Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/56a98557-a076-3cf9-a5eb-20859e243d26.roa
File:                     56a98557-a076-3cf9-a5eb-20859e243d26.roa (raw, json)
Hash identifier:          a7gZKP/XSekxPZutT9/8VNGdgG9PB92mXHriNAXKNHE=
Subject key identifier:   35:3F:CA:DB:DA:12:BA:11:5D:BF:E4:59:27:76:FE:16:46:19:AF:9E
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F432858456F1DC9157DB16DB58C9F9D80
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/56a98557-a076-3cf9-a5eb-20859e243d26.roa
Signing time:             Thu 04 Apr 2024 13:00:36 +0000
ROA not before:           Thu 04 Apr 2024 13:00:36 +0000
ROA not after:            Wed 03 Jul 2024 13:00:36 +0000
asID:                     20253
IP address blocks:        2606:bc40:21::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:1d:c9:15:7d:b1:6d:b5:8c:9f:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Apr  4 13:00:36 2024 GMT
            Not After : Jul  3 13:00:36 2024 GMT
        Subject: CN=e167338c-384d-4747-810e-4164ec689181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:73:ec:0a:4f:25:83:5f:a9:73:8b:47:93:0c:
                    f6:f3:d3:9f:0c:a5:46:39:9b:22:92:71:dd:de:d4:
                    e3:c3:88:b7:12:93:2b:62:ed:69:26:ee:75:64:5d:
                    a4:39:19:cb:ab:68:3b:6c:3d:fb:22:00:ea:4d:1f:
                    e8:51:ea:f4:ce:1c:fd:38:b7:05:6b:9c:e4:0a:d1:
                    af:7c:48:e6:fd:ab:e4:e8:b8:66:30:4c:a3:36:32:
                    4a:4a:cd:fa:fc:cb:c3:ed:84:fc:2d:2f:8e:c6:d0:
                    f8:11:79:98:94:06:9f:95:8b:9d:5b:a1:51:5a:e2:
                    f8:92:b3:23:d2:14:e0:7d:ee:db:79:8a:3b:e2:77:
                    b7:e5:0c:0a:05:45:bb:3b:91:24:93:c8:8f:4b:3a:
                    05:8c:99:10:77:8d:2d:87:7a:48:39:35:51:0a:c1:
                    e4:3d:b3:75:6a:60:52:ff:16:b9:a8:ed:3c:f1:0e:
                    ce:99:0d:26:84:56:62:89:67:bf:6e:17:46:ee:f1:
                    bc:70:5a:a0:4a:05:c9:c9:cc:9a:42:29:ce:3b:34:
                    93:05:13:2f:ef:56:07:6b:08:6a:19:9d:ac:55:e2:
                    b3:60:8f:56:89:ae:6a:ba:02:0d:1e:4d:34:6e:03:
                    d1:34:62:dc:25:a6:44:aa:fd:ec:1d:a6:8c:64:d4:
                    d1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3F:CA:DB:DA:12:BA:11:5D:BF:E4:59:27:76:FE:16:46:19:AF:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/56a98557-a076-3cf9-a5eb-20859e243d26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:1e:41:88:bd:04:07:06:a2:72:b4:b3:c8:e4:90:9f:d9:96:
         2b:09:cc:72:fa:d1:74:86:29:c5:7f:8f:22:08:3e:bc:5d:9c:
         21:d8:46:51:bf:6c:09:a6:ff:fe:99:b1:15:2f:54:5d:e5:fc:
         29:f7:2b:6e:8e:d4:df:76:9e:b7:43:ed:5c:c3:38:fb:b1:ef:
         21:9b:d1:0b:a7:d1:a7:0a:ef:d7:8e:45:7b:b1:e9:9f:22:b5:
         74:72:a2:0e:81:a6:55:db:07:3a:24:f8:e9:7a:e6:7f:3f:2f:
         49:62:53:e0:4c:4c:60:50:f3:0c:da:99:8d:50:60:ac:17:26:
         b9:af:3c:42:e4:cc:57:3b:94:03:d6:55:cc:cd:8b:d5:f9:f9:
         b9:83:37:24:38:3f:91:6d:32:d9:d2:88:e6:9c:52:8f:0d:ba:
         65:22:f4:ce:0e:9b:80:d7:73:21:9a:d9:f3:f8:d7:bd:d2:42:
         be:cf:c9:42:cd:bd:01:9e:22:60:5e:7e:db:70:ae:c7:61:7b:
         45:fe:7e:fa:52:95:ff:2a:92:55:e1:ea:54:a7:bb:c3:f9:a4:
         cd:d1:37:8d:1c:5e:c5:7c:ec:ce:a2:ce:14:40:8f:95:a9:22:
         62:41:bb:af:de:4f:22:4b:37:17:88:f2:9a:6f:c4:c2:51:fe:
         3e:88:0b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:19:17 2024 by rpki-client on console-ams.rpki-client.org