Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/a2cca32f-d310-3d5c-9deb-b89b4d9253ca.roa
File:                     a2cca32f-d310-3d5c-9deb-b89b4d9253ca.roa (raw, json)
Hash identifier:          nsZp7+XUUmgPL3OYNtlKb2TnRuaCpb8PUKqAJFFcniU=
Subject key identifier:   3B:7C:0B:A2:9D:1A:F2:38:7F:E9:D5:1F:D8:33:46:74:F4:43:AE:BE
Certificate issuer:       /CN=13fecd24-0da7-4140-9636-71a72de851ec
Certificate serial:       010D0C9F432858452AB7D963C0D1C0D616200880
Authority key identifier: 71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/a2cca32f-d310-3d5c-9deb-b89b4d9253ca.roa
Signing time:             Mon 11 Mar 2024 01:00:26 +0000
ROA not before:           Mon 11 Mar 2024 01:00:26 +0000
ROA not after:            Sun 09 Jun 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        2604:d0c0:ae00::/40 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2a:b7:d9:63:c0:d1:c0:d6:16:20:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13fecd24-0da7-4140-9636-71a72de851ec
        Validity
            Not Before: Mar 11 01:00:26 2024 GMT
            Not After : Jun  9 01:00:26 2024 GMT
        Subject: CN=854e0c4a-0a75-4fbc-b2d6-b2adb485b93c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:33:7a:08:ab:c6:64:74:1b:74:56:9e:ae:35:
                    f5:bf:93:68:d4:e4:eb:59:5e:b5:f9:89:a6:7e:25:
                    20:72:4e:9f:ef:4e:d1:92:21:6e:4f:ae:d6:d0:06:
                    da:45:7e:6c:5a:b1:cf:d2:c6:8d:e3:a7:af:ff:6c:
                    ff:7d:ee:ba:12:5a:ed:bc:d8:9f:ff:6f:ea:f7:50:
                    e2:1d:d2:92:e7:32:69:e7:6f:29:e1:74:a8:90:3b:
                    01:80:5b:07:d5:93:73:8b:24:4c:50:d3:e2:37:b9:
                    3e:2c:1b:37:ab:62:02:d9:a6:90:fc:e4:d4:11:bd:
                    55:2a:f5:43:ee:f4:65:73:91:95:2e:43:1a:54:9d:
                    5a:71:ee:2f:47:56:98:35:92:84:f9:b6:ec:df:ce:
                    35:f4:fd:ae:6a:6b:90:d3:fa:58:6a:77:9f:62:f6:
                    5c:11:08:00:76:58:f8:a1:ad:42:00:61:77:01:ad:
                    3c:31:41:42:7c:7f:11:12:9e:da:5a:b0:e4:e4:e8:
                    65:98:8d:2d:92:bf:ca:e4:7c:1e:2c:15:82:ad:a1:
                    bf:16:2b:ce:2e:32:5c:82:3b:30:c8:48:de:56:ae:
                    99:0b:a4:8f:b2:26:57:00:02:7d:a1:1d:91:5f:3a:
                    45:e7:43:2b:30:90:84:78:6a:6a:a3:9e:13:f7:5c:
                    d8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7C:0B:A2:9D:1A:F2:38:7F:E9:D5:1F:D8:33:46:74:F4:43:AE:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/a2cca32f-d310-3d5c-9deb-b89b4d9253ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.crl

            X509v3 Authority Key Identifier:
                keyid:71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:d0c0:ae00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:d1:95:31:1b:b6:96:7b:d5:45:3d:15:be:14:65:d3:d1:42:
         97:95:ea:c5:84:0b:dc:c5:af:2f:d2:27:49:6f:f6:e0:9a:b8:
         1d:09:78:c5:c9:50:70:d6:e4:90:85:f7:80:06:76:e5:48:5f:
         5f:8d:16:89:f8:b2:35:9e:e2:fe:e1:75:e4:be:c1:5e:8a:fc:
         0f:94:f7:1f:e9:b7:2c:8f:35:c0:93:87:1c:c7:a1:b2:f0:80:
         75:f3:e6:9c:72:d0:bc:c2:50:db:30:52:4d:4d:90:3e:a8:4e:
         b2:a8:fa:87:6c:49:85:3e:19:d7:9a:ff:a9:4f:57:cd:4e:b3:
         8e:b0:fd:cb:e9:a7:df:e1:fd:e5:8c:4f:88:b5:f2:48:ae:26:
         2d:57:70:6b:01:2c:3c:5f:ed:e2:99:5b:e6:82:1c:83:33:d0:
         a6:41:79:f9:3e:f0:9f:72:ae:9c:cc:99:8e:b3:fc:62:24:df:
         b2:29:00:72:90:8e:af:6b:c1:67:3a:5a:80:cd:c0:69:85:1e:
         ee:65:b0:54:4f:d2:62:c1:88:c7:77:1c:30:09:0c:5d:99:8a:
         12:20:af:71:7c:b8:8c:1d:ee:30:43:22:0c:ef:76:91:b0:a1:
         4f:70:68:ec:75:b2:31:46:e8:e2:8e:24:7b:a4:2d:93:a7:ce:
         cb:40:77:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:25:44 2024 by rpki-client on console-ams.rpki-client.org