Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/a97ca693-be0e-3463-98ab-492dd9383723.roa
File:                     a97ca693-be0e-3463-98ab-492dd9383723.roa (raw, json)
Hash identifier:          1gp3t94epxFyH0XSHB/l8kMRP1XUn3I1rRdBBpXlIUk=
Subject key identifier:   24:A6:16:5E:89:EC:A5:11:23:92:80:A5:4B:69:37:93:F7:BB:E4:40
Certificate issuer:       /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial:       010D0C9F43285845EF892E6DE879AEB83A01F400
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/a97ca693-be0e-3463-98ab-492dd9383723.roa
Signing time:             Mon 20 May 2024 13:00:35 +0000
ROA not before:           Mon 20 May 2024 13:00:35 +0000
ROA not after:            Sun 18 Aug 2024 13:00:35 +0000
asID:                     25697
IP address blocks:        2605:7380::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ef:89:2e:6d:e8:79:ae:b8:3a:01:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
        Validity
            Not Before: May 20 13:00:35 2024 GMT
            Not After : Aug 18 13:00:35 2024 GMT
        Subject: CN=43fa7f4c-63cc-452b-b698-f217f5127851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:31:9a:3e:1c:81:1b:57:9b:ae:aa:9d:e2:d1:
                    72:ce:78:9e:39:29:4a:1e:9f:97:a7:1c:d1:f8:25:
                    11:41:27:b4:e8:87:2a:77:83:57:58:e2:23:e9:de:
                    48:c1:36:b8:b4:be:bd:e9:d0:82:13:0b:ca:46:bd:
                    44:b7:ac:61:01:e7:6f:a7:0b:02:39:46:b0:a1:21:
                    6d:96:32:72:c2:a6:bb:19:f9:08:0e:3b:a2:1a:76:
                    df:29:66:89:64:fd:21:8f:ed:0c:01:77:b7:73:a2:
                    6c:f5:d0:43:cd:72:37:f3:9d:bd:5e:ec:c0:08:52:
                    e6:ea:55:d0:e0:c1:94:6c:dc:9a:d3:39:21:c7:7e:
                    84:dd:ce:dc:1e:01:2f:42:53:d7:2c:91:7e:fb:a8:
                    29:88:e7:c0:16:a5:7b:55:77:fa:9f:59:d7:92:6d:
                    0f:38:1a:fe:a6:13:09:3f:bc:82:be:dc:9d:8e:80:
                    65:12:75:38:a5:5c:be:93:2b:94:7e:b2:f7:01:26:
                    b4:7e:a7:56:2c:eb:6e:4b:9b:80:d4:80:7c:94:e3:
                    c0:be:c6:15:e3:28:c0:c7:af:3b:98:a6:da:e0:a6:
                    e6:4b:f8:51:67:c7:9f:14:dd:5a:80:09:45:d1:b8:
                    89:27:17:59:e9:17:8b:f9:0f:7d:77:a8:cf:c7:e5:
                    2f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A6:16:5E:89:EC:A5:11:23:92:80:A5:4B:69:37:93:F7:BB:E4:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/a97ca693-be0e-3463-98ab-492dd9383723.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl

            X509v3 Authority Key Identifier:
                keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7380::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:21:1a:ff:aa:cf:dc:f6:1a:e3:67:5a:bb:a7:07:6d:7a:d6:
         d5:7c:ba:6c:38:b0:c5:6d:69:b1:7c:bb:d1:95:f6:56:08:13:
         d0:8a:da:18:dd:f5:1a:c5:32:52:a3:48:4b:6b:6a:61:28:90:
         0a:7e:a5:93:8b:c3:1d:aa:3a:12:c6:e8:65:e6:a6:2f:40:c3:
         86:3a:ad:15:17:90:a4:e8:47:02:58:43:d7:19:c0:58:05:79:
         62:23:7b:1d:32:76:e2:09:36:17:2a:4d:7f:2e:f8:2f:dc:d3:
         7d:c9:8b:d5:1d:48:b6:3c:24:bf:c3:0c:4a:84:de:b4:33:4d:
         d2:e2:fd:c9:9b:79:29:38:cf:4b:26:28:71:fb:e8:f4:0f:47:
         9c:5e:6d:39:2e:bb:01:7d:a0:a5:c9:91:43:16:93:cd:e9:dc:
         ed:66:28:77:f5:b1:e6:52:be:a9:d7:95:0c:d0:7d:35:9c:a3:
         f6:92:d5:c9:12:12:47:8f:0e:9a:0d:10:3d:ec:05:d8:4d:ab:
         49:b7:e9:bd:aa:3d:a3:d1:ee:25:7f:c9:de:a5:28:6c:5f:b9:
         1a:9c:17:e6:be:b8:d0:93:2b:12:c3:ad:ad:af:42:25:86:4d:
         92:6b:d9:2c:04:0b:0e:f4:8d:b6:95:94:9b:b4:c4:49:3a:2f:
         7a:d9:10:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 15:59:30 2024 by rpki-client on console-fra.rpki-client.org