Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/98dd0139-139c-32dd-9592-7f9932a66fc0.roa
File:                     98dd0139-139c-32dd-9592-7f9932a66fc0.roa (raw, json)
Hash identifier:          XfyqvM8qsLUhIxr/stpyMLB5q3zuMTBfK8/4ROKfnyQ=
Subject key identifier:   65:66:F2:4D:37:B7:90:EF:4F:25:8B:51:AD:BE:E4:FB:6A:F4:B5:EB
Certificate issuer:       /CN=cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2
Certificate serial:       010D0C9F43285844FB600C12060FF08A59D0DA30
Authority key identifier: 66:97:7D:A4:1F:C6:17:1B:0A:5F:EE:F7:7A:C7:DC:54:DE:B5:EE:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/98dd0139-139c-32dd-9592-7f9932a66fc0.roa
Signing time:             Fri 23 Feb 2024 02:00:26 +0000
ROA not before:           Fri 23 Feb 2024 02:00:26 +0000
ROA not after:            Thu 23 May 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        2604:640:108::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fb:60:0c:12:06:0f:f0:8a:59:d0:da:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2
        Validity
            Not Before: Feb 23 02:00:26 2024 GMT
            Not After : May 23 01:00:26 2024 GMT
        Subject: CN=93e5684a-9825-41bb-b7b9-bd0dd4b74077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:55:5b:96:8e:8a:0f:32:39:29:30:fb:11:b3:
                    a6:a1:2b:f5:cd:74:24:c1:4d:1a:24:8b:ba:a0:7b:
                    0f:b1:5d:e9:c6:71:21:dd:ba:c2:ed:ff:62:44:7a:
                    82:37:1e:e8:d3:91:12:ba:aa:6f:c9:b9:3c:a0:63:
                    72:91:e9:a3:87:07:9b:ae:14:05:4e:ca:d1:c6:65:
                    69:72:0b:e8:59:f9:bd:0f:21:98:c3:26:2d:c8:ee:
                    30:db:d9:3c:cc:13:3e:03:4a:c6:66:6b:ac:43:d5:
                    8e:d7:11:ad:f7:b9:c9:fa:99:85:51:86:2f:0f:80:
                    c8:f3:39:4a:3d:17:67:e9:58:01:7c:79:db:5c:99:
                    b5:a7:98:85:d5:0e:00:2e:3a:27:36:2a:16:f3:65:
                    88:99:f5:26:0a:49:34:94:22:37:d9:5a:a6:fb:da:
                    b7:74:71:f6:8e:f8:fe:21:14:5a:21:eb:b0:1b:ce:
                    9c:0b:57:87:f7:3c:e7:ab:5a:45:77:b8:a5:18:ed:
                    9a:45:7f:2b:bb:26:a8:65:2e:f5:a4:47:99:3a:21:
                    e0:b3:fa:9f:8e:f1:b6:7b:70:bf:ee:f6:f5:57:19:
                    c7:96:01:e9:3d:17:97:ce:07:9c:ac:1f:3a:dc:76:
                    d6:8f:e3:53:55:74:bf:15:72:90:37:b5:04:6b:7d:
                    f3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:66:F2:4D:37:B7:90:EF:4F:25:8B:51:AD:BE:E4:FB:6A:F4:B5:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/98dd0139-139c-32dd-9592-7f9932a66fc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.crl

            X509v3 Authority Key Identifier:
                keyid:66:97:7D:A4:1F:C6:17:1B:0A:5F:EE:F7:7A:C7:DC:54:DE:B5:EE:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:640:108::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:5f:9a:e8:7f:64:b5:3b:0e:be:22:02:5f:33:d5:75:c4:f2:
         ad:b5:a2:99:db:74:23:49:6d:89:9a:93:a4:54:2a:35:35:55:
         99:e1:7d:af:96:ea:7c:6e:d9:cb:67:6f:ba:59:09:80:86:cb:
         78:4e:66:17:d0:8e:22:45:bb:b2:5f:10:c6:ae:1b:4d:14:f8:
         a6:a6:2f:0b:57:c8:05:7e:12:90:4e:a1:a1:0b:74:70:14:3b:
         57:d0:bc:e2:19:87:97:83:6b:ba:46:d4:c3:b6:88:48:f1:77:
         c2:77:e9:ea:66:8a:37:f3:cf:cb:b5:49:dc:45:ea:ba:b2:7c:
         27:72:9a:9b:f2:c1:fa:3b:b2:86:bb:b9:66:62:3d:37:9a:e5:
         4f:90:8f:5c:cb:9f:5a:c4:b7:0d:e9:9a:d5:46:05:ad:e4:0c:
         a1:06:29:db:70:7e:5e:d5:2f:dc:fb:8e:1e:0e:f1:a0:9d:bf:
         13:41:e1:2b:9d:16:a5:95:1e:62:2c:8d:8a:cc:c3:cc:0a:1c:
         8e:56:7a:1b:4c:4c:c8:4b:38:97:cd:8b:fd:85:1f:14:37:d0:
         eb:7e:98:8f:42:8b:f5:d9:22:d0:80:64:ab:4d:9c:f3:b3:14:
         c8:43:d2:71:ae:1e:19:16:11:16:2d:b0:b5:e7:11:48:2b:bb:
         a0:80:a6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:23:38 2024 by rpki-client on console-fra.rpki-client.org