Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/45b67b9c-3141-3ab2-af88-4a716c51accf.roa
File:                     45b67b9c-3141-3ab2-af88-4a716c51accf.roa (raw, json)
Hash identifier:          r/CvEB3SXaJFJzQH45vV/M1kKVLlp61pwjrgtm+134s=
Subject key identifier:   01:F3:4B:FE:45:03:FC:28:10:54:D9:71:A7:B3:00:F0:A6:C6:19:DB
Certificate issuer:       /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial:       010D0C9F43285845CB3E4A553277650FDE6FB400
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/45b67b9c-3141-3ab2-af88-4a716c51accf.roa
Signing time:             Tue 07 May 2024 13:00:35 +0000
ROA not before:           Tue 07 May 2024 13:00:35 +0000
ROA not after:            Mon 05 Aug 2024 13:00:35 +0000
asID:                     393885
IP address blocks:        2604:4a00:3000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cb:3e:4a:55:32:77:65:0f:de:6f:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
        Validity
            Not Before: May  7 13:00:35 2024 GMT
            Not After : Aug  5 13:00:35 2024 GMT
        Subject: CN=1cdb7790-f447-441e-800c-544aa8b2917a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:99:86:b8:3d:07:3c:89:00:a8:ce:94:f7:eb:
                    63:f7:2f:4a:6e:d8:68:06:1c:e3:d5:7a:a1:b0:72:
                    b4:bc:02:dd:52:c0:2f:73:9d:82:69:fc:5d:04:fd:
                    ba:fe:9f:3e:55:6b:d3:3c:8f:f8:fc:2e:02:f0:91:
                    bc:02:07:7b:a5:4b:8e:60:ae:8f:f2:6b:cb:24:23:
                    e4:e9:38:95:c9:1d:14:d5:69:62:78:6f:e9:02:7a:
                    e2:fe:38:5d:43:d5:16:36:3f:5a:e5:ea:89:1d:a1:
                    fd:1a:e3:46:b1:d4:53:df:ad:81:d8:6b:53:2f:a0:
                    47:df:27:b1:8f:ab:e4:9f:6c:11:08:cb:dc:aa:3a:
                    fd:26:0d:44:3a:7d:16:5a:ec:ee:31:b0:9e:72:12:
                    26:a6:1f:27:e6:ce:3e:c5:c8:c5:f6:36:75:b9:34:
                    43:e2:09:65:d4:2d:58:fe:f3:3e:3e:6b:89:06:a0:
                    8d:23:44:80:3f:d3:91:91:d8:70:7e:53:ee:a6:54:
                    2a:ea:05:75:fc:53:f8:8d:3b:52:5c:26:b4:91:bd:
                    98:2c:33:a9:fc:47:56:c3:32:3d:0b:4b:8a:df:ef:
                    d7:1f:cf:15:d3:15:81:47:71:75:77:bb:d9:b0:6c:
                    b4:61:37:9d:bd:b7:5d:b9:3f:66:28:11:e6:b8:75:
                    bb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F3:4B:FE:45:03:FC:28:10:54:D9:71:A7:B3:00:F0:A6:C6:19:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/45b67b9c-3141-3ab2-af88-4a716c51accf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl

            X509v3 Authority Key Identifier:
                keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4a00:3000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:97:ab:4a:23:cc:67:59:dc:8a:5f:5f:f3:0e:f2:86:73:2f:
         1e:64:38:00:ff:02:5d:33:a3:ec:4b:eb:af:03:e5:81:40:88:
         e0:e6:42:36:4f:1f:52:53:ec:ce:15:3f:54:b9:6a:66:12:c7:
         68:a0:56:52:cb:09:0c:3b:29:2c:c6:66:45:a3:be:07:74:32:
         8d:02:06:6b:e6:7a:cd:d8:62:56:46:42:5e:b5:fa:88:3e:cd:
         76:8c:16:c2:55:d2:05:dd:0c:f3:08:3f:27:d7:7b:17:66:58:
         45:62:d7:7a:1e:84:c7:4b:4e:18:2d:a8:e0:52:96:bf:45:ee:
         bf:78:6b:ea:59:b3:6a:cf:e2:d6:84:a0:f7:3e:2d:67:53:a8:
         ed:ce:f9:5d:65:80:23:56:d8:d2:c4:e3:b0:f1:5a:57:df:18:
         30:3b:5b:ad:a6:30:7f:6c:cf:d2:cb:c3:c1:9b:a6:31:c9:b8:
         62:eb:28:8e:60:44:bf:f8:57:96:a8:30:63:03:8a:ad:99:76:
         76:f0:58:c6:78:97:c1:17:95:57:ac:12:e8:4f:1d:ef:7b:5f:
         12:31:d2:2e:c5:79:e0:58:9e:01:fa:0e:bd:52:47:a6:ab:fb:
         16:0e:63:b6:63:0e:97:95:92:58:f1:65:dd:29:e7:5d:78:07:
         dd:ad:53:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 17:33:23 2024 by rpki-client on console-ams.rpki-client.org