Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/7ee92927-0260-3189-ac5c-a8f84ee0a71d.roa
File:                     7ee92927-0260-3189-ac5c-a8f84ee0a71d.roa (raw, json)
Hash identifier:          WXyxqqCLYfbqqmgeUpcJCMyohkOnBUcIatm2IemUvIk=
Subject key identifier:   47:E8:7D:1A:1C:57:66:37:14:E2:8F:15:72:DD:16:3A:22:68:4E:20
Certificate issuer:       /CN=f4cb39e9-98be-46ba-abb7-91c4edafbe22
Certificate serial:       010D0C9F432858457AB590F9D02E66E6889D93E0
Authority key identifier: FF:49:33:63:43:FA:30:40:4C:0E:C1:8A:72:82:58:38:85:23:66:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/7ee92927-0260-3189-ac5c-a8f84ee0a71d.roa
Signing time:             Mon 08 Apr 2024 16:40:32 +0000
ROA not before:           Mon 08 Apr 2024 16:40:32 +0000
ROA not after:            Sun 07 Jul 2024 16:40:32 +0000
asID:                     398852
IP address blocks:        2605:fec0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/f4cb39e9-98be-46ba-abb7-91c4edafbe22.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/f4cb39e9-98be-46ba-abb7-91c4edafbe22.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:b5:90:f9:d0:2e:66:e6:88:9d:93:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4cb39e9-98be-46ba-abb7-91c4edafbe22
        Validity
            Not Before: Apr  8 16:40:32 2024 GMT
            Not After : Jul  7 16:40:32 2024 GMT
        Subject: CN=47436ffb-ee7d-474f-b3dc-387add851527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f1:a3:50:f4:25:14:6e:4c:ad:eb:ac:05:29:
                    d2:b7:26:46:d9:7d:a1:6f:d6:18:1e:70:4f:9a:dc:
                    d0:42:84:40:92:72:26:2f:6d:d9:52:fd:a2:d7:a0:
                    d6:33:8a:e2:51:b6:68:57:d8:d9:8a:44:94:7d:6f:
                    bc:bd:0f:56:38:37:31:64:8c:c8:b1:61:d7:92:04:
                    57:89:4b:99:32:20:d0:4b:fb:5c:59:4e:f4:cb:6b:
                    c0:a8:19:33:48:01:ca:02:ed:51:c4:35:41:3a:b7:
                    24:ec:06:e2:86:17:50:ec:d3:a2:4c:c0:81:0c:c8:
                    6a:20:1e:67:f6:8b:93:e0:e5:16:94:e0:7d:49:0b:
                    fa:ae:a7:05:3e:77:5f:48:7e:92:ab:15:96:6d:9f:
                    1a:36:b3:99:0b:d7:ed:58:d8:1f:0c:8b:50:c6:ee:
                    f1:8a:c4:f9:10:19:40:15:f9:c8:4f:f9:8d:e5:4e:
                    e4:ec:1a:d4:81:43:e0:9a:9a:ea:05:17:6a:e5:fe:
                    34:b8:12:fe:b0:93:59:e6:97:ec:55:f3:27:ee:e1:
                    1c:db:c2:3f:2a:92:bc:df:df:ce:63:64:10:41:06:
                    4c:4c:3f:8e:37:21:58:69:84:a0:9f:85:a8:df:32:
                    0f:f1:01:a5:28:24:c8:4f:d9:ed:cd:c6:71:be:82:
                    00:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E8:7D:1A:1C:57:66:37:14:E2:8F:15:72:DD:16:3A:22:68:4E:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/7ee92927-0260-3189-ac5c-a8f84ee0a71d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/f4cb39e9-98be-46ba-abb7-91c4edafbe22.crl

            X509v3 Authority Key Identifier:
                keyid:FF:49:33:63:43:FA:30:40:4C:0E:C1:8A:72:82:58:38:85:23:66:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:fec0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:ad:d8:75:f8:f1:f0:6e:9f:dd:6e:96:0c:13:8e:93:a0:f3:
         57:94:46:50:f2:52:9c:05:e8:d6:ca:1b:bf:d0:90:9e:17:79:
         4e:97:3f:d7:87:1a:c9:72:17:1b:ab:5f:ec:3c:4c:bf:c5:f6:
         6c:29:47:1b:5f:dc:2f:c2:f2:27:1b:00:da:7b:29:78:17:64:
         7d:23:2e:7e:ac:b1:c3:fa:5e:4f:a0:0a:10:57:9c:73:bc:29:
         37:8f:55:60:a8:27:7b:35:20:1f:19:3c:60:20:e9:32:cb:5f:
         4f:03:da:28:4a:f2:8f:4e:db:4c:a8:14:18:04:75:72:e9:bd:
         a6:06:63:8a:b3:e3:ff:49:bf:e3:ce:38:b2:a6:81:5e:21:aa:
         52:a9:bc:c0:43:93:3f:83:f3:e1:2f:91:29:b2:a0:49:b7:df:
         65:f5:44:49:00:e1:b9:da:82:eb:b0:1f:4c:4b:78:a3:54:ea:
         fa:20:ad:41:84:74:da:fb:06:a0:ee:11:e6:13:6e:53:60:14:
         09:dc:df:36:35:aa:74:a1:30:ce:98:ee:51:17:b5:e1:25:d9:
         1f:67:75:2b:be:13:ff:80:ec:49:06:67:19:7f:7d:d8:b1:27:
         d1:fc:02:59:a2:e7:a9:a5:1c:37:11:7d:ab:f2:9f:65:be:0a:
         2d:16:82:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 21:46:09 2024 by rpki-client on console-fra.rpki-client.org