Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f19b701f-4b64-3c06-9d45-c1e353da2929.roa
File:                     f19b701f-4b64-3c06-9d45-c1e353da2929.roa (raw, json)
Hash identifier:          iNtqP5H9FTEjkBGcYAtFq459xqH8IskpuK2EgtX6Orc=
Subject key identifier:   FA:DB:6C:29:03:30:58:94:C9:92:E6:39:75:DA:59:B0:84:2C:20:4D
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F43285845A15E21062FC85F802EEBED40
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f19b701f-4b64-3c06-9d45-c1e353da2929.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     16839
IP address blocks:        2606:3600:180::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:21:06:2f:c8:5f:80:2e:eb:ed:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=6ae7298a-a97b-4050-aa26-8611b0635a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d3:a8:02:15:4d:42:07:fa:6f:99:3d:29:77:
                    e9:59:b0:47:2b:48:e0:13:3a:68:2b:74:1b:2a:3f:
                    d8:e3:ff:d5:62:ad:15:03:6c:b4:68:3d:fb:ee:f9:
                    81:75:2a:ad:2b:2a:87:f6:8e:ec:f6:ca:a1:78:cb:
                    3a:d4:b8:b4:cc:09:9f:77:b7:52:38:32:a7:94:59:
                    b7:bb:fa:54:6c:35:7c:b5:10:44:87:6e:bb:fc:13:
                    4c:2b:40:97:f7:92:ce:0f:72:1a:44:52:9c:a0:dd:
                    37:31:7c:b7:07:0a:6d:1b:c6:29:3f:8c:d9:56:f1:
                    ba:aa:fd:74:5c:ae:9a:2a:c5:17:75:8d:48:fb:f2:
                    ae:be:46:aa:13:b8:97:95:18:f1:03:ec:e2:f0:2a:
                    a9:e9:fc:48:21:68:87:e0:92:0f:af:a1:b8:ec:97:
                    0b:2f:f8:3e:4b:98:cd:f7:d2:56:41:48:93:28:10:
                    ea:5e:a8:09:5c:1e:00:56:65:20:a0:98:e3:f0:0a:
                    c7:bf:b7:1b:20:6e:4b:f5:d9:9e:b4:56:b5:57:60:
                    ec:61:c8:a3:a7:84:2d:1c:fb:66:a8:d1:9f:71:a1:
                    2e:8c:bd:21:9f:f4:8a:91:21:b9:e6:0a:cd:42:bd:
                    60:c2:8d:14:e8:3d:16:2a:a4:96:ea:00:58:e9:cf:
                    d4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DB:6C:29:03:30:58:94:C9:92:E6:39:75:DA:59:B0:84:2C:20:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f19b701f-4b64-3c06-9d45-c1e353da2929.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3600:180::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:fa:d0:43:95:02:4e:38:73:2a:28:af:69:e7:54:bd:d4:04:
         4b:c9:66:aa:b6:59:b3:c7:ef:50:86:6e:33:c0:92:2c:9b:41:
         c9:ca:10:90:37:d6:3f:5e:ad:32:bf:3f:0d:3f:29:f0:ea:24:
         d8:1c:13:a9:1b:6c:ef:a3:24:00:28:97:42:23:6e:2c:57:82:
         22:1c:d9:15:1b:06:a8:e2:33:5d:d7:76:ae:de:e3:3b:53:da:
         a0:52:d5:76:a3:0d:b4:e7:b0:4e:fc:47:4b:f3:06:34:00:0e:
         9b:de:83:b1:01:82:a4:23:9f:f2:ef:64:4a:85:cb:75:a4:31:
         b2:02:4f:b7:5d:3e:18:14:5a:62:dd:34:b7:ed:56:1e:7c:70:
         c0:65:8b:ad:fa:26:ba:61:5e:47:36:54:c0:e1:45:3f:9c:b6:
         eb:16:ad:b3:80:0c:19:11:bb:95:03:f3:42:ec:8b:d8:1c:c2:
         d4:13:29:dd:30:9c:25:77:ab:ce:36:ed:f1:b2:0d:04:40:91:
         e5:64:29:c1:3b:f0:66:95:b8:85:43:d4:e7:23:9d:a6:a3:8c:
         50:89:a8:33:2a:a5:5d:7c:d2:32:49:55:62:24:a5:c0:32:43:
         e9:dd:1a:21:77:c1:dc:17:44:02:d6:f9:63:40:fc:d9:93:72:
         f7:87:a2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 02:00:11 2024 by rpki-client on console-fra.rpki-client.org