Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/570c8a6f-8ddf-3844-8932-35e27f2b7544.roa
File:                     570c8a6f-8ddf-3844-8932-35e27f2b7544.roa (raw, json)
Hash identifier:          TXZAo/3WIZehkro9l3hfyZR39yzXu8i8E9iOOXCCBzE=
Subject key identifier:   AC:E8:3A:38:FD:E9:18:A1:52:60:56:4D:17:D2:44:A4:80:D0:CD:9E
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E5179FA7B466B8227C240
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/570c8a6f-8ddf-3844-8932-35e27f2b7544.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     10796
IP address blocks:        2600:5c01:f000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:51:79:fa:7b:46:6b:82:27:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=410f24f4-7438-442d-a6aa-14a253979eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:dd:31:8f:7d:bd:f6:19:a4:8d:84:d9:ea:ba:
                    f7:36:c7:94:d7:ce:01:5d:75:c1:ee:2e:56:c8:cc:
                    48:65:c3:b6:a6:61:fe:a0:f9:f7:2e:cd:6b:9e:a7:
                    ed:48:c5:f7:2a:3f:87:5f:85:f7:3e:e8:7e:ff:5b:
                    6a:b2:69:61:34:83:a2:61:84:9d:43:15:58:60:ec:
                    6f:e8:a5:40:b7:28:99:48:f1:83:6d:0f:c8:af:3b:
                    e6:b4:49:61:d3:06:14:f5:be:51:b1:80:17:ff:26:
                    f6:c7:dc:c0:7c:2a:d3:db:8a:94:aa:75:9e:f5:69:
                    08:07:3a:e0:22:aa:6c:d5:a6:6a:54:63:64:09:ca:
                    8f:02:3e:bf:2a:b2:96:a1:61:0a:11:79:f8:a0:55:
                    fb:f2:69:b2:87:40:32:9e:f0:67:a5:dd:18:fd:f5:
                    7c:f6:03:32:3c:d4:45:90:80:41:1d:15:fe:f9:5a:
                    93:86:b0:76:ee:35:fc:bc:61:e0:39:f0:43:6e:09:
                    cf:e5:3d:8b:c3:22:4a:d2:c1:c9:3b:6d:44:cf:df:
                    48:54:72:97:e0:2b:eb:9c:10:94:07:08:19:5c:8e:
                    cc:97:60:e0:e7:a8:0b:3e:27:ef:2d:9f:7a:0c:14:
                    34:9b:9c:05:38:7a:df:e9:7e:af:0e:48:29:4b:5c:
                    21:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E8:3A:38:FD:E9:18:A1:52:60:56:4D:17:D2:44:A4:80:D0:CD:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/570c8a6f-8ddf-3844-8932-35e27f2b7544.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:5c01:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:07:53:95:c5:ce:c2:b4:41:bd:46:1d:91:12:9e:66:3a:ab:
         27:f1:55:e0:19:16:bd:af:4c:86:53:96:1a:1b:8e:9a:b2:ea:
         88:ab:9b:3a:ae:5b:a9:78:de:cf:b7:12:f3:47:3e:9c:63:df:
         f0:94:6a:55:6b:68:3a:fb:ad:34:26:4e:b1:fe:eb:4c:ae:c3:
         b7:b0:90:cd:18:47:ce:26:9c:4c:97:ba:5b:13:3c:55:12:6f:
         41:37:74:aa:15:a9:ff:24:70:2a:ef:47:4d:7b:0f:a4:55:11:
         9a:b4:44:44:94:54:23:1b:58:60:f3:b4:8b:b2:c1:32:47:a1:
         b3:70:fa:6d:08:bf:24:6e:ee:6c:aa:53:80:d0:da:13:8a:6f:
         1d:9a:96:93:e3:ff:52:6b:59:69:81:59:cc:63:dd:9e:dc:1a:
         75:e0:12:21:ba:7d:2f:fa:8e:02:dd:4a:fd:cc:a2:52:2b:cf:
         12:5e:5b:df:8f:33:1f:e7:f2:eb:4d:0b:4a:c7:b4:a8:2b:a5:
         86:78:c4:f7:da:c1:83:6b:32:cf:9c:1e:6a:92:ea:66:66:00:
         19:f5:d6:cc:2b:73:21:ec:2f:cc:f4:a5:94:3a:6b:ad:7e:71:
         78:83:42:44:5e:63:fb:b7:28:38:e9:23:cf:12:17:5d:04:c6:
         de:c0:d5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:20 2024 by rpki-client on console-fra.rpki-client.org