Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/854c42fa-3e10-360c-b939-919df3fc02c0.roa
File:                     854c42fa-3e10-360c-b939-919df3fc02c0.roa (raw, json)
Hash identifier:          6l64Yym6wY34A6KCK+njKAPVPxQ/gb3S6GvoHM/XtIc=
Subject key identifier:   45:B2:DE:DB:76:0D:E3:B4:1E:C7:77:04:5F:77:03:32:20:00:5F:D5
Certificate issuer:       /CN=5bac54b9-66dc-4956-863d-1804cfb9e853
Certificate serial:       010D0C9F4328584581430AA8A2A46A8FB0E85780
Authority key identifier: 7F:4A:9A:A7:40:62:CD:6D:BF:70:19:16:CE:FD:9B:2A:27:E6:2E:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/854c42fa-3e10-360c-b939-919df3fc02c0.roa
Signing time:             Thu 11 Apr 2024 01:00:25 +0000
ROA not before:           Thu 11 Apr 2024 01:00:25 +0000
ROA not after:            Wed 10 Jul 2024 01:00:25 +0000
asID:                     399077
IP address blocks:        2606:4dc0:ffff::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:81:43:0a:a8:a2:a4:6a:8f:b0:e8:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bac54b9-66dc-4956-863d-1804cfb9e853
        Validity
            Not Before: Apr 11 01:00:25 2024 GMT
            Not After : Jul 10 01:00:25 2024 GMT
        Subject: CN=1d0b8162-1016-4ef9-b32c-43dfb08c78ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:bd:0f:d0:66:3d:e8:d2:d0:53:fa:26:a0:f8:
                    f9:fd:ff:25:82:3c:71:49:b8:03:11:21:13:46:0d:
                    75:80:b2:0a:35:29:ad:c2:3a:72:ed:cc:17:88:7e:
                    e5:5d:97:e9:cc:d5:23:08:99:d2:b0:9d:fd:0f:9b:
                    2c:fc:74:d1:cd:9e:66:c8:2f:0c:19:15:f2:5f:5f:
                    13:e7:e1:5a:95:c1:fc:15:8d:ae:6d:60:2e:61:24:
                    ae:de:be:0d:ac:cb:f4:9a:1c:39:a9:11:67:d1:bb:
                    b2:f8:44:06:01:ee:94:21:44:f2:06:7b:93:7f:22:
                    35:73:7d:e7:3e:c9:43:9a:90:30:df:fa:50:bf:71:
                    7e:da:3c:5f:a1:be:87:94:75:4f:eb:53:16:d9:09:
                    e4:ea:2e:81:62:4b:7e:c2:e4:65:46:8e:74:a8:30:
                    f2:36:c4:39:e3:40:22:91:58:1b:5a:7d:77:22:33:
                    06:bc:f5:de:27:d6:d0:6a:62:f5:c3:62:06:9d:49:
                    df:70:3d:a6:d3:8c:9e:70:69:da:23:5a:ab:f7:7e:
                    26:f7:de:41:58:aa:7e:c4:f6:40:db:8b:db:8a:a6:
                    df:74:44:63:d5:ec:a9:13:29:ca:0f:c4:4a:e1:9b:
                    98:df:c8:97:6e:35:9c:ae:3c:3b:e7:f9:8f:e6:34:
                    0f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B2:DE:DB:76:0D:E3:B4:1E:C7:77:04:5F:77:03:32:20:00:5F:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/854c42fa-3e10-360c-b939-919df3fc02c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.crl

            X509v3 Authority Key Identifier:
                keyid:7F:4A:9A:A7:40:62:CD:6D:BF:70:19:16:CE:FD:9B:2A:27:E6:2E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4dc0:ffff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:68:48:c4:32:34:76:da:32:ee:53:5a:0f:6d:18:17:27:fe:
         bf:71:de:bc:d0:c6:3f:e4:9d:66:79:a1:d9:ba:dc:79:c8:28:
         7e:e0:3b:a0:3f:c2:e4:97:00:13:9d:89:ff:ef:45:05:f6:e7:
         bc:e1:12:11:4e:d8:18:c8:1d:6d:9f:b5:28:8f:a5:78:4e:a0:
         8f:77:b1:da:2c:2b:5f:28:15:ef:0e:f7:9b:2c:13:a8:60:39:
         ea:9c:eb:0b:a7:5c:e7:bb:32:a6:c2:ff:dc:05:73:f5:f4:b4:
         a1:eb:13:ce:8b:4a:78:4a:83:51:79:7d:e4:b2:86:97:cb:79:
         a3:52:83:af:38:ff:89:f8:6a:b1:6b:45:c9:9b:8b:ed:ad:8f:
         af:73:27:14:f2:ac:a5:1c:a6:cf:f8:a6:03:db:de:2c:1b:b1:
         e0:73:cb:14:58:a1:33:de:e4:d4:21:95:64:42:f6:af:d3:ce:
         75:62:27:a2:c3:cd:0a:dc:f8:79:59:38:fd:e0:4a:9a:3f:f6:
         c5:3b:b2:89:de:be:89:9e:7f:fd:87:40:bf:c5:0c:14:48:2a:
         1f:81:c2:7b:e0:0e:fb:fc:17:c7:1e:d4:3b:6a:ae:06:c7:87:
         34:9d:03:e5:ef:49:b8:8a:6a:eb:a9:17:77:fe:2a:63:eb:b7:
         32:d3:d5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:12:03 2024 by rpki-client on console-fra.rpki-client.org