Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8165de14-ec5b-3d8a-acee-5f58a94bb0de.roa
File:                     8165de14-ec5b-3d8a-acee-5f58a94bb0de.roa (raw, json)
Hash identifier:          nuwMwOlJDFDNVquhXIF/qqpFNX8JH6AjMkHIXrCpN74=
Subject key identifier:   3F:8C:69:47:11:58:5C:37:BF:D9:CE:2B:55:B5:43:EB:A6:91:43:A5
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285844F4655A98C9E5B9C755AF3C00
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8165de14-ec5b-3d8a-acee-5f58a94bb0de.roa
Signing time:             Tue 20 Feb 2024 14:00:31 +0000
ROA not before:           Tue 20 Feb 2024 14:00:31 +0000
ROA not after:            Mon 20 May 2024 13:00:31 +0000
asID:                     54203
IP address blocks:        2606:b300::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f4:65:5a:98:c9:e5:b9:c7:55:af:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Feb 20 14:00:31 2024 GMT
            Not After : May 20 13:00:31 2024 GMT
        Subject: CN=f2b3cc62-cd12-43d2-9c9e-112b2d654d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:14:41:20:e4:c7:e5:9e:24:3d:c7:e2:21:ad:
                    bb:61:7c:4d:74:9e:e3:d9:f0:c1:9e:93:06:3c:a2:
                    8c:c6:54:0a:fd:63:1e:77:22:a8:25:e6:46:82:0b:
                    3f:08:ab:6e:0e:65:c2:92:bc:98:5f:ce:aa:a1:42:
                    51:61:f9:05:bd:51:ae:29:3c:f0:42:e3:59:38:21:
                    5c:fb:a6:f8:ca:7a:86:7d:44:c0:7b:9f:a4:dc:52:
                    bf:fa:08:c4:d5:b8:58:3d:86:28:a3:86:32:dc:2f:
                    93:58:b5:93:b3:07:53:41:cf:21:e1:6c:e9:d5:5e:
                    d6:a4:5c:65:bf:29:48:6d:1f:9d:4c:c4:9b:4b:f5:
                    d9:33:d3:f6:81:f8:c4:7e:e2:d7:36:ae:3e:9f:a2:
                    66:ca:6a:73:04:e5:b8:61:11:c6:09:88:22:c9:3e:
                    1d:81:52:6c:12:1d:22:b7:57:29:70:4b:f3:34:fc:
                    3d:22:d8:0b:a9:fc:42:e4:a3:2d:76:af:22:77:53:
                    7d:2e:06:23:e6:c9:e4:c2:69:ae:83:58:20:5d:08:
                    7f:21:79:31:ef:48:4d:03:80:80:f6:ed:8f:2e:8d:
                    a2:66:e1:39:85:6d:03:66:77:a0:76:74:f0:8b:33:
                    06:a9:7d:8f:98:52:c6:79:65:e2:e3:5e:20:d6:3b:
                    b1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:8C:69:47:11:58:5C:37:BF:D9:CE:2B:55:B5:43:EB:A6:91:43:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8165de14-ec5b-3d8a-acee-5f58a94bb0de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b300::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:c9:aa:0e:34:61:de:a3:be:0c:89:f2:f3:95:6a:30:02:0b:
         93:09:a0:9c:08:f2:a7:7f:9e:fa:7f:57:df:0a:35:e6:93:76:
         98:74:bf:dd:43:22:ba:25:09:be:d1:3c:3b:11:75:68:20:4e:
         91:23:b1:45:19:58:ba:fb:8e:6e:4a:14:b7:db:b5:11:7e:df:
         a0:d5:01:c6:6d:3f:79:e4:af:29:2c:98:23:8d:ba:52:89:a2:
         85:fb:f2:84:1e:81:54:94:a9:3b:5b:0e:b0:14:fd:f6:f8:68:
         fe:17:46:be:e6:10:d3:b6:98:34:ac:83:19:55:4e:75:58:5c:
         71:c1:c1:d0:36:e2:71:57:dc:b0:6f:12:6d:27:75:2c:11:5d:
         a6:6d:f9:98:1c:d0:93:e3:27:77:39:7d:45:18:09:14:e9:45:
         ec:34:de:d7:2d:3d:b8:cf:a0:45:8e:82:40:48:40:95:48:0f:
         7b:92:33:01:b7:1b:55:b1:de:cc:21:fb:64:88:43:f8:2d:14:
         38:42:ae:cc:bc:76:c3:d9:30:72:4c:b3:ca:dc:3c:14:17:88:
         25:f3:75:22:d7:b1:28:09:39:1a:f8:4d:5b:cd:86:65:c8:33:
         e6:19:9f:95:02:01:15:4f:ab:f4:97:44:de:3e:87:d3:23:4c:
         38:ed:6b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:33:42 2024 by rpki-client on console-fra.rpki-client.org