Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5a32678a-2186-38ea-9548-51cb140e0bcd.roa
File:                     5a32678a-2186-38ea-9548-51cb140e0bcd.roa (raw, json)
Hash identifier:          Vd78EuOBaGVxaQ5rgRMwudHm8r96XoWFE36R3WK3ETs=
Subject key identifier:   A8:28:6A:0C:EF:77:D2:EA:53:9D:88:73:B9:6F:4D:56:84:2C:56:ED
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DB74F6620032D44C82C40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5a32678a-2186-38ea-9548-51cb140e0bcd.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     11351
IP address blocks:        2604:6000::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:b7:4f:66:20:03:2d:44:c8:2c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=cae596d4-ef5f-4868-b60d-583c5bc9be57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:42:fb:ef:17:1e:1d:53:bd:b2:36:dc:90:ef:
                    2b:f0:29:a4:17:59:0b:ce:53:6f:14:66:d3:0f:50:
                    ab:fb:79:fd:ed:16:50:c6:2d:01:88:e8:66:c9:44:
                    8c:4b:fa:84:09:bf:c1:05:6e:bf:ec:eb:2c:71:32:
                    88:62:01:c1:3c:b9:f2:b7:8e:4c:e4:9d:83:9b:fb:
                    f0:3b:f9:34:af:81:ac:b8:22:b6:c2:b8:3f:bb:c7:
                    5b:c6:ab:b4:46:a3:88:f4:3b:f8:6d:38:08:a3:32:
                    51:9a:91:89:22:98:8b:5f:de:ec:69:95:4a:a5:6c:
                    e2:6d:a7:55:0d:ff:54:82:b4:c7:38:3f:9d:15:d0:
                    1f:1f:66:44:5e:dd:77:35:e8:e9:9c:00:f6:66:4d:
                    af:30:86:ff:8c:63:32:29:af:63:94:a8:4b:88:1c:
                    e7:c1:28:54:e4:bb:99:e2:f2:2b:2b:22:1f:df:bd:
                    fa:25:3f:82:fa:41:3a:c0:fc:1a:d6:6d:66:5a:73:
                    b9:40:22:69:c9:b5:92:f7:cd:8c:e4:69:91:07:44:
                    fa:06:62:8f:cd:65:ca:68:b1:81:16:ae:2c:bd:0d:
                    2f:ae:a7:66:e6:88:61:d6:7c:6b:5f:92:a3:f3:ab:
                    55:aa:c0:59:e6:f3:91:81:5a:eb:d1:55:ac:57:02:
                    d0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:28:6A:0C:EF:77:D2:EA:53:9D:88:73:B9:6F:4D:56:84:2C:56:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5a32678a-2186-38ea-9548-51cb140e0bcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:6000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:41:82:f0:f7:c9:fc:f6:5b:c7:b2:4a:a7:54:c6:b0:e8:74:
         fd:d1:b0:b4:da:86:ed:f2:14:25:18:a5:2f:5c:44:68:a1:ae:
         25:fd:e8:01:9d:11:0c:b6:0c:9e:1f:c5:a4:22:00:fe:37:7c:
         d4:94:96:16:25:50:4a:64:49:c5:b5:2c:11:ce:9e:b8:98:36:
         ad:3b:2e:61:8d:32:16:80:02:9c:aa:bd:5a:2c:f9:5a:7f:88:
         b0:f8:d2:52:5e:7c:04:8d:6b:8d:79:cb:f7:dd:74:b3:75:3f:
         d9:94:5d:74:de:1b:5d:1d:99:6f:79:d7:02:7e:cb:2b:25:96:
         c5:83:fb:5e:bd:bf:87:48:5b:ba:2d:20:9f:b5:ac:a0:5b:22:
         bc:2c:dc:25:0e:1d:20:2a:72:5c:d8:e4:99:f3:2a:58:00:42:
         b4:a7:0f:80:b7:d1:45:9c:50:f4:ec:d3:34:15:e4:cf:11:c3:
         8a:40:ef:3f:4c:67:66:9f:e4:a0:1f:c3:e1:68:33:8e:cc:d7:
         d8:3d:21:b9:7f:ea:1d:ab:e2:5c:1e:6d:45:29:71:f5:f6:d2:
         e5:8f:07:0f:c4:69:16:2e:fb:1e:e9:0d:5a:16:4f:7d:f3:3f:
         ea:3c:1c:94:54:3c:2f:f5:2b:41:69:cd:6b:26:fe:56:70:a8:
         8b:a9:50:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:20 2024 by rpki-client on console-fra.rpki-client.org