Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/6e47fe5d-d664-31f9-ab57-4bcbf8d213fc.roa
File:                     6e47fe5d-d664-31f9-ab57-4bcbf8d213fc.roa (raw, json)
Hash identifier:          bKvRq61I14ooTNDLKTNBb8L7FcIsPNaD0RTVWRvbfi8=
Subject key identifier:   ED:CB:27:43:8B:E1:E3:29:E7:35:A6:AB:E9:96:4A:C1:87:74:CB:6E
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285845025AD770249F6F4A32858440
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/6e47fe5d-d664-31f9-ab57-4bcbf8d213fc.roa
Signing time:             Sun 25 Feb 2024 14:00:34 +0000
ROA not before:           Sun 25 Feb 2024 14:00:34 +0000
ROA not after:            Sat 25 May 2024 13:00:34 +0000
asID:                     62651
IP address blocks:        2604:c980::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:02:5a:d7:70:24:9f:6f:4a:32:85:84:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Feb 25 14:00:34 2024 GMT
            Not After : May 25 13:00:34 2024 GMT
        Subject: CN=23a4e23a-e7a5-46d7-a2e1-9374a6b607c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:92:09:e4:b0:d1:1e:72:ce:a6:9f:f8:da:3d:
                    84:33:5e:09:c8:41:bb:a8:42:8c:a1:1f:66:9f:50:
                    ee:ce:bb:25:b8:fa:87:3d:a9:1e:c0:6e:59:c3:ec:
                    d9:fd:36:81:00:36:9c:15:63:94:91:ae:19:fa:61:
                    b9:65:bc:d4:6c:29:62:89:a3:24:a6:95:0a:1e:7e:
                    2c:6b:8e:df:f6:48:a5:29:47:aa:48:32:fe:05:19:
                    0b:f3:88:5e:3a:6e:98:7b:4f:ad:38:26:94:1b:c1:
                    cc:a9:d0:cc:7d:bd:6c:64:71:ae:16:8f:d9:07:6d:
                    f7:46:2b:50:32:47:2f:bf:da:f5:d9:43:c9:3c:3c:
                    e9:ba:e2:28:cc:d7:ac:f6:af:ff:8e:ea:6a:fb:96:
                    21:27:76:4a:22:08:65:7b:c1:d7:8b:5c:73:e7:74:
                    ca:97:80:12:54:5d:26:a9:a7:4a:b9:c8:1a:2e:5e:
                    43:d5:5a:cb:3d:d2:e7:ab:31:77:f2:e4:94:61:62:
                    be:7d:3a:33:30:1e:69:9f:76:82:f0:08:18:3a:e6:
                    66:54:80:ed:55:e2:83:e2:02:5c:3f:28:69:b2:b7:
                    01:8e:67:a5:41:d3:4e:b2:7f:07:c3:96:52:26:c4:
                    35:9e:c4:f5:80:2b:0e:9f:b9:8a:d0:b3:2d:93:c6:
                    ca:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CB:27:43:8B:E1:E3:29:E7:35:A6:AB:E9:96:4A:C1:87:74:CB:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/6e47fe5d-d664-31f9-ab57-4bcbf8d213fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c980::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:c6:0a:3f:47:9b:24:29:c7:89:41:a2:58:16:5f:84:66:1d:
         61:70:8f:39:16:79:b2:23:52:4d:35:aa:10:4a:0b:49:b0:d5:
         68:4a:9b:2a:9d:53:56:50:f0:83:ab:1e:bb:09:1c:66:4e:bf:
         8d:19:f1:5f:cb:4c:fe:b2:31:3e:d6:78:9a:dc:6e:f3:43:e0:
         63:95:6f:b4:19:45:28:8e:11:4c:f6:7e:75:72:d6:7e:04:26:
         59:57:39:c1:a8:e7:50:d4:4e:af:ec:ac:3e:7b:f9:70:12:4e:
         74:97:2f:cf:14:1f:4e:ab:ea:a2:54:70:9e:8b:2c:51:ab:4f:
         f1:b4:fe:60:4e:bc:e2:73:88:81:8f:2d:ac:15:77:17:0a:92:
         8b:5a:3f:4f:f4:62:35:bf:8f:ca:6b:cc:de:53:ba:59:bb:83:
         bc:12:88:32:23:c8:e8:4f:03:8d:7f:94:80:f0:bd:21:a5:ae:
         31:30:5d:35:88:53:1f:64:b1:cc:21:9b:47:64:8a:ea:77:ea:
         1c:b4:c0:a7:4b:34:f2:b6:14:16:ef:25:3b:08:0b:e9:26:ed:
         4c:b6:94:fc:09:69:4b:a3:13:7d:85:54:02:27:3d:04:37:e4:
         d4:c3:21:1d:9f:e1:d4:33:a6:bf:9e:ec:17:8e:a0:77:46:73:
         e7:bf:73:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 14:27:16 2024 by rpki-client on console-fra.rpki-client.org