Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/7af8c9c8-844f-3da2-9b51-762505ecd85d.roa
File:                     7af8c9c8-844f-3da2-9b51-762505ecd85d.roa (raw, json)
Hash identifier:          8hwHqAmN44lgtIPAwQBRD1BjiljXmUDVMngyzvdiR2k=
Subject key identifier:   BE:DE:D9:A6:56:20:A8:7D:E7:CB:B5:48:25:27:C9:D9:EC:24:2E:5C
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F432858458DD34DE3FDAB78C4E5B27500
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/7af8c9c8-844f-3da2-9b51-762505ecd85d.roa
Signing time:             Mon 15 Apr 2024 13:00:35 +0000
ROA not before:           Mon 15 Apr 2024 13:00:35 +0000
ROA not after:            Sun 14 Jul 2024 13:00:35 +0000
asID:                     20253
IP address blocks:        2606:bc40:f103::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8d:d3:4d:e3:fd:ab:78:c4:e5:b2:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Apr 15 13:00:35 2024 GMT
            Not After : Jul 14 13:00:35 2024 GMT
        Subject: CN=e4eb72b1-e074-48f3-b8db-cd52ae3c478b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:68:01:3d:1e:5e:ff:cc:8c:b8:bb:45:84:ee:
                    ba:2c:93:09:48:db:30:f0:a3:7d:cc:e2:8f:78:30:
                    6f:e7:70:9b:90:3b:01:ef:02:5a:9c:bd:35:78:07:
                    ea:95:4c:4c:75:59:b0:1b:03:66:5b:25:35:e7:58:
                    3a:d5:81:3c:4f:22:eb:f7:04:3d:b0:1e:48:c8:bc:
                    b1:91:e7:e1:74:40:d5:58:1b:e5:48:e2:2b:a6:ec:
                    2f:b0:e7:19:0f:b3:46:6b:67:62:06:e6:86:da:f7:
                    ec:28:13:c5:e7:54:56:14:eb:0a:9d:87:e9:90:7b:
                    3e:30:aa:1d:74:1d:40:5b:4b:6d:5f:42:15:82:ef:
                    59:05:8d:32:90:37:3b:7b:bb:a1:69:f4:48:85:0d:
                    db:67:5d:15:98:54:e3:ee:75:51:d7:33:31:bb:1f:
                    0e:64:f9:3a:db:d3:04:7a:3f:05:17:25:a8:95:1a:
                    0d:2f:7e:b7:b6:00:3f:ae:48:d3:98:e1:2c:6f:67:
                    2a:bd:87:46:b8:b3:44:d3:21:b7:30:b5:6e:78:47:
                    b8:54:ba:4a:db:dd:bf:35:59:d9:cc:3b:5c:94:87:
                    65:61:64:34:3f:3e:24:8a:fe:01:a4:20:f1:fa:bd:
                    24:b2:08:7e:4b:c5:40:35:48:e6:26:a6:a5:29:93:
                    9c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:DE:D9:A6:56:20:A8:7D:E7:CB:B5:48:25:27:C9:D9:EC:24:2E:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/7af8c9c8-844f-3da2-9b51-762505ecd85d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f103::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:bb:d9:e3:51:5c:4e:70:9e:05:c1:c6:17:fa:b6:a2:03:f7:
         54:64:15:df:bc:c2:b0:c4:ee:59:f7:27:33:fc:de:a5:d1:fb:
         ef:80:9c:d2:e8:3c:00:a3:fa:f0:1e:9d:79:21:d1:8c:da:75:
         de:67:2e:93:06:50:a9:b6:23:75:db:1f:14:81:0f:ee:69:ef:
         ae:9f:13:17:40:36:98:c5:8b:0b:8e:e1:df:b0:0d:e5:0a:b1:
         b4:4c:b3:36:20:ff:03:14:c5:b5:c8:e3:49:53:61:49:e1:97:
         42:87:62:3d:6c:4c:b7:f5:12:96:42:51:3e:13:e6:f1:32:b2:
         43:f4:d7:d5:ff:d7:5a:28:f7:4b:d8:6e:76:4d:a3:18:f8:f7:
         6e:80:8b:75:09:a5:fc:fa:07:e0:82:a7:68:47:3f:b5:c1:87:
         5f:cb:98:30:c1:3c:d3:44:e4:6f:17:84:f3:03:cb:8d:47:38:
         3c:93:31:c7:f3:b2:b9:59:33:7b:8f:dd:fe:4a:81:26:8a:81:
         d4:87:dc:65:af:d6:31:5c:50:39:10:5a:27:35:c5:73:c7:b0:
         86:8a:28:6c:a2:15:84:5a:fc:6e:d1:87:6c:ea:6a:5e:f3:66:
         99:cc:79:aa:94:15:44:aa:aa:55:c7:b5:61:cf:83:9b:49:2a:
         7b:63:07:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:35:14 2024 by rpki-client on console-ams.rpki-client.org