Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/03233396-7373-36cb-ab6f-70f08e11bdb8.roa
File:                     03233396-7373-36cb-ab6f-70f08e11bdb8.roa (raw, json)
Hash identifier:          OFj6ahfqCqHUVXLj3Brgq9Mcw4eoDl4bYOWlyV4DdKI=
Subject key identifier:   C8:A5:6C:D6:F3:D5:54:72:02:57:F6:19:07:E8:86:CE:84:F3:9D:72
Certificate issuer:       /CN=1f60c0cf-9537-4a86-bd67-a1dfd2892507
Certificate serial:       010D0C9F43285845280AF598DFA7E25D9908EA00
Authority key identifier: 9D:B7:19:FA:97:3D:4F:D2:FA:41:B6:80:92:4E:D7:18:33:4C:4E:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/03233396-7373-36cb-ab6f-70f08e11bdb8.roa
Signing time:             Sun 10 Mar 2024 02:00:25 +0000
ROA not before:           Sun 10 Mar 2024 02:00:25 +0000
ROA not after:            Sat 08 Jun 2024 01:00:25 +0000
asID:                     22280
IP address blocks:        2607:1940::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/1f60c0cf-9537-4a86-bd67-a1dfd2892507.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/1f60c0cf-9537-4a86-bd67-a1dfd2892507.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:28:0a:f5:98:df:a7:e2:5d:99:08:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f60c0cf-9537-4a86-bd67-a1dfd2892507
        Validity
            Not Before: Mar 10 02:00:25 2024 GMT
            Not After : Jun  8 01:00:25 2024 GMT
        Subject: CN=7235708d-71d2-42e5-863f-17346034052e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:40:81:4b:bc:7f:b6:f1:d2:b6:79:27:24:ec:
                    08:31:b9:ed:97:8b:25:24:9d:35:92:d5:7f:99:16:
                    1e:64:c6:bc:e8:6e:02:49:24:bb:a6:d7:81:7c:c2:
                    08:38:32:5c:21:8b:cf:9c:5d:14:26:cc:42:72:60:
                    de:2f:af:cf:51:81:47:70:c2:97:c2:4c:c6:5a:9a:
                    3f:11:f7:22:a9:e7:49:70:5c:52:26:4e:48:60:e0:
                    67:bd:76:19:8b:d6:b1:29:74:44:7d:b1:d9:c0:92:
                    38:a5:e8:87:ed:e5:f8:eb:9c:52:6a:1e:12:64:ff:
                    cc:21:54:0f:6a:20:23:b0:bc:a3:d5:27:1d:93:4b:
                    d1:fb:4e:bb:e1:cb:5a:f9:b5:9c:91:f8:cf:0d:44:
                    ec:99:08:74:f2:97:38:2e:0c:d4:63:06:de:67:42:
                    2f:2d:ba:dd:9f:6a:5d:41:19:80:96:b3:03:ad:3c:
                    67:37:06:e6:a3:52:19:5c:d1:81:4e:21:8a:c6:d6:
                    97:0e:b6:e0:50:96:47:bb:0e:af:0d:be:e4:7d:f2:
                    e7:a3:1b:c2:88:06:f3:d7:97:41:3f:e3:94:8c:1b:
                    de:81:3b:74:03:af:e8:3a:24:11:cb:c2:bc:9a:ba:
                    60:45:6d:6d:ba:65:5f:63:5d:56:06:37:96:d0:aa:
                    09:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A5:6C:D6:F3:D5:54:72:02:57:F6:19:07:E8:86:CE:84:F3:9D:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/03233396-7373-36cb-ab6f-70f08e11bdb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/1f60c0cf-9537-4a86-bd67-a1dfd2892507.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B7:19:FA:97:3D:4F:D2:FA:41:B6:80:92:4E:D7:18:33:4C:4E:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:1940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:77:7e:42:69:50:e8:10:d5:c5:5f:60:69:7b:72:24:58:8a:
         5d:d5:f0:11:83:86:b3:25:6f:f7:36:6b:ab:e6:2d:10:be:88:
         b3:73:4c:81:5a:95:d3:bd:e6:42:04:20:e1:ab:08:3b:7a:30:
         e9:07:ad:e7:23:12:53:45:a7:e4:00:a7:27:ef:45:f8:fb:8d:
         f7:87:30:d9:1e:7a:89:bc:fa:ce:a1:7c:a1:30:00:d7:cd:a1:
         81:0c:9f:90:6b:c7:51:88:91:86:ec:14:fa:be:d5:3f:e4:73:
         78:81:e7:fd:34:46:2b:58:ab:d6:3e:76:dc:72:cf:18:db:57:
         be:d6:d8:eb:0a:0b:a6:e7:8c:cc:e3:be:9d:3f:d6:40:1b:a1:
         b8:f4:1b:54:90:a5:ac:34:7c:58:77:7d:5d:d7:b7:53:27:fd:
         8c:1e:18:71:bf:d4:7b:36:0c:59:7d:8f:12:c9:b9:d5:97:3c:
         fe:3f:76:6f:06:4f:63:95:5e:23:c7:37:00:2a:24:e7:13:09:
         c3:d1:9e:56:15:73:88:eb:87:49:c3:10:43:25:16:3d:59:47:
         5e:85:94:73:f3:bc:20:8a:f1:c4:fa:a8:2a:58:01:d0:7a:6f:
         07:4a:a3:1c:93:6e:4f:c9:8b:63:4e:67:e8:82:19:e8:a7:b3:
         b4:bf:5d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 18:27:27 2024 by rpki-client on console-ams.rpki-client.org