Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/732291c2-9541-3833-8b8b-32de6384bc20.roa
File:                     732291c2-9541-3833-8b8b-32de6384bc20.roa (raw, json)
Hash identifier:          DcVFkeksMr1Av2ZY2NdXCdzlMtWwpwpxFK63QVvQjqQ=
Subject key identifier:   FB:16:94:F0:8A:71:37:1D:2E:BD:94:E1:4B:D2:7A:B3:7F:53:EB:D1
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F43285845A15E20BBEF5B3C242533B780
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/732291c2-9541-3833-8b8b-32de6384bc20.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     16839
IP address blocks:        2606:3600:105::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:20:bb:ef:5b:3c:24:25:33:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=96820643-0748-4821-a393-a92ffa7b2cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:45:2b:b2:e0:b3:95:0c:44:aa:35:88:55:31:
                    f3:98:c7:0e:2b:66:39:42:49:72:89:78:5f:cf:d2:
                    a8:1c:d7:49:e4:a6:2b:ab:66:59:4b:a3:d4:3a:c9:
                    02:4e:8c:24:4e:3c:74:9e:a2:e6:e7:2d:94:46:a0:
                    14:f2:da:4c:ec:24:1e:00:66:08:91:5b:ce:6e:13:
                    11:f9:f9:89:f7:7d:11:3a:be:bc:21:83:62:06:0a:
                    01:23:72:84:2b:98:1f:92:41:e1:54:55:01:0e:f8:
                    22:c7:ff:47:53:2d:76:b6:0a:9b:c6:92:0a:b5:16:
                    db:15:b9:74:50:b4:09:bf:89:66:0c:83:f3:0d:1d:
                    31:51:8d:0e:e0:be:2f:2b:ea:f1:08:09:06:e3:7e:
                    30:dd:60:34:98:ee:f4:bb:21:69:91:f9:66:e2:d2:
                    72:d2:58:be:0c:7e:3e:ce:4a:ba:2d:c3:1a:e5:52:
                    96:d6:b4:4d:77:0e:e7:86:d4:3b:db:aa:2e:b6:b2:
                    64:1f:78:e1:f5:e3:94:4a:80:81:16:39:18:3a:a5:
                    5e:b1:70:63:26:f6:b3:29:73:91:04:d0:fb:2c:c7:
                    6a:20:e1:24:29:5a:a1:18:b1:6d:71:b5:f4:11:55:
                    1c:c5:14:1b:c2:d6:7a:8a:41:eb:2b:e9:8f:e6:a4:
                    fe:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:16:94:F0:8A:71:37:1D:2E:BD:94:E1:4B:D2:7A:B3:7F:53:EB:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/732291c2-9541-3833-8b8b-32de6384bc20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3600:105::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:b6:2b:65:f9:8a:d1:fa:51:f3:fe:57:6f:89:4a:87:a0:e9:
         b1:ec:98:75:68:0d:5b:8a:6e:44:d7:6e:a6:09:02:fb:e7:27:
         59:7c:df:14:12:be:d6:db:9d:34:fb:1e:49:cf:bf:14:34:4d:
         67:31:12:50:31:ad:3d:85:1b:26:90:52:45:28:9e:c6:27:24:
         ab:4b:41:fd:72:7f:7b:42:c6:e5:d4:70:de:0f:56:c6:16:ac:
         ed:b7:03:2e:f9:3d:f1:96:39:a6:43:12:8f:b2:70:82:d3:26:
         90:28:81:b6:a5:ff:c7:19:c1:de:1f:66:d9:9a:6c:c0:57:21:
         fa:0d:a0:87:53:7f:dd:2e:99:7a:99:0e:cf:69:17:ff:fc:29:
         e1:90:73:97:c5:20:90:9d:d0:7a:0f:7c:11:85:4c:ae:12:eb:
         95:ee:62:76:70:b6:7d:4b:26:3e:a1:31:0c:a3:36:57:d1:ae:
         5e:f0:ee:17:57:3e:b9:36:a5:32:28:6c:26:00:06:93:16:05:
         a3:b2:1d:12:13:c3:81:5b:94:5d:26:44:cc:59:51:aa:80:5a:
         e7:ec:28:11:e8:e9:54:c3:e3:f3:10:f2:bb:59:62:d2:c2:af:
         16:08:f4:7c:dd:e4:44:66:3b:9a:75:e3:20:30:dc:b9:1b:db:
         79:c4:03:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:29:32 2024 by rpki-client on console-fra.rpki-client.org