Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a86368d0-d991-3082-9c0f-93fb84950372.roa
File:                     a86368d0-d991-3082-9c0f-93fb84950372.roa (raw, json)
Hash identifier:          eocYVdrQrXsYdABGJolcA17La+In6A9vNkziLhh0cj0=
Subject key identifier:   78:00:10:18:1C:12:74:76:40:6C:48:3C:23:BF:31:B1:E9:82:4B:3A
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F43285845B4E8D6112D0696C8E36DB100
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a86368d0-d991-3082-9c0f-93fb84950372.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     11055
IP address blocks:        2604:7a00:ffe0::/43 maxlen: 43

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:d6:11:2d:06:96:c8:e3:6d:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=47d27d73-4439-496d-a852-24c59713c1d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cb:0a:17:10:ab:b3:8f:d9:4f:51:7f:ea:89:
                    7a:28:08:0d:79:85:fd:0b:cf:2b:20:ce:02:71:ff:
                    89:ab:ae:e6:2c:b1:82:46:0f:c6:c5:85:c9:e7:58:
                    97:ef:6c:68:b9:1f:78:66:ea:8e:5e:b5:9c:93:a5:
                    f2:9d:28:81:fd:96:ef:cc:63:19:45:dd:8b:af:de:
                    71:51:d2:58:2d:66:3b:1d:2e:03:90:31:38:ca:b0:
                    37:a4:00:90:f5:85:12:28:12:26:8a:71:ab:6d:1b:
                    ac:a6:03:67:4b:9a:5b:6d:b3:b3:38:81:0e:73:be:
                    62:be:b2:53:02:b5:21:5c:06:41:89:b8:7d:16:66:
                    6c:ed:99:d9:ac:06:81:25:fb:ed:02:2d:08:3c:51:
                    38:6c:33:e2:72:29:cf:8e:13:dd:1b:96:aa:dd:24:
                    9f:fd:66:52:54:13:b0:5f:ed:bd:ea:eb:35:66:cf:
                    47:ab:dd:8d:3b:d7:63:87:5b:9c:82:7b:80:63:9b:
                    66:da:4a:41:76:0a:ed:54:6f:f4:6d:06:02:b0:9d:
                    b7:26:6a:60:7a:0a:15:d2:46:c5:f7:f5:ff:24:f6:
                    f0:2a:27:e7:90:45:35:b0:f9:93:9f:19:41:40:bd:
                    1c:62:7e:20:11:88:b2:7e:22:63:74:36:f6:c8:e8:
                    51:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:00:10:18:1C:12:74:76:40:6C:48:3C:23:BF:31:B1:E9:82:4B:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a86368d0-d991-3082-9c0f-93fb84950372.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7a00:ffe0::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ee:77:c2:26:f6:34:34:61:91:6b:4f:d8:48:19:b4:36:fa:
         4d:d6:70:4c:8c:bd:dd:b3:d0:65:b9:07:c4:f5:39:07:71:bb:
         4d:51:bd:7b:c7:86:23:87:b6:e8:fd:c4:d4:7f:d0:b1:16:16:
         40:80:69:25:ab:64:45:fa:5f:c2:4f:3c:71:bc:b6:71:05:db:
         f3:3e:1c:07:c3:d7:30:e2:9d:ec:bd:e6:e1:a4:68:32:a9:21:
         ad:ba:a7:c4:0e:4b:70:81:13:18:56:18:a7:8a:96:0d:f9:d1:
         46:ce:f6:a4:71:29:fe:fc:db:f4:12:50:ca:12:b3:0a:d3:b0:
         f7:1b:b6:64:50:6f:31:8d:69:be:02:87:c9:7b:fe:9e:a2:c1:
         55:30:5a:7d:b4:f9:36:14:6e:76:19:20:3f:ab:4b:d1:bd:fe:
         21:16:f7:85:a3:e3:85:a0:7c:9a:ec:01:be:67:4e:be:ab:99:
         21:d5:c9:f3:03:29:51:52:66:fd:3f:da:01:71:53:63:00:c6:
         42:ae:6b:39:57:bc:ef:d8:af:ff:3d:c0:84:64:5d:c3:15:76:
         8b:87:f3:69:da:4b:6b:16:e2:e3:93:ba:66:3a:a5:a6:b5:7a:
         60:df:16:ba:ef:e4:66:53:09:da:73:73:c7:2f:74:6a:c9:79:
         38:a8:f2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:39:00 2024 by rpki-client on console-fra.rpki-client.org