Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2f1e1495-2f91-3e5b-9930-1f5ff3566093.roa
File:                     2f1e1495-2f91-3e5b-9930-1f5ff3566093.roa (raw, json)
Hash identifier:          3WcvVxw91lh3D6A22vZBBqH0x0iSULCSZDvj63/QxhU=
Subject key identifier:   AF:54:D9:4B:46:4F:35:45:14:E8:16:AE:76:E0:1C:47:76:F6:B1:89
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E6C675B01CE343F14BA80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2f1e1495-2f91-3e5b-9930-1f5ff3566093.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20001
IP address blocks:        2606:6000::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:6c:67:5b:01:ce:34:3f:14:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=8ca86635-a84a-42bd-a359-ffd8a178feb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:01:a3:e2:d1:4f:cb:c8:bc:cb:2b:0e:77:50:
                    cd:c3:5e:45:03:4d:ba:19:b2:77:e6:3f:d9:68:31:
                    26:bc:62:49:18:38:8a:7f:72:19:fa:79:15:38:7c:
                    45:ab:8e:6e:b1:16:28:7f:3a:2e:59:a5:a4:dd:e0:
                    a0:3a:01:ee:1b:f4:1a:ce:34:dd:24:46:b2:39:f7:
                    39:86:68:5c:04:37:1c:b1:4a:40:7a:a8:91:2b:52:
                    28:1e:b8:4b:7e:5f:c8:58:bc:8c:1e:5f:23:f6:f8:
                    6f:f1:01:25:e7:1f:d7:a5:5b:03:66:57:6a:16:f0:
                    af:81:0a:02:b5:66:a1:db:68:57:8a:ff:b5:25:1a:
                    8d:07:99:74:fc:7e:0c:b4:84:b7:8b:8b:a5:89:48:
                    b8:a9:0a:cf:1e:17:9f:be:31:6a:a4:45:54:9e:b0:
                    c8:8b:b6:bd:4e:27:e5:aa:eb:38:bb:b3:22:ff:f4:
                    f9:73:b6:ed:89:1a:ae:74:79:64:de:48:f2:36:30:
                    cd:bb:2f:a0:2d:ec:6b:82:8d:2c:f2:b3:1f:ff:44:
                    99:12:37:b4:3a:01:fe:d1:20:36:3b:6f:87:eb:25:
                    ea:27:11:34:bb:23:8e:28:27:2b:b1:00:81:53:1d:
                    95:38:fe:eb:42:dd:91:d8:7a:e5:b7:ab:fc:0a:1a:
                    70:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:54:D9:4B:46:4F:35:45:14:E8:16:AE:76:E0:1C:47:76:F6:B1:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2f1e1495-2f91-3e5b-9930-1f5ff3566093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:1c:72:17:4c:ee:95:96:22:44:5b:ea:b5:2b:05:d3:2f:e0:
         33:84:44:ef:2f:98:b3:a5:f7:31:5c:0b:1d:e6:16:cc:f4:a3:
         75:0e:c4:8a:92:67:e3:c5:a0:b3:23:35:15:a8:70:29:eb:d7:
         d0:ef:83:ea:59:b9:a9:1d:bf:44:00:a5:cc:ea:1f:0d:d5:5d:
         65:4b:69:e9:18:42:68:51:ac:43:cd:35:81:a8:07:9b:44:40:
         86:20:9d:f3:ea:50:27:1a:39:e8:48:97:1b:eb:f5:20:bc:0d:
         12:93:5a:0b:04:78:a8:4c:6c:26:fe:37:02:2e:a4:d0:7a:da:
         70:19:1c:8e:66:7f:1e:b9:9f:fb:1e:96:2e:b8:ed:31:eb:2f:
         b9:09:d3:64:16:d4:03:96:5c:28:f8:36:18:11:c7:86:22:28:
         b2:82:07:33:c8:db:cc:50:17:18:d2:5e:45:f6:57:2c:58:49:
         b0:45:f8:b6:d6:0c:bc:f1:a1:ad:b1:89:a3:3c:98:65:67:97:
         6e:d1:ac:42:51:07:74:d9:87:ed:86:e8:c9:50:d1:9d:6c:d8:
         d3:26:de:92:ca:a3:7a:d2:33:6a:ab:8b:f5:5d:d6:3e:c2:52:
         38:1d:f5:2f:a4:72:ca:ae:9a:6b:16:e4:8e:51:bf:82:25:14:
         5e:7a:ae:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:16 2024 by rpki-client on console-fra.rpki-client.org