Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/9bea7452-63e0-35f4-8552-3d2fb19d0f7c.roa
File:                     9bea7452-63e0-35f4-8552-3d2fb19d0f7c.roa (raw, json)
Hash identifier:          hwF4NJZp51EFS2/zZHPdk8FfNrjOAg+vRiilbOv+KQE=
Subject key identifier:   27:F7:B6:69:E3:FA:0E:38:14:F4:A8:8A:EB:64:C2:B4:FF:9E:23:AB
Certificate issuer:       /CN=823e9778-e6e3-4d85-a2e2-7e92cbc99f39
Certificate serial:       010D0C9F43285845936897A48332BDA6B8D51900
Authority key identifier: 0D:38:03:4E:C1:C3:CE:A7:F1:ED:C0:C2:D6:BE:CF:44:BD:DA:E3:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/9bea7452-63e0-35f4-8552-3d2fb19d0f7c.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     984
IP address blocks:        2606:fb40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:97:a4:83:32:bd:a6:b8:d5:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=823e9778-e6e3-4d85-a2e2-7e92cbc99f39
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=2cad7e15-4177-469e-9c37-304f7183e3bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f2:fa:d2:8d:f2:2e:20:e6:8d:72:15:ef:6c:
                    e1:8c:d3:4d:b4:bb:21:c4:ed:4a:ff:c9:8a:e4:76:
                    9a:a6:d3:d3:18:27:2c:18:c4:a4:d7:c2:ae:f7:ee:
                    3b:86:48:88:69:28:b3:4f:5c:bc:fe:56:a3:d7:46:
                    2c:2e:d0:31:71:16:b8:e3:70:b3:04:c0:ad:bd:db:
                    88:94:b0:0a:b0:7c:a5:a0:8a:8b:12:37:a2:c3:c2:
                    cf:2a:55:63:9a:bb:4b:c2:c2:1d:c4:40:e0:cb:74:
                    e0:5e:69:56:1d:f5:96:f7:b9:ee:14:7f:ab:60:44:
                    cf:bc:b4:c7:d3:c5:7e:ef:43:cb:ba:0f:6b:fb:e6:
                    e5:45:bd:88:a4:3c:b8:da:34:58:9a:c2:81:4a:af:
                    f6:a1:9d:27:e1:20:ec:43:10:f0:2e:22:a7:ea:6a:
                    eb:96:41:3f:64:6f:24:ee:af:6b:fa:02:ab:d1:a4:
                    5d:00:e4:90:f9:f2:49:f2:9f:91:6c:7b:82:70:f7:
                    12:d0:27:ad:d7:21:5b:54:14:44:d9:50:51:f1:8f:
                    ea:38:46:28:fb:a8:6a:41:73:d0:46:fe:5d:46:23:
                    55:96:0b:22:ed:6f:f8:72:bd:fa:72:6a:68:64:83:
                    c7:65:68:d8:6d:9b:62:4c:8b:af:24:31:b6:e0:ea:
                    5a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F7:B6:69:E3:FA:0E:38:14:F4:A8:8A:EB:64:C2:B4:FF:9E:23:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/9bea7452-63e0-35f4-8552-3d2fb19d0f7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.crl

            X509v3 Authority Key Identifier:
                keyid:0D:38:03:4E:C1:C3:CE:A7:F1:ED:C0:C2:D6:BE:CF:44:BD:DA:E3:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:fb40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:b9:a5:a2:20:7e:2e:ea:40:d1:98:24:23:ab:a7:f5:0a:cd:
         79:c9:21:e9:9c:43:bb:f4:7f:30:7a:eb:97:c4:28:f6:3d:31:
         72:f2:c3:72:24:8c:98:1e:12:b3:e0:ce:39:b1:c6:e6:c2:67:
         6a:b6:ec:f4:3c:56:6b:e1:12:7d:09:29:27:70:2b:c2:87:ca:
         bb:b3:ce:95:b6:56:75:39:6c:f0:b3:bd:40:b5:50:e7:f8:5d:
         69:d2:74:15:f2:97:2e:e4:3a:56:b2:da:74:b8:80:12:24:f6:
         ae:a5:97:44:32:7c:50:b8:79:94:50:bd:6f:43:25:e9:63:40:
         f6:ae:91:f1:2b:ce:68:28:e3:6e:7c:96:1f:69:9d:47:29:63:
         c1:5a:54:e1:fa:98:4a:fe:79:42:0a:55:a6:ba:02:5c:5f:90:
         10:d6:d8:d9:dc:67:2d:a2:1f:11:92:0d:d5:dc:94:eb:16:40:
         48:d1:a6:89:0c:a8:7d:65:df:cd:0d:ec:ec:52:10:78:c2:93:
         76:26:bc:c7:c2:d1:cf:7a:a0:e7:80:7b:dc:c1:2f:0e:6a:35:
         18:11:f1:1a:ff:9a:c2:b0:59:f7:a7:2b:92:2f:44:f2:e4:40:
         20:eb:e8:d9:30:ac:1d:7e:6a:28:ac:e0:6f:ab:92:58:69:1e:
         41:2d:16:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 16:24:02 2024 by rpki-client on console-fra.rpki-client.org