Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/fffd3b1d-7e00-3ebd-8580-8c9bf4876472.roa
File:                     fffd3b1d-7e00-3ebd-8580-8c9bf4876472.roa (raw, json)
Hash identifier:          YjCogBwtwVYMYYpLodOYFRbd9UjSL4/sJh2O+9gGHbE=
Subject key identifier:   25:64:19:2C:36:93:4D:31:CC:48:5F:28:83:13:59:34:2C:8A:FE:E3
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F43285845A15E21181C8BE90279C83380
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/fffd3b1d-7e00-3ebd-8580-8c9bf4876472.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     16839
IP address blocks:        2606:3600:1110::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:21:18:1c:8b:e9:02:79:c8:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=866f8fa3-2007-48f3-b47c-e270ac4dbf72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:51:56:0c:5b:ca:fb:71:b9:55:cd:1a:e2:14:
                    04:9a:fe:39:62:ef:76:f3:e8:4c:51:3e:fb:47:c9:
                    6c:4f:7a:70:74:76:7e:2d:df:2a:a9:d3:8d:6a:93:
                    29:4b:b5:05:d9:68:f3:c2:d3:45:b0:15:29:01:40:
                    4f:d4:91:f4:45:87:d6:32:a7:44:04:3c:e7:8a:b4:
                    ce:da:48:e0:0f:4f:c3:43:92:3e:fc:e3:9b:38:57:
                    15:5e:73:3c:e3:8e:71:1d:68:b4:5f:44:53:c7:bc:
                    ef:10:ca:51:0d:e2:0f:f1:d1:8e:01:5e:01:86:71:
                    b7:3e:d0:2d:a6:61:8a:95:c8:90:80:c5:47:e4:ab:
                    6e:d3:a9:39:1b:b8:2a:5c:3a:19:23:d8:26:38:52:
                    bb:93:ed:27:b9:cf:ce:4d:4c:14:a3:31:20:18:44:
                    7b:2a:b9:98:07:35:dc:15:6f:1e:40:72:41:8c:7b:
                    2f:68:fc:0b:3a:a7:fb:88:1e:cc:be:6c:26:51:03:
                    df:75:1a:0f:c6:34:af:8e:00:49:55:4f:bb:e7:b6:
                    f7:8f:03:8d:a0:2e:f7:40:36:ac:12:f0:15:2a:18:
                    aa:da:ca:04:4c:51:46:5a:47:80:9f:75:69:6e:07:
                    54:ff:b4:d7:85:84:54:ad:ce:6a:f9:43:91:f9:c7:
                    0a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:64:19:2C:36:93:4D:31:CC:48:5F:28:83:13:59:34:2C:8A:FE:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/fffd3b1d-7e00-3ebd-8580-8c9bf4876472.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3600:1110::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:4d:a0:26:7f:0d:1a:2d:93:51:62:f6:b6:b2:e3:16:e0:68:
         44:1d:15:6b:5f:64:83:a9:8e:d9:00:3a:cf:8b:fd:57:94:9d:
         bc:65:ae:6e:44:15:1c:a6:43:b3:3c:e7:04:d2:ff:98:3b:9f:
         42:9a:35:90:3b:5a:2e:a6:f2:6c:94:0d:56:e2:5f:28:75:b6:
         2c:46:70:bc:ba:82:69:c5:ed:70:d7:95:4d:90:a1:44:28:9a:
         38:60:83:db:66:70:88:3c:bb:a3:f1:0e:9f:9c:0f:0b:3c:a0:
         1c:1d:10:f9:4b:80:56:a7:84:d8:15:16:49:49:7e:65:9a:95:
         fa:f9:3a:ca:79:c5:ad:d1:eb:13:69:1e:26:d1:26:97:46:f7:
         b3:f6:40:7b:77:d4:22:ff:8a:37:fa:a8:5d:ab:42:4c:8f:42:
         5d:61:58:22:0c:c1:0b:cb:7f:fe:e4:b0:61:aa:a3:91:10:a6:
         2f:7c:33:96:f8:98:df:d8:1a:b2:29:5e:0d:41:20:3b:d7:d4:
         d2:d1:4f:0c:fe:45:b1:8f:d7:41:4b:a4:9a:c0:11:b3:10:ba:
         8c:e3:58:4f:9a:e2:cd:d6:7a:36:3a:03:11:bf:1c:83:61:ca:
         2a:4e:65:40:82:33:1b:36:fc:8e:c3:86:c3:d5:d0:8c:63:e4:
         f6:d2:9b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 02:19:35 2024 by rpki-client on console-ams.rpki-client.org