                    eb:fe:de:d0:83:29:10:9d:81:b0:52:56:96:cd:e5:
                    af:9e:fe:36:ef:b6:76:35:0a:c5:77:5f:83:0d:81:
                    60:a8:df:73:03:c9:3f:27:d4:8c:93:4c:29:7e:25:
                    a4:b4:d2:32:50:e4:7c:f1:f3:e3:4f:2b:ba:00:bd:
                    c6:b2:ce:bd:47:e0:11:dd:55:c4:69:e8:e9:20:c9:
                    90:ae:c8:aa:f6:f0:79:77:2a:4e:fd:d6:8a:a0:89:
                    0d:cc:bc:34:08:a6:67:e8:f1:24:dc:7e:b6:08:73:
                    53:2e:fa:5a:56:c6:72:16:b9:86:cf:79:1f:aa:c0:
                    67:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:1C:4D:BA:95:07:86:BE:69:6F:8E:B9:FF:DB:04:59:2D:15:E5:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/b88e8e9d-d863-32b1-bedf-c6884509f836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8e80:1000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:bc:58:ed:5e:ec:a0:7a:79:ec:0a:06:2d:28:9d:39:09:aa:
         21:d5:37:3b:2a:27:93:91:59:99:41:6d:95:69:1c:74:fe:d0:
         7e:e8:cb:ba:11:7e:e3:75:e3:de:85:2d:ca:e0:cf:49:61:5d:
         2b:45:ad:8f:d5:26:f8:85:0a:65:3d:6b:bc:ee:2f:23:a8:dc:
         14:d3:dc:dd:dc:6f:52:ad:89:18:50:7e:0c:ee:ff:11:49:5f:
         43:40:5d:31:67:73:17:9b:70:64:58:1d:0b:40:26:84:b3:2b:
         66:c7:cf:89:cf:50:ca:f0:95:7a:11:08:f2:75:01:45:85:4e:
         1b:ba:0e:13:ff:2f:4c:30:e5:f4:d1:4d:aa:14:11:83:d0:3f:
         20:af:49:dc:fb:6a:e2:46:f7:f9:8e:ee:be:a7:f4:a7:07:01:
         f0:b8:3c:16:32:81:69:31:7c:1d:48:b9:6c:62:88:b6:21:bc:
         9e:77:0c:0c:8e:6f:98:f2:c4:f2:ad:c1:93:d6:b0:5f:84:11:
         a5:78:f0:fb:3d:29:4c:c9:7d:ef:ca:2b:0c:d8:da:a4:60:d2:
         07:5e:11:e6:06:ad:ff:49:8b:b6:c0:46:68:28:53:5d:d0:23:
         03:05:18:88:b6:d1:36:b9:8c:a4:e0:a8:c1:eb:08:02:7d:ba:
         02:82:0e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 19:16:44 2024 by rpki-client on console-ams.rpki-client.org