Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/6ea97c3a-6f34-3e64-8b41-667f0bc14b5a.roa
File:                     6ea97c3a-6f34-3e64-8b41-667f0bc14b5a.roa (raw, json)
Hash identifier:          dwADZra4RZKe7kDcr+PtL9dCqh2Edtm6NoN3VPbtBbE=
Subject key identifier:   FA:D9:80:22:78:A6:E7:44:6B:EB:12:AF:D3:4D:2B:F3:41:D2:B8:AE
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F43285845A2C3438DCF77232B52097F54
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/6ea97c3a-6f34-3e64-8b41-667f0bc14b5a.roa
Signing time:             Tue 23 Apr 2024 01:00:25 +0000
ROA not before:           Tue 23 Apr 2024 01:00:25 +0000
ROA not after:            Mon 22 Jul 2024 01:00:25 +0000
asID:                     14618
IP address blocks:        2607:28c0::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a2:c3:43:8d:cf:77:23:2b:52:09:7f:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: Apr 23 01:00:25 2024 GMT
            Not After : Jul 22 01:00:25 2024 GMT
        Subject: CN=1b55334d-b0f9-48fa-bcf8-8f6f39af4656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8c:a3:79:6a:4f:6a:47:60:8b:3c:54:f6:db:
                    01:5a:d3:c6:76:78:9f:1a:82:73:a9:52:de:f0:43:
                    97:1d:3a:e8:83:10:16:53:a5:7f:c2:18:27:af:79:
                    2b:4c:1d:d5:8c:3c:f0:35:0a:7a:4f:20:b5:22:d2:
                    a8:ed:4a:67:23:79:9b:16:ba:28:c3:39:1f:c7:f4:
                    34:23:67:e0:8e:7e:0f:8a:18:8c:01:48:c8:63:e0:
                    c6:1c:41:43:8a:19:48:c8:fe:6e:55:df:3b:88:05:
                    9b:54:3c:78:af:c6:2b:9f:b5:a0:c7:f8:ea:ce:41:
                    32:d9:bc:e8:f4:15:1d:ce:9b:e1:7d:0c:1f:89:b8:
                    a4:31:75:4e:7a:d4:2a:f2:35:4d:6b:dd:b5:af:b0:
                    fd:fc:99:df:35:a6:19:25:c0:2a:d6:b4:ae:70:76:
                    f6:2c:28:95:ee:73:bd:94:33:8b:54:2f:e0:f2:2d:
                    71:e5:fd:f6:54:45:3a:e8:b4:ce:65:2e:eb:6a:4a:
                    63:1b:01:4d:7c:bb:c8:bd:f9:7c:e3:61:fc:12:33:
                    c5:4d:3a:cd:ce:61:b3:67:b7:f5:4d:4f:0a:92:14:
                    fb:6d:17:5d:08:94:df:c6:84:1c:8d:2e:66:4a:43:
                    33:79:34:db:37:f5:bb:d1:4c:1d:69:61:c4:bd:c5:
                    78:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D9:80:22:78:A6:E7:44:6B:EB:12:AF:D3:4D:2B:F3:41:D2:B8:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/6ea97c3a-6f34-3e64-8b41-667f0bc14b5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:28c0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:d5:a3:63:af:9b:2d:66:aa:b4:68:b1:41:80:63:0a:f0:48:
         e9:93:1f:2e:bc:66:9f:18:da:f6:90:fc:91:d4:27:bb:96:12:
         78:a7:8b:fb:27:8a:b9:bc:5a:62:ab:9a:67:2c:3a:28:d8:1d:
         69:06:6b:00:19:f3:9c:72:af:36:b5:d9:dd:4e:3d:cf:70:5c:
         9c:bf:8c:3c:14:6b:c5:3e:94:c4:a0:d8:37:df:31:c3:18:f6:
         6b:61:9d:43:22:0c:06:ad:26:5b:ae:93:e5:a6:38:12:ef:61:
         77:db:0e:2e:8e:c5:17:9c:37:fc:1c:72:d4:d0:d7:bc:3c:5c:
         27:34:e4:aa:ac:a7:b5:d8:78:6d:d7:6d:da:ba:9c:f4:6b:b1:
         3b:76:81:f9:20:cf:96:e1:3a:db:03:e0:46:57:bd:62:94:94:
         42:2b:ac:b2:9b:e7:56:5c:7f:02:fa:f7:d4:15:9d:3f:eb:f4:
         e2:6a:5d:08:d0:e7:5f:cb:f7:5f:84:d7:67:44:f4:64:2e:cb:
         1f:30:8e:35:e5:ad:d6:99:82:00:6d:f1:e2:d0:53:e0:5f:50:
         f7:10:f0:7c:12:c1:fe:95:c8:fb:31:18:d5:05:02:bb:f9:47:
         0a:09:59:64:c4:e9:ba:ac:a3:32:a7:e3:a7:96:f6:0a:1d:30:
         f5:38:58:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:25:31 2024 by rpki-client on console-ams.rpki-client.org