Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bd50088a-f108-3c4e-b6e3-4d9562fc1db1.roa
File:                     bd50088a-f108-3c4e-b6e3-4d9562fc1db1.roa (raw, json)
Hash identifier:          aN5tvTuU29AIL85yshOEyB87zWWb5iL2bFZjaiLmRU4=
Subject key identifier:   DD:F6:27:78:45:13:29:96:45:06:78:AF:5C:FA:C8:BA:21:1D:E5:BF
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858385AE6D8E93F0B227EF139FBC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bd50088a-f108-3c4e-b6e3-4d9562fc1db1.roa
Signing time:             Tue 22 Dec 2020 05:00:00 +0000
ROA not before:           Tue 22 Dec 2020 05:00:00 +0000
ROA not after:            Sun 14 Jun 2026 04:00:00 +0000
asID:                     13335
IP address blocks:        2606:4700:100::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:5a:e6:d8:e9:3f:0b:22:7e:f1:39:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 22 05:00:00 2020 GMT
            Not After : Jun 14 04:00:00 2026 GMT
        Subject: CN=db52158b-225c-48c9-838c-6a8954d75021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d1:88:f8:60:4f:9a:ce:3a:63:bb:18:4d:62:
                    d0:11:9e:e1:27:6c:00:ae:42:a6:7f:69:15:72:1c:
                    62:ec:ea:dc:45:5d:d0:18:6e:44:6a:20:60:a3:84:
                    91:24:3c:73:0e:4e:f6:89:1a:07:07:f6:6c:50:2a:
                    53:7f:62:cd:eb:30:cc:20:fa:eb:45:48:7f:b7:c5:
                    1a:b8:cf:81:29:aa:35:10:1f:71:35:63:d3:c2:d2:
                    9f:27:9d:8a:d4:3c:ca:77:d6:2e:82:40:8e:4f:1c:
                    86:76:0e:48:91:24:0f:3d:fd:44:38:93:91:67:bc:
                    07:94:eb:dc:07:ae:43:3b:87:ef:d0:63:77:3d:74:
                    75:d4:ff:e1:34:18:80:de:f5:ab:02:2c:e6:2c:cc:
                    b0:ae:ff:bf:47:e1:f5:a4:4a:45:68:4c:9a:6a:2a:
                    eb:95:1b:3b:4d:45:ef:bb:ff:52:bf:67:2c:d1:8f:
                    25:82:60:29:4d:a5:9d:80:74:e5:98:e1:2f:fc:90:
                    40:c4:d8:91:67:2d:cf:55:98:89:8c:ac:a7:56:1b:
                    eb:6a:b5:04:d1:49:70:f1:27:eb:c5:48:a6:0c:fb:
                    3c:e7:a6:a4:4e:09:ce:9f:e2:ea:f0:c5:27:4f:f2:
                    92:3c:25:da:06:be:5e:24:c9:cd:99:08:65:71:c8:
                    8d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F6:27:78:45:13:29:96:45:06:78:AF:5C:FA:C8:BA:21:1D:E5:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bd50088a-f108-3c4e-b6e3-4d9562fc1db1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:6d:28:0a:b5:00:fa:ee:0e:8e:6c:c2:7f:57:23:da:d2:75:
         33:b5:f5:ad:fc:df:ab:0a:68:e2:cc:86:50:29:91:55:2c:d8:
         af:65:42:aa:03:8d:29:4e:8e:f4:f5:77:bc:fc:c6:81:b4:bf:
         4d:f0:6c:5b:92:d6:b4:af:d9:49:49:8d:00:27:25:82:5f:d6:
         fa:50:02:00:cf:98:13:6e:38:8f:cb:1b:a1:84:06:99:79:cf:
         4a:85:0e:63:d6:9a:44:70:62:c0:ce:a0:97:b2:08:e9:d7:39:
         c9:71:f9:d9:cb:1c:76:c6:df:a9:f3:7e:7e:4c:a9:96:34:7c:
         8f:a9:03:2a:6e:37:54:b5:fb:83:9a:64:57:d5:4e:0f:42:e1:
         47:87:8a:ed:21:0c:09:69:6d:56:91:53:cf:89:ad:f9:5d:91:
         87:a7:3f:26:41:be:37:80:9b:32:ff:47:5a:bd:34:a3:8f:81:
         76:60:e7:5f:af:14:1f:03:0b:e5:a8:6f:f1:3f:b1:cf:c1:8e:
         3a:d3:86:81:29:d2:68:a9:29:fa:03:32:c0:f2:60:16:a8:05:
         82:83:af:49:de:81:85:fc:cf:f6:fb:ae:09:68:75:d5:80:3d:
         7b:82:53:c4:78:b9:5a:80:24:7a:d7:1d:15:f3:1a:39:e4:7e:
         82:d8:0d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 00:42:34 2024 by rpki-client on console-fra.rpki-client.org