Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/994c1d70-188a-3327-8298-57754ad91524.roa
File:                     994c1d70-188a-3327-8298-57754ad91524.roa (raw, json)
Hash identifier:          hVoAV3itwG0HyrabFKL2XfaTwONnTf9NvAJcIo+j9HA=
Subject key identifier:   D5:A2:9B:4C:37:8E:35:D1:64:5C:B2:1C:E8:60:29:7C:05:60:EC:58
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858395C60F1DC96C5BC0A21CF0600
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/994c1d70-188a-3327-8298-57754ad91524.roa
Signing time:             Wed 24 Mar 2021 04:00:00 +0000
ROA not before:           Wed 24 Mar 2021 04:00:00 +0000
ROA not after:            Mon 14 Sep 2026 04:00:00 +0000
asID:                     13335
IP address blocks:        2606:4700:f4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:5c:60:f1:dc:96:c5:bc:0a:21:cf:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar 24 04:00:00 2021 GMT
            Not After : Sep 14 04:00:00 2026 GMT
        Subject: CN=687cf2ba-4c5a-45fd-aef1-e0cab7ffb5ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ab:c7:8e:c6:39:a7:ee:1e:34:a7:0e:b5:61:
                    79:bc:b6:dd:22:57:a2:26:3b:a8:2f:78:5b:9b:36:
                    6e:51:ad:ac:46:6c:25:35:c4:1f:24:ed:32:76:23:
                    d0:cc:0f:60:77:94:51:9a:02:2b:49:e8:31:04:de:
                    b2:2e:0d:13:c4:db:22:71:0e:1f:8b:99:02:86:79:
                    8f:af:17:1f:7b:52:31:91:c4:ef:da:ba:68:99:36:
                    f0:c2:eb:9b:9f:6a:1d:89:68:96:42:04:98:5f:4f:
                    50:c7:be:63:4a:e0:da:ee:af:06:5d:15:ba:0d:16:
                    e8:49:16:7a:a9:9d:10:d6:95:32:d6:1f:4b:c0:e1:
                    f5:e7:85:72:70:4c:1b:18:18:d8:1a:a3:94:5a:2b:
                    39:db:e0:f3:df:86:f9:c8:dc:e3:bb:ca:f0:da:6a:
                    55:46:d9:bd:e6:0d:8a:4d:1e:67:5b:91:a6:82:d9:
                    98:07:72:3b:cc:df:bb:08:71:b1:2b:ee:90:02:a7:
                    e8:25:9a:0a:4e:f2:b0:a8:0a:6a:c7:32:49:4f:dd:
                    34:3e:e1:c7:4c:e8:04:98:e2:b3:d0:35:00:18:c7:
                    b8:8d:12:18:3a:61:5e:93:86:48:ba:40:00:35:2b:
                    87:4e:67:16:ee:be:eb:2d:b0:84:8c:1b:c5:17:3a:
                    9c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A2:9B:4C:37:8E:35:D1:64:5C:B2:1C:E8:60:29:7C:05:60:EC:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/994c1d70-188a-3327-8298-57754ad91524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:f4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:cf:85:dc:be:0f:8f:24:1e:d4:cb:a1:12:59:44:b5:e7:7f:
         19:9d:88:b1:47:23:1d:db:75:c7:cb:5e:72:c0:09:c8:8d:57:
         49:e2:cd:8a:a7:42:5b:23:66:b6:aa:d4:93:4d:cd:f8:68:08:
         d4:ad:95:c2:35:dd:12:b1:0e:e7:66:ba:e2:2d:9b:82:b4:f0:
         18:2f:31:52:d4:fa:36:43:e3:74:c5:25:f4:b7:10:d5:2b:a5:
         4e:0c:8b:90:a9:6a:66:ee:2c:c2:54:fc:d0:a4:04:f2:5d:60:
         1e:9f:5a:ef:73:7d:02:f7:86:60:1f:e5:7d:91:68:87:e7:46:
         9f:91:00:03:62:26:7e:fc:7b:10:28:98:34:d7:55:7a:7e:1c:
         1d:6b:2e:63:9a:ad:9a:59:2d:b9:f1:f0:0a:1a:23:1a:81:2b:
         25:b2:8b:47:ed:6a:bb:0a:cd:13:2f:e0:4e:7c:26:79:ac:4e:
         c5:8c:62:1f:7b:54:ac:fe:56:9e:46:90:e8:b0:b1:e9:57:d4:
         ec:c2:1c:d9:ba:f4:d9:0b:ae:d6:04:2b:15:12:86:1f:ee:49:
         a3:51:fa:57:fa:6e:23:c3:3e:b3:11:d5:f6:f6:f5:ee:02:78:
         c4:4f:a1:2d:24:05:94:a8:a2:f8:5f:6d:fb:26:56:c0:6c:a9:
         84:35:1d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:32:02 2024 by rpki-client on console-fra.rpki-client.org