Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3d096aa9-a86c-34d4-be8a-0a98358dfd8d.roa
File:                     3d096aa9-a86c-34d4-be8a-0a98358dfd8d.roa (raw, json)
Hash identifier:          qBuuON89efWEecCo8t9EZGMd+NCUbWZ67nmLJVtGuGY=
Subject key identifier:   11:8A:78:8D:7E:43:EA:70:A7:79:D5:22:7C:4D:BA:0C:81:48:7C:7F
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E6F36BD267BBB71BA7A80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3d096aa9-a86c-34d4-be8a-0a98358dfd8d.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20001
IP address blocks:        2605:e000:ec00::/39 maxlen: 39

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:6f:36:bd:26:7b:bb:71:ba:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=12ac186d-0601-4f86-a0ba-50b5225935b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:03:96:60:48:1f:5c:5b:7f:26:82:d2:92:7e:
                    b7:d3:80:ef:6b:0e:5f:42:d6:d3:9f:3a:a9:b8:32:
                    93:76:3a:8b:cb:f5:bc:d2:5d:a3:af:d0:f3:6f:b2:
                    5a:0d:2b:1f:f0:6f:1b:7c:71:a7:e9:e0:3c:0e:76:
                    dd:81:a9:4a:b9:68:07:e8:cb:0c:9e:45:ad:be:eb:
                    83:b0:0d:f1:8f:d3:d8:56:ac:2c:dc:e0:28:88:1c:
                    ef:32:6e:ec:37:8e:43:40:6b:1a:a7:0a:90:4f:fc:
                    23:4b:f0:e1:85:50:98:c6:fe:15:23:2e:90:e5:74:
                    66:54:e2:70:e8:f9:ff:29:c8:30:ca:3b:d0:ee:61:
                    17:b9:67:34:24:fa:b8:61:fa:a3:fe:60:4a:bd:c4:
                    52:bb:73:63:6b:2b:4d:71:4f:52:d6:0a:01:fa:7e:
                    27:5f:d0:bc:b4:32:1b:6e:71:d7:81:de:21:f5:28:
                    07:19:2f:b3:58:72:72:41:50:fb:f3:51:55:4c:30:
                    6a:05:19:a6:6d:bd:30:f9:3f:ea:59:30:99:41:7f:
                    7b:f1:90:2e:89:3a:d5:04:9c:91:e2:72:37:3f:92:
                    3d:06:c2:8b:19:eb:8a:ee:13:e5:de:f5:30:a3:84:
                    78:a6:ec:f8:d0:c7:45:17:c8:0f:e5:e8:be:1e:91:
                    d3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8A:78:8D:7E:43:EA:70:A7:79:D5:22:7C:4D:BA:0C:81:48:7C:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3d096aa9-a86c-34d4-be8a-0a98358dfd8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e000:ec00::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:85:2d:22:fc:91:42:fe:21:83:8f:5d:c7:64:15:0e:33:a1:
         74:4e:74:97:ea:21:67:c2:a9:81:87:33:80:b5:64:8e:14:76:
         65:1c:99:e9:91:30:65:07:db:b7:94:a0:c1:65:46:59:56:87:
         15:fb:4e:ea:ec:5e:c3:4f:02:c2:58:74:43:69:05:dd:7f:37:
         86:9e:d4:9c:ae:70:51:86:d1:e7:6d:16:8b:72:ef:ec:47:1e:
         cc:da:26:ac:7f:21:dc:7e:30:9a:ce:dc:53:3d:d7:37:10:4c:
         4f:d1:05:55:a0:f4:5a:58:86:5b:c6:c3:04:fb:8d:fc:2e:cf:
         74:f2:1f:e5:00:ca:6f:c1:64:7d:62:88:f1:69:05:cb:7a:f9:
         8a:ed:fd:57:b5:bc:94:70:e1:ea:be:4c:17:12:c5:64:07:ec:
         0f:41:b1:bb:fc:9b:34:20:3a:c7:2d:16:53:fd:22:19:b7:33:
         0f:8f:96:fe:2f:f6:dc:23:fd:43:d3:30:16:d2:86:89:82:53:
         4a:10:92:0e:b6:b0:9b:c3:21:41:e1:b7:00:25:7e:9d:97:38:
         ae:a3:5b:3d:26:55:02:90:e1:d2:fe:82:76:e8:b1:1e:53:7f:
         ed:23:5f:7d:c9:81:d1:82:80:17:28:ee:30:48:0a:eb:ce:75:
         af:9e:17:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:17 2024 by rpki-client on console-fra.rpki-client.org