Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/04e7a50e-fdc0-3566-ac52-d12172993b6b.roa
File:                     04e7a50e-fdc0-3566-ac52-d12172993b6b.roa (raw, json)
Hash identifier:          ZLL0v6TjN0m1i8Vy8auteoCTJiR3K4kTkCH9+PaOEdI=
Subject key identifier:   06:36:38:B9:C5:9D:50:34:08:D6:E1:73:66:B2:44:22:A4:C7:E0:E8
Certificate issuer:       /CN=5e6c5242-5ff7-40a8-b144-1f151915227e
Certificate serial:       010D0C9F43285845A15E156D1D22DA2DE6141740
Authority key identifier: BF:7E:0B:08:D0:1C:22:F8:E0:C5:D4:7E:63:D7:3B:56:D5:B8:D7:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/04e7a50e-fdc0-3566-ac52-d12172993b6b.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     8987
IP address blocks:        2602:fd3a:228::/45 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/5e6c5242-5ff7-40a8-b144-1f151915227e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/5e6c5242-5ff7-40a8-b144-1f151915227e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:15:6d:1d:22:da:2d:e6:14:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6c5242-5ff7-40a8-b144-1f151915227e
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=740ddc8a-a537-4c3e-afff-e507bb7da05f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:09:11:19:dc:67:c1:90:93:c4:d2:e4:77:83:
                    06:e3:db:9f:ad:d3:04:ae:01:4a:b3:61:ed:98:8b:
                    23:7d:11:b6:59:b4:00:22:70:d3:2b:28:eb:4f:19:
                    e8:29:4b:19:15:ca:6a:00:94:5b:89:f2:ad:25:b7:
                    8b:bb:5a:f9:13:af:1e:60:1f:8e:eb:fd:87:6c:4f:
                    fb:aa:90:f3:63:e3:b9:0e:c5:e7:64:ea:6b:b4:18:
                    69:29:aa:a8:5c:2e:89:ad:98:a5:f4:9b:f1:60:6c:
                    b9:1d:22:10:b5:03:b3:dc:1a:fa:29:68:d9:d9:75:
                    f4:c2:66:db:5a:eb:97:ef:84:5d:37:03:35:87:89:
                    ea:43:40:c8:32:54:48:cd:e1:a8:d2:af:ab:d7:2b:
                    86:0d:07:7b:62:dd:4c:23:e9:70:8d:b6:91:9c:d6:
                    d3:84:a1:1a:9c:dc:4f:ee:b0:6e:71:9a:b2:f4:0a:
                    48:18:61:30:eb:bc:4a:30:c3:cf:46:32:2a:65:d9:
                    4c:b8:d2:ff:47:b3:16:5d:de:8c:ce:de:db:4a:63:
                    ab:f4:92:28:cd:21:9c:84:12:1d:b0:07:37:5d:60:
                    9b:6c:a8:45:e2:ad:8c:c2:15:59:fe:60:3f:d7:6d:
                    df:53:8e:b9:7c:3f:12:4a:b2:c2:1b:df:4c:06:ea:
                    78:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:36:38:B9:C5:9D:50:34:08:D6:E1:73:66:B2:44:22:A4:C7:E0:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/04e7a50e-fdc0-3566-ac52-d12172993b6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/5e6c5242-5ff7-40a8-b144-1f151915227e.crl

            X509v3 Authority Key Identifier:
                keyid:BF:7E:0B:08:D0:1C:22:F8:E0:C5:D4:7E:63:D7:3B:56:D5:B8:D7:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd3a:228::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:2a:31:05:3d:1d:bf:35:91:4c:3a:5c:11:65:b8:c2:af:20:
         31:92:66:db:20:b8:53:d3:87:0a:4e:f0:28:22:30:a4:d6:ad:
         0d:c9:75:a3:20:88:6c:5e:78:53:48:51:12:bd:be:1f:82:f9:
         3a:4a:32:6c:ba:e2:32:41:79:bc:85:32:43:4d:8b:5b:39:0b:
         ad:0d:b5:ec:b2:2c:07:70:b4:b8:ae:64:92:72:ed:7d:9a:bf:
         7e:09:d8:df:57:e1:4e:35:59:b1:b7:db:76:68:10:75:26:1e:
         9c:b3:e9:7d:cd:8c:a7:2c:ae:1c:08:13:30:6e:d1:03:63:65:
         df:55:a3:6d:ac:d3:2f:d2:e3:d8:40:81:68:16:96:7e:e1:fb:
         e6:ba:4d:59:df:85:81:af:4f:ea:99:d1:98:32:fc:bd:3e:31:
         ba:c8:fc:23:19:16:9e:7c:16:8c:f6:d3:d9:6c:9e:50:b0:68:
         64:7b:13:7a:c5:a0:78:f3:ae:d9:b4:61:dc:c9:c3:5b:b4:a3:
         50:f6:9d:40:ec:e2:d8:72:8e:95:ea:93:48:a6:06:35:34:c2:
         f2:38:35:a1:44:e3:d5:47:80:61:c2:f2:b3:b6:ba:b4:b2:3d:
         8d:2f:29:23:30:dc:78:c9:f8:37:95:28:c2:50:79:1f:a6:43:
         58:cb:83:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:30:57 2024 by rpki-client on console-fra.rpki-client.org