Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c090b3b8-860c-3590-89f4-cdcee08adef5.roa
File:                     c090b3b8-860c-3590-89f4-cdcee08adef5.roa (raw, json)
Hash identifier:          2LSrpdMlWB1Wo0g914WieEi6XjeU5MY7rKF71SEkbmI=
Subject key identifier:   93:DE:81:C1:96:CF:C8:CE:27:0E:04:A3:19:07:E3:70:7C:2B:A1:D9
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F43285845A15E23163821E87E4B404B80
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c090b3b8-860c-3590-89f4-cdcee08adef5.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     16839
IP address blocks:        2606:3600:140::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:23:16:38:21:e8:7e:4b:40:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=c6ca3480-f408-4fb0-847f-37243dd89d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a3:90:e8:e2:c6:97:24:79:20:d2:b4:27:ea:
                    8c:02:9c:be:94:f8:d6:63:28:4a:1a:dd:fd:2a:9d:
                    74:63:99:ff:21:05:d5:be:91:e2:d1:b9:5c:fc:8b:
                    fd:0f:42:bc:08:99:31:03:3c:fb:16:51:b7:90:17:
                    87:c7:1a:38:98:0a:e2:ab:b9:77:91:3c:bf:7b:3a:
                    6d:15:07:f4:7f:32:60:4b:cc:d3:97:20:70:4c:7d:
                    d3:b0:6c:2e:49:c6:c4:55:b7:35:46:8e:0f:76:90:
                    e4:5b:83:ba:08:de:9c:1b:c5:bd:f5:6e:d8:85:7d:
                    af:ba:2d:2c:fa:8d:dc:45:27:cb:3e:b2:9f:73:d9:
                    97:cf:d8:13:25:81:2d:2f:32:5b:38:70:14:b5:c2:
                    59:a5:67:d9:dc:e4:c6:d5:5f:26:bd:e4:2b:a2:5c:
                    3e:df:ee:de:ca:44:ff:64:53:dd:ec:af:f2:5f:63:
                    5c:5a:41:c5:4f:cf:01:0b:d4:6a:bc:3b:a0:aa:d7:
                    80:f7:d3:6b:ed:c7:51:9c:76:8f:77:7b:05:4b:5e:
                    5e:11:35:9f:d8:63:ca:4d:c1:ef:52:ff:2c:87:2d:
                    29:14:f1:5d:1a:7d:bb:37:30:d4:9f:9f:ab:48:19:
                    a8:39:95:72:1e:dc:a4:22:3e:7a:2f:60:9a:13:d7:
                    39:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DE:81:C1:96:CF:C8:CE:27:0E:04:A3:19:07:E3:70:7C:2B:A1:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c090b3b8-860c-3590-89f4-cdcee08adef5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3600:140::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:c1:9a:da:75:a4:af:f8:f3:f7:5d:36:d7:bc:2e:51:5b:20:
         f1:02:25:d5:a3:3a:d4:f2:b4:4e:db:8e:0c:75:9d:79:dc:23:
         00:68:d9:69:5a:c3:f9:df:91:69:52:d1:41:31:fc:dd:90:f7:
         30:e3:45:ad:22:17:b9:4e:71:ff:0d:78:0c:5d:a5:f0:a3:af:
         c3:26:6f:21:37:50:72:c3:43:23:ba:29:35:28:e2:6e:09:96:
         3e:b4:1b:d4:31:4c:78:6e:b4:a8:9c:72:f7:ad:1d:09:4f:57:
         b7:87:e9:37:c0:9e:03:7f:58:5d:e1:0e:66:90:e4:e7:fd:40:
         b2:65:2f:1c:5f:b1:da:ee:72:35:73:20:e4:69:d0:fa:98:24:
         46:16:f0:91:2e:e9:57:91:9d:54:10:bb:e5:0d:b6:8e:a7:89:
         8c:64:a7:65:e0:33:f7:fc:b8:3d:52:95:dd:91:d1:f5:93:c8:
         20:15:fa:55:fe:86:28:99:0b:b3:ca:35:c9:bf:8f:d4:5d:40:
         83:27:71:0b:5a:8f:e1:a5:8d:43:df:fe:a6:6a:65:6d:ac:f6:
         21:94:d8:67:30:ff:c9:be:3e:a4:0f:d6:d6:35:23:fa:ab:17:
         62:11:d3:f4:97:1a:dd:15:14:31:ff:cf:31:c7:6a:84:b1:bb:
         ee:9e:78:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:29:32 2024 by rpki-client on console-fra.rpki-client.org