Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/ceb6eabb-5bd0-3f49-bd64-dc0e23851695.roa
File:                     ceb6eabb-5bd0-3f49-bd64-dc0e23851695.roa (raw, json)
Hash identifier:          /5DxSKyP3r/Rw2aYiOkn2blCChRF1VEXZsLmsMrUI08=
Subject key identifier:   CA:5D:00:29:09:A8:D3:0A:63:04:34:12:FF:4E:0B:F1:7C:BA:42:3A
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F43285845DEC9460CBB633F1610F6ABE0
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/ceb6eabb-5bd0-3f49-bd64-dc0e23851695.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     20253
IP address blocks:        2606:bc40:24::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:46:0c:bb:63:3f:16:10:f6:ab:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=d6c157ae-9e65-4382-850e-25f9ccdd8ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c6:d3:8f:e8:d4:44:0c:1b:bb:e4:9a:3e:7f:
                    fd:c7:c5:0c:a2:f7:24:61:b5:79:f3:62:94:38:a1:
                    f6:2c:5e:e6:3c:4e:5e:51:91:c6:50:e9:f0:55:43:
                    e5:15:de:5a:8e:de:af:66:d5:e5:8f:1e:bb:1b:a2:
                    b8:53:f7:ee:0a:4b:4e:c0:1d:f6:65:fa:38:00:fb:
                    3d:95:27:d0:11:33:cc:46:97:8e:44:b0:bf:8f:5b:
                    07:c2:d3:ca:62:f6:7e:9c:9c:39:9a:88:df:7d:11:
                    bf:88:72:3d:16:9d:fc:44:e1:24:f4:fd:36:c1:e6:
                    4b:ad:2f:db:39:2b:0f:b3:41:7e:b6:4a:df:25:91:
                    ae:42:cc:9e:c6:9f:20:49:88:4b:f9:5b:69:fd:ca:
                    7a:33:e2:6f:99:7d:bc:d8:33:34:25:e6:af:86:20:
                    04:cc:45:99:9c:15:85:43:99:12:3a:7f:3d:2b:ce:
                    74:90:d5:15:4a:7c:e1:af:00:2a:d3:7e:82:0e:af:
                    f5:39:2c:a4:8f:ac:56:9f:9b:05:70:f9:f1:e6:f1:
                    aa:04:83:04:f5:26:17:30:e9:f6:bc:ea:6c:ab:51:
                    f1:19:de:76:6a:6a:ff:09:69:75:9b:36:db:a9:52:
                    d3:a8:98:a6:29:06:8f:44:b5:ea:18:9f:f9:fb:88:
                    bf:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:5D:00:29:09:A8:D3:0A:63:04:34:12:FF:4E:0B:F1:7C:BA:42:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/ceb6eabb-5bd0-3f49-bd64-dc0e23851695.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:24::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:90:9a:7b:97:e5:0a:ec:50:76:15:97:f5:7b:dd:64:a2:0d:
         58:4e:eb:17:9e:ee:40:0a:2e:71:31:96:02:65:d7:3a:b1:26:
         fb:57:df:80:66:68:81:b9:d5:79:a2:b5:98:5d:21:00:76:3d:
         db:a8:ad:8c:af:2b:a3:85:b8:b0:45:d9:f5:ea:af:24:3a:b8:
         4f:23:a0:a5:c0:9a:7c:22:ae:ca:21:6b:08:a4:b2:84:8f:07:
         ea:02:00:23:45:63:f8:23:fb:8e:3a:41:df:f8:b5:0b:fd:32:
         2d:0e:4a:dc:91:e1:85:49:e4:53:1d:4b:fb:de:e1:25:6e:25:
         8c:b9:b9:12:96:6c:86:57:3d:0c:24:bd:99:bc:db:1f:47:6a:
         3c:4a:0d:53:73:0c:06:18:b8:6a:06:bf:9c:ae:f7:a6:0b:43:
         d3:24:0b:b6:72:4d:b3:b6:4c:c9:13:30:c0:d7:30:8f:e3:73:
         78:1f:c2:e7:52:56:3d:8f:9d:d9:10:41:2e:c7:58:ef:36:8d:
         1e:99:c4:89:0f:3e:ef:81:49:0c:3b:4d:25:b9:7a:81:05:7e:
         36:04:8a:98:af:c1:8d:f4:e1:e4:5a:2e:0c:f7:f4:00:80:cc:
         95:9c:b5:ca:eb:c2:ac:d5:7b:14:96:7f:69:cd:31:51:17:3a:
         e3:ea:41:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:27:13 2024 by rpki-client on console-ams.rpki-client.org