Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/5094c408-dfa0-367e-81af-35f1f25d1afd.roa
File:                     5094c408-dfa0-367e-81af-35f1f25d1afd.roa (raw, json)
Hash identifier:          DTK5AcMUvQbeosWWtxV3+1YQ+Mnkq+nelsuOdOKvUC4=
Subject key identifier:   FD:C2:42:AC:DA:51:35:F8:48:E7:3D:9A:47:FE:23:25:59:4D:0F:4A
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F43285845DBFE63F115F4D396C68EA840
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/5094c408-dfa0-367e-81af-35f1f25d1afd.roa
Signing time:             Mon 13 May 2024 13:00:34 +0000
ROA not before:           Mon 13 May 2024 13:00:34 +0000
ROA not after:            Sun 11 Aug 2024 13:00:34 +0000
asID:                     20253
IP address blocks:        2606:bc40:104::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:db:fe:63:f1:15:f4:d3:96:c6:8e:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: May 13 13:00:34 2024 GMT
            Not After : Aug 11 13:00:34 2024 GMT
        Subject: CN=fba5ef87-4eb6-4eff-bcd4-a03080ddaa6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:44:93:88:69:06:96:16:3c:43:ad:0f:42:fd:
                    42:d1:d3:86:3b:83:4e:66:0b:c1:27:f2:c3:c7:b8:
                    d9:00:b6:55:78:cb:c7:d2:ec:98:c1:89:21:ce:e2:
                    47:0e:84:be:ed:e5:06:f8:fa:a6:43:cd:7b:3a:b5:
                    b7:5b:6c:b0:63:c7:cc:24:4f:90:a5:cf:a5:a1:14:
                    93:e2:da:e7:10:63:6a:72:68:a3:72:75:fe:07:0f:
                    db:c6:9e:39:7a:e7:0a:6e:33:0c:36:f9:fa:df:83:
                    95:b9:35:49:07:47:6a:8b:a9:27:7b:b5:28:8b:c6:
                    f5:93:2a:45:c5:b1:5d:3b:d3:1c:1f:fb:40:d6:22:
                    83:23:06:46:62:0a:8b:f7:dc:2f:be:30:05:7a:fc:
                    bf:43:ad:85:2f:f9:32:04:f1:a6:0b:ed:b8:db:e2:
                    83:b5:06:58:9e:ba:66:0d:fc:a0:83:cc:cf:0d:80:
                    d6:d4:49:bb:74:82:ed:ac:89:ee:29:f8:52:d6:87:
                    be:d8:83:71:fe:8b:bb:28:80:6d:fa:b8:dc:bd:c8:
                    f3:a4:7f:ee:f3:c5:35:1e:6b:42:7c:fa:4e:16:1d:
                    3a:2a:51:0a:e6:4f:1e:d3:14:6c:c3:17:1c:35:fb:
                    75:e0:71:42:c4:c4:84:bb:35:cc:d1:26:9d:ca:67:
                    ad:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C2:42:AC:DA:51:35:F8:48:E7:3D:9A:47:FE:23:25:59:4D:0F:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/5094c408-dfa0-367e-81af-35f1f25d1afd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:104::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:e4:14:33:36:bf:b1:92:c4:4b:e6:79:cf:bd:8b:d2:7e:b1:
         0c:35:15:cb:f3:62:8b:74:ee:b2:44:7c:62:76:2b:3d:2c:c1:
         f9:17:be:b9:bf:e6:48:af:ef:e5:71:66:10:13:aa:b9:14:9f:
         6a:80:51:2d:e7:88:f1:e8:67:ae:24:7d:77:0f:aa:ec:7a:30:
         dc:46:6b:2e:38:11:67:e0:bd:56:0f:91:dc:9b:32:75:63:00:
         f4:24:6a:fd:36:ef:28:a2:45:2b:83:cb:e1:24:3f:5c:ae:d5:
         6d:77:3c:71:2f:77:9a:02:51:0a:8c:4e:0c:cf:66:13:b0:76:
         cb:1f:46:4c:58:af:5f:07:d5:46:94:8d:9e:9a:67:81:09:dd:
         b7:b2:ba:7f:2b:9a:c4:63:d0:4c:db:24:f7:99:aa:43:33:b3:
         a6:41:ec:41:0e:62:28:5f:95:4c:9b:f5:1b:ec:66:51:d9:f3:
         24:fb:38:9c:8d:cc:a1:c0:0b:c6:69:b8:b5:92:fb:83:71:f3:
         a9:45:17:9a:19:31:31:76:60:5a:4a:df:f9:f8:3d:ed:9f:88:
         29:50:cd:b0:06:59:56:50:d4:da:63:dd:b2:85:a3:e7:3f:e4:
         62:74:0a:20:44:62:f3:73:11:0a:2a:0f:47:e1:4c:22:2c:eb:
         4f:0e:e2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:59:43 2024 by rpki-client on console-fra.rpki-client.org