Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/08bace97-f9d5-3a68-9b72-603747fc7988.roa
File:                     08bace97-f9d5-3a68-9b72-603747fc7988.roa (raw, json)
Hash identifier:          Gq2xNU4E3WyXf8h6WyxI9fFceEAVng9xdOBhmOXeXas=
Subject key identifier:   01:17:E6:F1:B2:44:33:51:EF:7F:98:F4:97:68:8B:26:87:FC:60:D2
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F43285845CE08F7E044B61FC4DFFF0680
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/08bace97-f9d5-3a68-9b72-603747fc7988.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     394285
IP address blocks:        2606:a100:9000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:08:f7:e0:44:b6:1f:c4:df:ff:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=fecd5394-24ab-43a5-9f32-2ad3d56d57ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f9:95:a5:88:88:c2:7c:63:3f:14:69:04:85:
                    8d:0c:52:c2:5e:b4:23:28:f8:0c:6c:c2:08:7e:f0:
                    1e:a2:bb:44:ea:d9:6e:07:2a:66:a4:21:f2:8f:ea:
                    2c:53:cb:9d:e5:14:ba:70:84:ad:f2:21:f6:8c:96:
                    b5:a1:5f:cb:b6:1f:f3:10:f1:ad:fa:77:6b:5c:12:
                    1c:5a:18:5b:dd:e7:51:11:0d:c0:0c:2d:0e:33:5a:
                    c9:3c:0e:82:ed:54:2e:24:b6:17:64:7c:53:2d:ba:
                    b3:56:83:65:97:80:1c:40:86:83:c3:7d:72:f7:7a:
                    6a:21:c0:4f:5a:f7:41:34:da:b1:b4:b3:b4:71:d5:
                    ab:78:b4:4e:54:eb:cd:b9:96:fa:3c:3d:a0:9b:a7:
                    70:e5:1d:37:89:53:4b:42:13:e7:bf:3f:c6:82:4c:
                    9c:ea:67:0e:89:ea:f2:93:3b:d6:af:34:8c:90:a5:
                    2b:58:4d:4a:26:fb:6d:06:c2:3c:db:95:0d:52:43:
                    30:63:7a:83:42:37:1c:0b:e9:91:76:2d:75:0a:77:
                    dc:d5:60:2b:6a:2d:5b:64:d6:8c:22:2c:a2:62:ae:
                    ea:69:bf:54:2a:5c:87:50:8b:c8:f2:37:fb:db:0d:
                    1d:32:52:4b:b6:96:fb:41:b3:6c:4d:8c:e0:55:da:
                    f0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:17:E6:F1:B2:44:33:51:EF:7F:98:F4:97:68:8B:26:87:FC:60:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/08bace97-f9d5-3a68-9b72-603747fc7988.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:9000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:b0:b5:ef:e4:6e:15:07:da:6b:d2:f1:bb:5b:94:af:d3:1b:
         43:f6:ea:ba:49:a5:98:b0:18:15:9f:1c:80:fc:85:1f:a7:13:
         da:d9:18:f9:93:6f:c4:bc:d6:08:3e:ee:2b:f8:e0:4b:d9:14:
         53:64:db:8c:43:68:52:c1:e9:28:a7:bf:65:fa:37:02:eb:69:
         66:10:a7:c9:db:c4:30:3c:ec:8d:33:1f:7c:20:44:83:24:be:
         65:97:f1:06:db:5c:3a:66:da:a8:5a:c1:6e:83:34:5a:e6:10:
         2d:ba:b6:ed:9d:44:c3:98:f9:c1:e6:cc:cf:b1:c9:c3:d1:ff:
         6a:78:f5:4c:6c:e4:3f:61:bf:e9:b2:d8:bc:f4:90:12:9d:0e:
         9d:ec:c8:66:b7:81:bc:d5:04:89:da:2d:62:ff:1d:4a:cd:f8:
         42:20:62:d3:a3:3d:8e:98:f6:2b:5c:a4:6f:69:d1:31:bc:61:
         fc:19:5e:be:9b:eb:67:88:9c:8c:20:de:c9:48:68:f4:13:dc:
         2a:dd:d1:df:ce:62:d1:7e:c2:cd:35:f5:f4:05:cb:f0:ed:53:
         0b:9c:e3:6d:4a:0d:c8:8e:f4:5c:6b:89:16:eb:2a:05:ea:2a:
         d0:02:7a:44:a1:a5:ce:c4:aa:97:86:6a:28:f0:5f:b8:0d:89:
         49:4f:08:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:03:24 2024 by rpki-client on console-fra.rpki-client.org