Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/98b220a7-95e2-3f37-aa51-0be815a31bcd.roa
File:                     98b220a7-95e2-3f37-aa51-0be815a31bcd.roa (raw, json)
Hash identifier:          egw3TZ95gQvXi2r+DV1/TJAqGdLqpE2KNxk4dAI6zmE=
Subject key identifier:   A8:F0:31:40:CA:EB:E8:80:52:C6:1A:C0:56:4E:12:A0:E7:7A:B6:10
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E64108A52758359E05660
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/98b220a7-95e2-3f37-aa51-0be815a31bcd.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     11955
IP address blocks:        2605:a000:1e00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:64:10:8a:52:75:83:59:e0:56:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=34de4ba7-a16b-48d3-9ae3-51bcdd242d8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:88:e6:88:8b:86:86:9f:7c:a4:56:d6:67:dc:
                    c2:f6:d3:d0:bf:63:0a:a7:27:47:8c:97:2e:af:2d:
                    dc:d8:c5:ae:08:8c:5e:39:bc:02:56:e2:a1:bd:99:
                    23:49:4b:03:46:25:15:f9:1d:a6:55:0e:07:6a:e0:
                    91:9e:5e:ae:3a:90:cb:21:44:50:69:e2:e2:f7:ca:
                    7e:a9:d8:8a:5c:6a:ac:17:48:62:d6:07:ac:a5:31:
                    f3:81:31:dc:40:05:bc:75:41:8b:bc:6d:4b:62:46:
                    2b:5d:3f:62:10:50:67:9e:28:2e:0e:a1:d4:f6:d1:
                    5b:14:3a:aa:8b:0e:b5:7f:4b:b8:80:b5:b3:c6:8a:
                    36:1a:82:57:2b:9a:9b:6c:dd:f8:52:f4:51:44:a8:
                    0e:58:e2:24:d2:87:d5:eb:19:57:59:76:22:ab:82:
                    9f:41:82:25:31:d5:2a:37:93:aa:9a:0a:d3:81:2c:
                    55:28:f1:11:53:1f:33:4f:d4:0a:16:a3:73:3c:bd:
                    a2:41:6e:b8:15:be:34:8c:f6:bc:8c:bb:6d:ed:94:
                    8e:37:4d:8d:74:df:9b:a8:12:d2:ff:ad:c8:12:1d:
                    cd:e7:f5:11:32:c5:c2:d0:67:a7:5e:70:cf:e1:53:
                    8c:0c:fc:48:fc:b5:13:09:a7:82:92:c1:66:00:d0:
                    81:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F0:31:40:CA:EB:E8:80:52:C6:1A:C0:56:4E:12:A0:E7:7A:B6:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/98b220a7-95e2-3f37-aa51-0be815a31bcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a000:1e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:d7:f1:6d:cf:a5:a2:d8:9d:be:af:8f:8b:67:e2:94:50:8a:
         2c:6b:04:6a:23:50:6f:a6:5a:df:77:f5:1f:cb:65:08:96:06:
         df:22:71:b1:ad:75:cf:8a:f7:b8:9d:2b:4d:b0:81:cf:7f:8e:
         db:10:cd:a2:d1:e9:f9:69:51:3c:bf:22:63:46:dc:7f:da:f6:
         ed:17:72:e3:8d:11:25:9a:1a:97:0b:6d:44:21:71:d4:16:4f:
         a3:33:c3:7e:5f:54:6d:ea:02:0c:ce:30:79:7a:79:f8:8a:68:
         80:5e:7b:11:f8:57:0f:3d:0b:1a:e3:8c:bd:18:5e:dc:14:57:
         6b:a1:11:a9:05:78:0c:5a:93:8c:e7:ae:bf:27:ed:12:18:ef:
         05:d2:4f:10:75:58:0a:f9:0a:ff:cd:08:78:1a:1d:7c:c5:9e:
         54:ee:a9:00:92:52:75:6b:e9:01:61:26:4a:f7:fa:b0:f7:9b:
         34:42:ab:69:37:88:1a:58:83:80:34:2c:35:b9:6e:78:73:fb:
         45:ca:7f:03:dd:d1:79:fb:d7:07:f8:96:08:7e:29:0e:fd:95:
         29:4a:19:fd:a0:bf:7c:43:3d:cb:35:a7:3c:c6:7d:20:25:94:
         c3:57:ae:6d:be:ad:05:8c:11:04:a9:cd:36:d1:1f:62:e0:e1:
         5d:61:72:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:53:53 2024 by rpki-client on console-fra.rpki-client.org