Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/9b8bb862-ae57-3bbc-a477-74d4ea132dc6.roa
File:                     9b8bb862-ae57-3bbc-a477-74d4ea132dc6.roa (raw, json)
Hash identifier:          +BXZY0ngQbpn4ChstFvv+xQSZfTmgDCQnAmeJVmP3iU=
Subject key identifier:   43:B0:04:6A:2B:CB:4A:7F:90:55:0D:07:8C:E4:83:09:47:84:EE:08
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584578E303B434DB870C2F6FC240
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/9b8bb862-ae57-3bbc-a477-74d4ea132dc6.roa
Signing time:             Mon 08 Apr 2024 01:00:25 +0000
ROA not before:           Mon 08 Apr 2024 01:00:25 +0000
ROA not after:            Sun 07 Jul 2024 01:00:25 +0000
asID:                     25804
IP address blocks:        2607:f4e8:ac::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:78:e3:03:b4:34:db:87:0c:2f:6f:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Apr  8 01:00:25 2024 GMT
            Not After : Jul  7 01:00:25 2024 GMT
        Subject: CN=103e4547-f0ac-4fff-bb44-dfd5d43215d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5e:ac:d5:47:47:61:d8:d6:3a:23:83:b3:9a:
                    a0:6a:53:52:cc:e4:e9:02:76:8f:36:37:74:6b:b4:
                    1e:b2:0b:cc:fa:65:01:44:1a:59:11:0a:31:12:45:
                    6a:e8:0e:92:2c:c6:46:e7:f3:a2:67:b0:38:66:75:
                    ab:28:f9:cf:de:ac:7a:22:76:0f:b6:05:f5:ff:a3:
                    5d:6b:52:30:9d:d9:35:13:bd:d3:41:7b:96:ad:e8:
                    da:83:21:0b:3b:9e:32:cf:9c:e6:7b:b5:e6:58:c9:
                    4a:63:2b:a0:2e:3c:5a:e4:ed:2a:d9:a9:73:25:08:
                    ed:ad:4a:62:aa:38:4c:cf:3b:2f:42:f3:8f:79:02:
                    69:7c:6a:5e:fb:96:81:c5:71:38:fe:9d:bc:1b:84:
                    c9:1d:dd:26:85:a6:c0:07:21:e0:aa:c9:f4:53:ed:
                    f6:af:96:f1:24:49:f6:00:5d:5e:49:a8:94:ac:4b:
                    70:5e:8d:2d:8d:eb:dd:b1:d7:e6:4f:9d:65:39:56:
                    48:e5:89:43:c2:de:27:a8:2a:ea:d3:cc:63:08:73:
                    c9:7d:46:92:67:87:ab:cd:b7:51:98:e1:fc:c0:d7:
                    fa:bd:30:08:9d:18:72:a2:ae:4a:6e:e9:cc:00:be:
                    6d:3f:74:42:97:e4:de:bb:07:01:81:42:1e:f0:cf:
                    a9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B0:04:6A:2B:CB:4A:7F:90:55:0D:07:8C:E4:83:09:47:84:EE:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/9b8bb862-ae57-3bbc-a477-74d4ea132dc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f4e8:ac::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:96:6a:fb:17:92:29:85:07:9c:b8:dc:69:1a:1c:75:33:34:
         20:64:b2:5a:b8:d9:1e:27:1e:f6:92:7c:f6:c2:61:56:f7:09:
         0c:0a:06:15:56:9c:d4:05:67:b0:ee:20:86:12:54:0c:c1:a5:
         b6:4a:59:49:2c:2b:b3:11:77:79:c0:81:c8:21:9c:2d:f7:70:
         4b:5f:f7:8a:2e:3c:ae:c1:28:64:62:26:db:95:01:1a:f4:d2:
         18:35:9b:38:ea:4d:f6:51:92:17:0f:a8:d1:5c:6e:71:48:79:
         48:4f:14:e6:bf:36:63:f1:43:10:28:68:24:9a:ec:b0:bf:99:
         81:26:a7:07:a0:6f:e7:1f:6a:58:18:3b:c9:e1:ac:1e:74:35:
         f1:4b:70:be:c2:61:20:34:14:38:0c:22:9f:35:2d:d1:d4:37:
         6b:56:e8:2c:69:a1:a7:00:84:87:d8:11:c7:46:09:a9:38:8a:
         58:9b:4d:54:6c:91:ea:c0:b9:cf:9c:fb:3b:cb:5c:de:cd:7f:
         c6:f8:95:7f:78:2f:54:4d:96:7b:b7:ba:1e:d2:07:95:3d:35:
         5e:b6:0e:8f:ff:35:e8:df:b3:ce:ca:99:17:c4:25:7e:59:34:
         e8:b2:3d:93:20:b8:a0:76:e7:8f:e4:ad:7b:ec:06:8a:ad:38:
         6d:b0:b1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 13:45:13 2024 by rpki-client on console-fra.rpki-client.org