Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6b606ed5-22f4-3c52-aa04-c656fa060ad8.roa
File:                     6b606ed5-22f4-3c52-aa04-c656fa060ad8.roa (raw, json)
Hash identifier:          W40uACDb957S5KdsYtONkRbKrNF2ElYUO9WPqI1n6nM=
Subject key identifier:   80:54:B2:A6:9A:D4:56:51:D0:7E:FA:6D:43:AD:02:1D:87:45:BB:F8
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584598FE0C7DD2CB6BE83D5A1BA0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6b606ed5-22f4-3c52-aa04-c656fa060ad8.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     1225
IP address blocks:        2001:418:1456:b11::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fe:0c:7d:d2:cb:6b:e8:3d:5a:1b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=50008b62-110d-4a94-b394-cf1c6bf0ca3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fa:28:c7:f3:5f:5e:67:b7:17:e1:84:63:8a:
                    5e:65:a9:5a:36:91:94:09:1f:fa:69:e1:9b:ce:9b:
                    1b:22:ba:84:bc:d9:15:bf:68:10:3c:a3:2d:fd:7e:
                    bf:51:c9:a1:40:aa:27:50:0b:72:42:e8:75:c3:5f:
                    b3:54:be:87:6c:d8:3b:5c:dc:b4:6b:be:80:26:62:
                    64:fe:24:8e:be:72:a0:c9:dd:16:c1:53:50:4c:a0:
                    57:df:6b:ed:8c:19:b9:e9:2c:96:db:95:c9:d9:a3:
                    ef:43:4c:55:19:08:63:cc:ac:1a:bc:ef:2e:e9:e8:
                    86:34:e5:11:5b:72:0d:41:bc:f5:58:87:f7:e2:f5:
                    e3:76:d5:25:a6:aa:ad:df:13:ca:87:16:2e:16:f9:
                    8e:09:e8:19:d4:3d:f4:70:d5:78:13:01:e0:1f:63:
                    9a:fe:1c:36:f7:72:8c:d3:10:06:11:14:0d:22:a0:
                    e8:c0:46:f4:1b:fe:49:d4:a4:c4:90:fb:36:3c:35:
                    cc:d3:c7:bb:2a:70:d7:03:60:e4:36:29:3c:1c:96:
                    05:a0:e4:e3:bc:62:b6:e7:5d:c8:c5:05:2d:e1:4b:
                    78:e4:bb:1f:11:6d:57:d6:ba:44:16:18:df:84:a1:
                    18:94:fe:0a:f1:02:4f:46:e3:7a:46:db:27:50:bc:
                    af:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:54:B2:A6:9A:D4:56:51:D0:7E:FA:6D:43:AD:02:1D:87:45:BB:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6b606ed5-22f4-3c52-aa04-c656fa060ad8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1456:b11::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:fe:c6:d0:db:51:f9:86:bf:6e:ce:bb:71:a6:6e:b2:3f:22:
         84:30:cb:b8:91:77:7b:47:1c:34:65:e5:ed:d9:25:74:1e:14:
         17:98:b7:c8:fd:24:b7:8c:a3:c2:52:dd:86:a6:1a:b0:28:77:
         57:8c:ec:b7:5a:5f:b5:17:1a:73:e7:f1:26:ab:0e:46:4a:a8:
         47:3a:95:7b:db:68:d1:69:9f:65:82:e0:1f:23:60:b6:48:98:
         7d:65:87:34:20:56:e5:ef:6c:83:9d:b0:8b:d8:b9:57:4a:06:
         24:0d:c9:10:20:ba:70:bf:f2:46:d5:69:ab:ce:35:db:5d:2a:
         0d:2f:4e:42:fc:47:21:f4:eb:60:62:f8:3d:ee:00:48:c9:9d:
         1d:b4:83:6e:fd:15:53:4a:d4:1d:cd:1f:2c:c2:1c:de:a5:d9:
         da:fe:e9:79:ea:54:b9:2a:74:a1:1b:d5:8e:b9:8e:04:4a:c2:
         4c:d2:df:d5:51:86:e6:00:fc:eb:da:77:6c:53:5c:01:b2:6a:
         2a:05:9b:69:32:52:d4:8b:d3:8e:53:01:ea:90:01:23:b3:90:
         aa:71:30:36:6c:9d:91:55:8a:75:a7:ae:0c:79:67:39:f5:26:
         a0:ee:02:41:32:4e:3a:ec:63:56:bd:14:8f:3b:85:78:d9:13:
         ec:b4:d1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 11:59:26 2024 by rpki-client on console-fra.rpki-client.org