Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/8212c42c-e3d9-3619-afb3-4e365a0757ca.roa
File:                     8212c42c-e3d9-3619-afb3-4e365a0757ca.roa (raw, json)
Hash identifier:          LaHqMi6G4873aQySRjColjICBUv/D7Q8IpbLkrPGQ3c=
Subject key identifier:   98:AA:DB:FD:DB:EE:D3:03:46:E0:8F:07:F8:BA:FA:18:69:AA:EA:81
Certificate issuer:       /CN=07c482f6-0e64-42ff-a503-75a85635277e
Certificate serial:       010D0C9F43285845840DBD257E1C76B96CC4C580
Authority key identifier: 9B:60:17:6F:03:4D:1C:65:68:81:31:15:5C:0D:5C:45:58:67:C1:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/8212c42c-e3d9-3619-afb3-4e365a0757ca.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        2607:5f40:200::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/07c482f6-0e64-42ff-a503-75a85635277e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/07c482f6-0e64-42ff-a503-75a85635277e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:bd:25:7e:1c:76:b9:6c:c4:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c482f6-0e64-42ff-a503-75a85635277e
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=c906f7fe-ba14-48d6-92a8-d865cd7aab63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:63:e5:8b:ed:9a:e7:19:08:43:cd:91:5f:db:
                    52:a8:0a:c4:19:5a:6d:78:2f:88:9a:da:7a:ab:1c:
                    e6:cc:43:1c:a1:03:b8:a3:ee:d2:7a:af:f7:d0:84:
                    e7:2f:76:08:0d:a6:c4:bf:8e:29:44:26:5a:cc:3b:
                    79:15:54:04:81:a4:27:45:a7:d4:64:73:f5:44:e4:
                    93:82:46:05:3d:c5:39:b0:bd:98:f1:b7:f0:86:73:
                    86:8d:6d:5c:65:4e:2f:ab:c0:21:56:92:24:b0:c9:
                    12:55:1f:61:d5:b8:08:d5:3d:15:87:30:40:48:f1:
                    19:84:fc:7a:a3:fd:b5:09:27:b5:39:f7:60:b1:ef:
                    36:67:67:56:de:50:64:90:85:ac:c4:d7:27:1e:b7:
                    a3:fd:f4:2b:2d:c5:e7:b9:2f:b5:88:9a:15:16:7e:
                    66:f3:1e:88:3d:d0:db:7d:78:23:44:fd:d3:aa:ea:
                    e5:9d:55:b7:71:41:d7:17:62:c1:89:c9:fc:50:63:
                    38:6c:fc:ae:2a:5b:d9:ca:fb:07:ab:b2:fe:67:9a:
                    c0:6f:21:25:cc:bb:e9:52:28:2d:d2:f6:c1:96:ca:
                    2c:6d:7f:02:cb:00:00:37:97:06:a7:b9:a6:d2:0c:
                    84:39:c3:f7:5c:ee:7d:76:0d:80:54:6e:18:02:0c:
                    93:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:AA:DB:FD:DB:EE:D3:03:46:E0:8F:07:F8:BA:FA:18:69:AA:EA:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/8212c42c-e3d9-3619-afb3-4e365a0757ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/07c482f6-0e64-42ff-a503-75a85635277e.crl

            X509v3 Authority Key Identifier:
                keyid:9B:60:17:6F:03:4D:1C:65:68:81:31:15:5C:0D:5C:45:58:67:C1:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5f40:200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:20:89:68:b7:3f:6b:4c:3a:1a:d9:6b:1f:ac:0e:d9:0a:c4:
         ee:8e:8b:c0:fc:0b:e5:e2:a4:ee:44:79:94:fe:57:f5:d6:6c:
         53:fb:97:c1:3b:19:5b:10:27:de:1c:27:0a:a6:38:a9:6b:ee:
         6e:99:ee:96:ee:f7:bf:af:75:74:39:8c:e0:ce:73:b7:e1:9c:
         01:e6:9d:41:4d:62:a5:a5:89:cf:14:c0:a8:05:3c:40:fe:fe:
         90:ac:36:53:e2:38:c8:e4:f4:4b:73:fc:be:fc:9f:76:47:52:
         1b:78:e1:49:a8:76:50:2d:e8:bc:fd:b4:7b:51:f0:57:c9:8b:
         75:8b:5a:97:50:7e:98:5c:42:6c:ad:ce:21:23:15:4d:90:39:
         ea:f3:8b:f2:9c:3e:5b:2c:9e:d9:ce:ae:53:aa:13:90:b0:f2:
         80:19:f1:45:4a:2a:61:0c:ef:ce:47:18:8b:32:89:c1:fe:cd:
         b3:75:13:67:ae:53:0f:a3:2c:bf:bb:a8:65:cf:d1:c7:77:1b:
         08:7f:4b:dc:6d:03:93:36:20:91:b3:5b:01:51:0b:56:6f:64:
         a9:6a:c0:c8:1c:a2:55:0e:34:19:b1:04:98:79:e3:49:b7:45:
         a7:af:e0:47:94:03:7d:7b:be:30:fa:dd:0d:9d:a9:5e:39:c8:
         2d:82:5e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:56:59 2024 by rpki-client on console-ams.rpki-client.org