Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d1ec7d81-82ad-3029-abd2-5405897dacbf.roa
File:                     d1ec7d81-82ad-3029-abd2-5405897dacbf.roa (raw, json)
Hash identifier:          o0Uo/J9eZRUfhnxZdHBznuLS1DgEkNjHD1z+VrbrcJM=
Subject key identifier:   A7:8E:F3:AB:19:48:C9:3A:AC:9D:15:6D:2D:58:8B:09:0F:07:2C:28
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285845AB235444402FEFF106D9D540
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d1ec7d81-82ad-3029-abd2-5405897dacbf.roa
Signing time:             Fri 26 Apr 2024 01:00:25 +0000
ROA not before:           Fri 26 Apr 2024 01:00:25 +0000
ROA not after:            Thu 25 Jul 2024 01:00:25 +0000
asID:                     62651
IP address blocks:        2604:c980:800::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ab:23:54:44:40:2f:ef:f1:06:d9:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Apr 26 01:00:25 2024 GMT
            Not After : Jul 25 01:00:25 2024 GMT
        Subject: CN=82a85cc5-f958-4bbf-a734-c2e8584358ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3f:11:e0:96:0f:f8:b0:65:21:d4:21:26:fd:
                    82:9a:ac:c4:f2:b0:af:eb:a6:3e:b2:60:b2:70:02:
                    2e:bc:e1:66:27:35:5c:89:46:ad:cb:de:b8:38:00:
                    eb:a7:7f:6c:4e:a7:16:b5:0c:be:93:89:bd:23:e7:
                    35:36:3a:dd:ac:ae:e9:93:d7:61:0b:34:e9:35:9c:
                    77:11:87:c0:a4:bf:6a:9c:3f:21:62:57:a4:97:38:
                    af:45:48:94:2d:21:8c:82:e9:cd:ae:a5:de:ec:e3:
                    12:3e:d7:38:e5:11:05:e2:ff:98:66:cc:2f:d6:19:
                    73:d9:3e:a2:6b:fa:2c:ac:f9:2c:dc:21:3f:ba:30:
                    0d:86:93:f0:0a:5e:f2:c9:a2:24:b8:d1:4d:b5:07:
                    61:ac:3b:51:29:43:5b:56:a6:5c:ed:1e:30:3d:28:
                    6f:4a:5b:42:8e:e3:25:ad:1b:6b:cb:bc:5c:ff:d4:
                    15:25:75:fa:08:a5:05:08:09:10:dc:8d:58:38:ea:
                    3c:e4:72:83:16:fc:ea:d6:c7:b1:a1:58:c2:a0:34:
                    ae:02:ef:df:b7:92:4b:a9:3b:44:c0:85:8f:9a:81:
                    f7:28:71:89:02:ab:ca:2a:cc:89:13:87:46:2d:d6:
                    86:b7:3f:04:79:e5:5f:18:b1:9a:9f:06:8b:d9:83:
                    0f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8E:F3:AB:19:48:C9:3A:AC:9D:15:6D:2D:58:8B:09:0F:07:2C:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d1ec7d81-82ad-3029-abd2-5405897dacbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c980:800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:0c:01:98:8f:70:22:91:eb:49:48:46:c5:9c:09:55:c7:79:
         4b:6f:3d:d6:13:81:9e:96:9c:b4:47:64:f6:f1:52:23:ab:2b:
         30:24:76:f2:05:32:52:0f:a8:21:ab:18:e8:75:69:92:61:fc:
         03:46:bc:06:2f:25:43:c1:d7:13:3b:07:63:45:6b:33:a8:64:
         60:c2:2e:00:eb:f6:80:cd:ac:ac:21:cb:46:30:7f:77:a2:b2:
         8d:ce:9f:46:cb:83:7b:e0:c7:a5:0d:c8:80:db:af:7f:cf:38:
         40:72:a1:bb:f8:40:f8:0e:c8:a1:a5:f2:ce:fd:d1:9a:2f:54:
         0f:28:7c:3f:f1:6d:d8:5f:e7:9f:56:61:40:af:2f:a0:e2:38:
         0f:71:f8:3e:14:a1:4a:0b:d0:bd:cb:6e:c9:e4:99:98:f6:8e:
         57:a7:07:20:5d:d4:b5:82:c9:3d:4e:ac:02:c1:36:3f:77:63:
         ca:06:00:23:a4:70:75:4a:1d:2a:d0:0c:10:52:f3:7f:c8:52:
         05:00:cb:59:be:f4:a1:a3:d3:98:2f:53:fc:75:6c:2b:e1:f3:
         1c:d3:71:ce:76:7c:b3:c2:52:b3:9e:a8:31:eb:3a:67:0a:83:
         93:3a:84:6d:50:b6:4b:6d:1f:39:30:e4:a7:19:61:02:48:33:
         2d:02:07:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 11:39:13 2024 by rpki-client on console-fra.rpki-client.org