Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/f1bbd65a-219c-3a5e-8202-9e0541272dca.roa
File:                     f1bbd65a-219c-3a5e-8202-9e0541272dca.roa (raw, json)
Hash identifier:          2oOUboYKA8pT12N/PJ+8Mg+5+BC0E0eGjBXeMeUPkbs=
Subject key identifier:   9D:8F:17:74:45:10:B5:AF:14:18:FC:1D:10:16:EA:4D:4A:86:4E:09
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F432858456F1DC9534CB9732EEE06A100
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/f1bbd65a-219c-3a5e-8202-9e0541272dca.roa
Signing time:             Thu 04 Apr 2024 13:00:36 +0000
ROA not before:           Thu 04 Apr 2024 13:00:36 +0000
ROA not after:            Wed 03 Jul 2024 13:00:36 +0000
asID:                     20253
IP address blocks:        2606:bc40:106::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:1d:c9:53:4c:b9:73:2e:ee:06:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Apr  4 13:00:36 2024 GMT
            Not After : Jul  3 13:00:36 2024 GMT
        Subject: CN=d5d7bbbe-336b-424c-a945-ac82032c7a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:de:ce:f8:d3:37:d3:f2:f8:3a:c7:dd:a6:9b:
                    7a:c6:49:07:da:1d:ad:e3:5a:1c:a1:74:a2:df:e0:
                    46:5c:bd:ff:4e:92:7b:67:8e:e1:ed:3c:d3:02:8a:
                    46:28:3d:10:77:e7:94:4b:23:e7:a3:b0:77:44:ad:
                    40:22:81:7b:1a:23:50:09:67:ee:57:03:8b:d9:42:
                    1f:87:b6:c8:f4:ba:a2:d0:c2:43:cc:d1:a0:1e:f4:
                    aa:f6:42:07:79:a1:47:da:4b:dc:0c:9c:7b:c3:c9:
                    3f:83:b6:79:44:ed:c6:fb:e1:77:9a:3f:8a:9e:41:
                    41:31:b1:52:e7:39:10:28:b3:c7:ae:88:2e:8d:a2:
                    15:9c:67:a7:e7:af:e8:dc:c3:a6:b2:92:26:a7:8f:
                    79:d2:96:5f:46:11:eb:11:55:b8:5e:fe:52:93:ec:
                    c3:38:b8:77:33:8a:8c:1e:5b:73:89:c8:b2:f6:6d:
                    b0:42:fb:c0:97:6e:46:2f:4f:63:cd:d0:a1:88:e8:
                    0f:bf:61:58:46:87:d1:0b:93:69:ac:d7:12:58:a5:
                    d3:76:89:c4:44:77:87:ef:04:1e:09:00:6b:0e:07:
                    4b:7d:59:e2:5d:39:3f:4c:ee:cc:6c:16:7b:61:60:
                    83:bf:f8:00:b4:aa:5a:60:10:7e:73:f3:fe:27:58:
                    74:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8F:17:74:45:10:B5:AF:14:18:FC:1D:10:16:EA:4D:4A:86:4E:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/f1bbd65a-219c-3a5e-8202-9e0541272dca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:106::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:b3:3e:56:a5:17:fa:81:2f:1c:16:be:f5:04:99:54:49:f0:
         6b:2f:97:0b:63:d4:c6:9c:ea:8e:de:67:16:95:5e:ba:1c:7f:
         fd:dc:9a:d3:d7:b6:e7:9e:1c:a8:42:da:2a:a0:5d:59:73:15:
         d6:cc:76:8d:3d:bb:65:80:1a:07:00:07:84:ad:e1:c6:70:92:
         90:4b:1a:cb:d7:c9:6d:e8:17:bf:b1:e6:53:be:7e:a1:6e:38:
         1b:fd:76:68:aa:87:b7:c1:29:5f:3a:38:7d:b8:26:e2:4d:db:
         02:cc:22:9a:e0:97:da:57:fd:6e:dc:ce:0e:be:4a:bf:5a:94:
         d5:8d:b3:8e:89:d2:c8:d0:8b:ce:0b:01:14:3e:72:c8:65:26:
         9d:a3:8f:d5:bd:a9:73:e0:d5:ac:28:31:67:67:a4:e3:dc:11:
         6c:35:fa:7c:81:13:6d:76:00:0a:cd:e0:22:bd:00:7e:d5:f7:
         56:f3:41:49:35:f5:47:8f:2d:27:42:89:7a:15:9d:05:f5:3b:
         ba:6e:6f:3d:4a:55:db:a3:5d:cb:16:91:7f:8b:e7:77:16:87:
         06:7c:10:26:aa:70:3a:e4:b1:96:89:48:e1:16:66:5c:1b:c1:
         46:f0:c2:9a:ba:7e:d8:09:94:e6:95:01:b0:b1:1b:c3:e3:9a:
         d1:64:48:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:35:14 2024 by rpki-client on console-ams.rpki-client.org