Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/4f3b1d14-8545-3d03-9ee0-abc2049c0162.roa
File:                     4f3b1d14-8545-3d03-9ee0-abc2049c0162.roa (raw, json)
Hash identifier:          cFRF2710acimg4EW0x3sbeH53W9RYyhLGWPFaLbfZSM=
Subject key identifier:   DE:52:05:BB:2E:8F:CB:14:9B:07:A7:27:AB:2F:86:99:89:BD:92:28
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F43285845CE08F785254994357EF36DEA
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/4f3b1d14-8545-3d03-9ee0-abc2049c0162.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     394285
IP address blocks:        2606:a100:5000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:08:f7:85:25:49:94:35:7e:f3:6d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=3872144a-d753-4d30-ad30-447b2fb8c28b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:54:6e:e7:cf:7d:3f:50:46:07:3b:8a:32:aa:
                    da:14:88:29:38:2c:f5:03:d6:de:15:f7:c1:fe:7e:
                    b1:f7:64:f8:73:7b:c8:32:89:a5:44:1d:f2:37:66:
                    49:ac:c2:46:b2:85:74:02:14:95:ed:99:54:f8:6e:
                    fe:bd:6b:a2:07:e5:91:aa:93:38:b7:9f:e3:dd:62:
                    09:bd:14:b5:74:97:22:31:a5:9e:e0:cc:fb:b5:83:
                    06:f2:c4:ef:9d:b2:56:29:0f:33:50:92:0d:30:3a:
                    91:96:20:04:7c:f2:f1:72:1b:10:2c:d6:ba:d0:91:
                    78:f2:78:6d:c9:a1:83:2a:98:ba:91:7e:84:c8:54:
                    65:6f:2e:23:26:9a:e1:6b:3a:8a:94:8e:c8:e8:36:
                    23:f1:5a:75:3a:f1:e3:1d:9e:24:18:7d:22:30:08:
                    4a:b7:4b:83:58:a3:e6:34:f4:bf:f1:3c:e9:f6:2a:
                    47:59:2c:54:37:af:06:13:bf:57:77:64:6e:f1:74:
                    6a:8c:38:d9:12:03:cf:11:65:0d:dd:c2:b0:fb:68:
                    84:d3:53:da:71:16:08:d2:03:92:13:f6:28:52:4d:
                    6b:a2:b2:36:fd:e2:b6:b3:fc:ca:33:ba:75:60:54:
                    7e:82:67:ed:00:57:25:00:5d:2d:35:2b:88:cf:b9:
                    4c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:52:05:BB:2E:8F:CB:14:9B:07:A7:27:AB:2F:86:99:89:BD:92:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/4f3b1d14-8545-3d03-9ee0-abc2049c0162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:5000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:1d:c9:ae:f7:6f:3f:9e:3f:12:71:a9:9e:5e:ff:e5:0b:18:
         18:d5:6e:ce:09:50:29:86:a2:8b:c1:d4:5b:35:84:e5:15:09:
         0c:61:a5:3b:4e:e9:0e:71:81:64:88:ef:01:cf:2b:08:d5:5d:
         a3:45:38:7b:1d:ca:ab:ce:08:a7:d8:b3:76:21:d5:85:f8:96:
         7d:71:4b:54:c8:3a:b4:1f:1e:89:bb:d4:b2:e6:c1:7c:bc:17:
         96:fd:91:3c:bf:89:14:65:7e:b3:1e:8c:c6:10:ed:5e:a8:47:
         2d:1d:e5:47:cb:76:f8:8a:e3:d3:3d:56:ab:13:5c:db:ea:a4:
         28:1c:10:31:9d:0f:82:ee:f0:0e:8a:82:54:7e:f8:30:13:72:
         d0:31:25:d7:04:35:25:61:77:99:dc:16:a4:6c:75:c7:52:38:
         98:ad:dc:32:cb:4a:05:27:86:db:50:60:2f:c3:4b:a9:36:d2:
         eb:c3:b7:d8:60:01:e7:25:e8:8b:62:de:57:66:9d:80:63:08:
         0b:5f:01:fd:13:33:68:9a:39:d0:94:78:10:dc:43:ae:98:cd:
         1a:87:a2:ae:70:44:b8:90:fc:d4:41:e0:04:e4:dc:37:ec:92:
         7a:a8:e9:f3:0f:dd:ae:a9:76:92:b4:58:45:49:c4:a6:22:08:
         6c:03:d7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:38 2024 by rpki-client on console-fra.rpki-client.org