Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/1c4602cd-ea91-347e-ace7-4e332d0fe21c.roa
File:                     1c4602cd-ea91-347e-ace7-4e332d0fe21c.roa (raw, json)
Hash identifier:          Ws6on4WKWAxlRaZIX4H2qpOTL1eeqe+PvAxH7PsOcz4=
Subject key identifier:   15:F3:75:B8:99:22:21:BD:24:CA:2D:03:7B:D5:66:4C:61:39:02:5A
Certificate issuer:       /CN=cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2
Certificate serial:       010D0C9F43285844FB600BF99FEF784A6FDC0C7D
Authority key identifier: 66:97:7D:A4:1F:C6:17:1B:0A:5F:EE:F7:7A:C7:DC:54:DE:B5:EE:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/1c4602cd-ea91-347e-ace7-4e332d0fe21c.roa
Signing time:             Fri 23 Feb 2024 02:00:26 +0000
ROA not before:           Fri 23 Feb 2024 02:00:26 +0000
ROA not after:            Thu 23 May 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        2604:640:108::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fb:60:0b:f9:9f:ef:78:4a:6f:dc:0c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2
        Validity
            Not Before: Feb 23 02:00:26 2024 GMT
            Not After : May 23 01:00:26 2024 GMT
        Subject: CN=e50b264a-4243-48b1-8b79-c110e9a40fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4a:6a:27:7e:a5:54:c9:ee:54:ee:3b:93:1b:
                    24:99:bd:6e:a0:3d:06:1b:db:0b:03:5e:f3:4b:99:
                    86:d5:99:64:b8:dc:c9:19:24:52:1b:ea:73:1c:d1:
                    90:fe:8c:ec:38:ca:83:24:0c:6e:02:1d:b0:a8:d7:
                    51:e6:25:f1:d6:d3:bc:58:da:ac:3f:0f:8a:3a:d8:
                    f5:33:55:36:27:a7:c7:1a:fc:c6:c8:60:84:cd:05:
                    4e:39:31:47:55:f0:f3:05:45:50:ec:be:56:54:86:
                    6a:b7:6c:d4:d6:d8:8e:84:23:c9:83:84:81:87:e8:
                    f6:fa:90:47:93:2c:eb:4f:ab:f8:5e:bd:67:c1:44:
                    2d:04:7d:cb:14:77:95:df:c1:34:fc:f9:89:ec:68:
                    43:8e:20:31:f9:58:bc:e0:0d:22:35:dd:55:72:23:
                    51:d1:0a:e5:58:c3:fa:cb:80:eb:c9:45:8e:50:da:
                    00:ea:8b:75:b2:86:ae:47:7c:24:95:91:0a:56:4a:
                    8a:fd:fc:29:68:19:38:b0:cc:01:30:b1:33:f4:97:
                    6c:66:b0:61:f6:77:66:dd:cd:8b:aa:ce:28:30:9f:
                    43:22:0e:08:2f:0f:f8:9c:45:eb:e8:f2:ae:59:b8:
                    2e:82:da:47:83:ef:d6:d7:76:7f:89:4f:b9:3f:67:
                    41:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F3:75:B8:99:22:21:BD:24:CA:2D:03:7B:D5:66:4C:61:39:02:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/1c4602cd-ea91-347e-ace7-4e332d0fe21c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.crl

            X509v3 Authority Key Identifier:
                keyid:66:97:7D:A4:1F:C6:17:1B:0A:5F:EE:F7:7A:C7:DC:54:DE:B5:EE:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:640:108::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:56:79:bc:3c:25:70:14:23:c1:e8:2b:f6:3b:39:1c:cd:4f:
         36:58:de:ab:ab:94:99:14:33:40:91:46:26:dd:bc:a1:6a:28:
         4a:17:26:cc:c6:b2:c2:8e:0a:60:97:cd:07:f0:48:e9:a7:ae:
         75:fb:51:6d:95:93:f8:40:65:74:77:0c:b6:58:c2:d8:6f:da:
         5b:69:d9:f1:fc:62:f6:0b:2e:8c:c3:ec:79:f8:c5:4a:85:28:
         e0:e6:ef:e7:e9:e1:34:38:9b:e8:12:76:83:78:7a:4e:19:f2:
         81:b7:1e:4b:2d:49:28:11:57:f7:90:f2:1f:a6:62:1f:33:8e:
         71:f7:36:b4:0d:01:1c:01:37:31:77:38:74:84:44:26:b9:a9:
         13:ae:9d:3c:15:4e:13:e3:54:b0:28:7b:d8:27:9a:1f:84:bc:
         92:c3:03:e8:26:5d:20:2b:00:e3:76:0d:9a:f4:c6:c2:59:e2:
         d6:b3:37:d6:5b:5f:20:31:f6:b6:e6:04:32:e8:0e:a4:6b:54:
         5c:89:71:34:83:94:25:0e:46:75:1c:e6:46:52:b4:c6:e3:fb:
         25:0a:6a:31:64:fc:9d:d4:7c:ff:55:7d:db:d2:79:33:4d:b2:
         3d:a1:30:45:14:9c:f8:ee:8a:2a:49:29:7b:08:a6:4f:56:6b:
         45:62:81:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:03:15 2024 by rpki-client on console-fra.rpki-client.org