Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/75fe4f8b-c4ba-3401-a256-cab4e53ee5b0.roa
File:                     75fe4f8b-c4ba-3401-a256-cab4e53ee5b0.roa (raw, json)
Hash identifier:          XaTOzAGoueGMYdATMJC7dBau3ezIU+AYlY0IiA/0e0c=
Subject key identifier:   A9:BA:94:13:CA:D7:4C:DD:52:C4:D8:3B:E6:E4:0F:31:5E:EB:AF:65
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F43285845A15E20CC340A087F9EABD940
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/75fe4f8b-c4ba-3401-a256-cab4e53ee5b0.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     16839
IP address blocks:        2606:3600:120::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:20:cc:34:0a:08:7f:9e:ab:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=042c614e-107a-48c3-9042-ffc4ae4a9a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3f:7d:48:3d:fe:41:c4:27:cf:7f:a8:83:01:
                    b9:70:74:53:0d:3f:ba:4c:7e:98:be:6c:9a:19:8a:
                    bf:2c:f9:b2:7a:a6:0e:61:04:9d:48:69:92:e8:7f:
                    34:7e:8e:49:30:0c:c5:42:ca:68:aa:40:cb:d3:02:
                    bc:36:1a:a7:c2:c3:4b:c2:e1:26:2e:fd:6d:34:54:
                    29:69:e4:8e:a5:67:f3:49:0b:17:14:a1:df:4f:4e:
                    ca:7d:5e:96:e2:58:bd:a4:90:e4:c6:68:18:0f:21:
                    d3:61:d4:ef:83:a6:b9:1b:d2:1f:cb:2f:56:63:57:
                    52:22:5c:c8:22:8f:e6:61:11:4d:ad:b1:d7:3a:85:
                    67:de:dd:c3:74:f4:16:0d:4b:fd:44:37:fa:70:c5:
                    e5:09:94:c8:44:6a:83:e0:ab:2a:b8:31:07:f3:7d:
                    17:a7:e3:a6:94:4e:11:ed:b5:2d:4d:7b:4f:d6:c0:
                    16:c1:90:fa:9e:d7:a7:e0:e0:00:f7:eb:7f:ad:c1:
                    9a:6e:be:a0:62:f4:b6:b1:2e:38:a9:02:67:8a:12:
                    ea:33:b2:cb:18:76:59:a7:cf:12:d5:31:07:66:05:
                    81:89:5d:bd:47:9f:c9:89:5b:00:1c:8d:74:fc:c4:
                    6f:a0:fb:03:6e:be:9b:9b:0b:73:48:f4:e3:d8:75:
                    41:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BA:94:13:CA:D7:4C:DD:52:C4:D8:3B:E6:E4:0F:31:5E:EB:AF:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/75fe4f8b-c4ba-3401-a256-cab4e53ee5b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3600:120::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:be:e0:33:b1:75:f0:f1:37:dc:a4:5f:cd:2a:4b:cf:65:8a:
         13:9b:2d:37:a0:25:39:a1:a8:fe:71:c8:62:ae:31:7a:b2:56:
         a9:39:43:a7:1d:23:bb:30:0d:f6:0c:40:30:4b:51:01:7c:32:
         57:8b:dd:ad:8b:04:25:92:be:1d:42:51:8c:71:ef:76:c6:ab:
         5b:7a:a3:be:ca:ec:47:da:4e:80:5f:89:cb:ff:15:3f:b2:71:
         71:28:5d:6e:d2:c6:76:d2:72:6f:ee:fa:e3:c6:ba:a3:8d:a6:
         f5:97:06:a2:cd:b5:e6:d7:c5:1f:6d:e6:ff:d0:33:df:27:15:
         fa:42:9a:d2:d4:1b:a1:49:9e:cd:ea:e7:45:bc:c1:74:b8:5a:
         c3:66:18:3b:33:40:e1:e4:e2:94:4a:60:42:e0:06:96:25:68:
         5e:a7:e6:dd:37:44:b4:e8:dd:b1:5f:72:51:b9:47:19:75:b9:
         68:54:7b:fd:88:8a:72:54:c0:fb:a4:a0:f7:d4:25:cd:23:8f:
         ec:76:36:e9:f7:65:ba:3d:b6:d5:b4:f5:88:ad:0e:26:56:2b:
         65:ab:9d:7b:fc:32:12:c0:04:f2:3b:5f:b6:fc:b3:82:df:02:
         69:28:23:3e:da:b3:39:24:c0:25:15:11:ed:5e:bc:f5:ad:9a:
         93:20:75:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 20:38:22 2024 by rpki-client on console-ams.rpki-client.org