Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ba69d26a-7894-3495-bdb5-7db977ec90ec.roa
File:                     ba69d26a-7894-3495-bdb5-7db977ec90ec.roa (raw, json)
Hash identifier:          PR1vXgIV15bThgiwgYo+Rz0rm8rkRWKUmiF5RIGzmk0=
Subject key identifier:   E2:E9:A4:31:FC:EB:E0:5C:E0:45:D8:A2:6D:57:7C:A7:77:9F:26:73
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F43285845840DC726E5C556AAAE0DCC20
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ba69d26a-7894-3495-bdb5-7db977ec90ec.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        2605:dd40:8f00::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:c7:26:e5:c5:56:aa:ae:0d:cc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=596b5507-9aba-4923-a7f6-12ba17c0544e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b9:59:21:93:98:aa:cd:d9:db:37:bb:ea:d7:
                    b2:95:17:65:51:07:f0:86:11:be:2d:eb:36:91:65:
                    28:b8:bc:31:9a:70:ff:7e:c5:7d:37:cc:11:da:5a:
                    2d:36:3f:fa:91:86:5f:e2:ca:ab:49:5a:21:7e:6e:
                    e0:9b:8d:a3:76:11:32:e0:3a:54:63:fa:8a:cf:b4:
                    10:1a:47:47:2d:51:29:ea:b0:00:a1:82:20:a5:21:
                    db:b4:83:b4:9c:34:75:57:02:7f:9c:c8:dc:6a:0b:
                    91:1c:d6:54:6e:16:15:32:89:a1:51:54:96:f1:9f:
                    db:2a:ca:85:a6:13:77:e5:2a:23:43:af:fc:92:8a:
                    df:ec:b3:b2:0a:43:37:97:e2:85:0e:23:6b:3d:d0:
                    03:c2:bd:44:11:17:41:9e:08:8f:67:fd:d5:01:75:
                    38:80:f1:f7:e3:59:79:88:a7:02:62:7d:da:09:77:
                    e9:69:56:a1:19:54:25:1b:dc:be:4a:d1:b8:97:9a:
                    d9:3a:f4:28:b0:b1:39:17:0e:39:80:7c:43:73:ce:
                    b6:e3:85:e8:71:fe:85:b3:c9:ba:28:83:16:d3:4c:
                    14:ce:97:ca:ae:f7:68:81:97:2b:76:c9:ea:7c:85:
                    20:c1:1d:ad:d5:58:54:8f:7a:5c:b2:ae:27:87:f7:
                    8a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E9:A4:31:FC:EB:E0:5C:E0:45:D8:A2:6D:57:7C:A7:77:9F:26:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ba69d26a-7894-3495-bdb5-7db977ec90ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8f00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:8e:05:ee:14:b7:ea:e4:c6:c2:72:ea:19:c8:47:47:2d:9e:
         79:c8:3a:f8:86:8e:36:c4:85:0d:57:cf:7a:ce:8f:3c:90:1d:
         d8:79:8e:a2:f4:3b:1a:5f:01:9a:57:21:5b:75:b9:2e:5c:21:
         95:5c:be:ad:2a:0e:81:62:da:de:e7:b0:fd:e9:ae:c3:2b:6b:
         be:97:6d:9e:01:c4:5f:eb:5e:75:e2:c4:4e:52:02:5a:96:f8:
         22:06:a0:b8:50:d1:56:2f:77:9a:04:ca:33:1d:fb:98:a6:a2:
         5b:89:52:6a:ef:1b:14:b4:06:55:93:48:3d:4a:25:71:6d:ca:
         7a:ab:44:1a:e0:50:3b:4e:d3:9c:48:7d:65:f7:e4:b9:1f:65:
         49:a7:87:a9:30:23:9b:e4:25:ec:d6:ce:24:c0:a6:97:0a:ad:
         3b:86:4f:f1:59:20:92:79:f9:e2:73:e3:16:fb:0e:f1:38:95:
         34:ce:c7:70:8c:d6:e9:9a:78:3c:c6:57:ea:0a:c7:e0:90:58:
         bb:a2:0e:63:28:9d:aa:c7:8e:62:56:df:a2:7c:3d:dd:86:e8:
         2b:ae:d9:ed:95:f7:b8:36:b0:5f:59:fb:75:80:4e:9c:0b:d9:
         fa:76:81:eb:52:0e:ec:bb:16:55:bc:a4:a5:e7:21:21:38:e3:
         b2:2f:30:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:15:14 2024 by rpki-client on console-fra.rpki-client.org