Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7ae70d56-3bf0-3e04-a81f-0220f9523fcb.roa
File:                     7ae70d56-3bf0-3e04-a81f-0220f9523fcb.roa (raw, json)
Hash identifier:          5JFlv7sL8Lx8jyw31NBtb44Zn0/wSTjFAeBHl9gUSJI=
Subject key identifier:   9A:55:33:2A:89:3B:62:A3:CB:CA:E5:5F:70:2E:83:0B:86:08:6A:66
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F43285845A15E2332F34531AD98D47000
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7ae70d56-3bf0-3e04-a81f-0220f9523fcb.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     16839
IP address blocks:        2606:3600:1120::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:23:32:f3:45:31:ad:98:d4:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=028a5908-09d4-490c-89fb-32f674447cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3c:23:b1:cf:2c:d0:8c:f3:42:08:6a:8e:ea:
                    bc:6d:15:c8:21:44:29:cf:a6:3c:d2:61:cb:1d:f6:
                    c0:f9:43:59:7d:bd:4f:a6:c6:9a:f1:17:72:45:ba:
                    3f:46:6d:2e:26:39:55:9a:0d:74:78:8a:03:37:47:
                    b7:ae:e7:59:c5:a6:11:eb:51:0f:c6:5c:db:2d:3e:
                    be:7c:48:d3:de:c4:58:be:c9:2a:a3:c5:cc:80:7e:
                    ca:ba:ad:bb:6e:57:07:62:70:1b:f4:94:26:e8:79:
                    29:4a:c1:b2:78:50:99:dc:4a:b0:33:2a:da:ca:1d:
                    3b:f1:07:e5:3c:f5:5c:f0:69:05:d2:7c:22:21:fc:
                    81:41:47:7d:0f:e9:15:dc:ac:10:ac:f4:61:e3:5b:
                    b1:45:ec:79:a7:44:11:93:8a:3a:39:66:ce:fb:8b:
                    e7:60:ec:42:ef:4f:60:a4:76:b3:53:26:4c:6c:83:
                    5a:4c:15:9f:06:32:0f:9e:37:90:89:33:0d:0a:03:
                    a2:a7:b9:c9:1b:20:df:4f:0f:5c:14:e2:25:33:4c:
                    0f:70:db:7f:d8:1d:2a:b7:78:e9:96:fb:7d:ed:4a:
                    90:d5:ce:09:76:df:92:4d:ee:76:b1:96:f8:0c:4f:
                    b4:0f:6f:33:77:97:42:18:41:5d:f8:58:ff:98:a5:
                    ad:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:55:33:2A:89:3B:62:A3:CB:CA:E5:5F:70:2E:83:0B:86:08:6A:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7ae70d56-3bf0-3e04-a81f-0220f9523fcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3600:1120::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:17:e8:1c:d7:7e:46:08:c4:88:74:df:3e:b9:6e:4e:89:47:
         fb:7a:2b:9e:e8:ad:dc:cb:14:6e:a3:07:48:8b:8b:ba:2a:25:
         bb:04:9a:2b:89:f2:fa:3a:2c:57:0c:69:fd:f2:46:bd:b4:85:
         dc:a4:70:78:55:cb:fc:c1:cd:4c:ff:f8:61:cb:39:67:5a:46:
         8b:c6:94:68:a0:95:04:dc:01:c6:f0:1f:ee:19:30:e6:01:08:
         6a:b0:2b:8d:7b:97:d7:72:b6:5b:3f:69:fb:aa:10:84:eb:00:
         d4:7d:10:7e:6c:9a:87:f8:0b:cb:fa:d5:2b:7b:52:f9:c1:60:
         ad:7f:2e:90:8f:35:cb:7d:32:5f:68:bf:f2:20:bf:45:98:ee:
         c8:cd:49:5b:8d:0f:b9:9f:a8:da:35:ae:12:66:db:ed:be:dd:
         00:54:40:00:aa:6f:18:cc:29:20:6e:c2:61:12:d2:c7:7a:75:
         8e:d2:e2:61:78:c8:8a:3b:52:c5:3c:bd:95:51:60:82:c9:25:
         30:37:a8:0e:24:a4:b4:a1:98:bb:8a:cc:3c:cf:10:d4:cd:cc:
         c1:f5:f6:9c:f6:62:e4:de:6a:24:c9:a5:5d:26:67:23:70:14:
         64:ee:86:32:e8:38:42:c8:d9:ed:e2:95:6b:41:80:20:16:cf:
         92:f1:c1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 02:19:35 2024 by rpki-client on console-ams.rpki-client.org