Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/b04ffde5-2a11-345e-918b-88673ef2babf.roa
File:                     b04ffde5-2a11-345e-918b-88673ef2babf.roa (raw, json)
Hash identifier:          1gcqzsbY7YsoGrHbYsNhved1QEBxS7dh0IlBSMcHpnk=
Subject key identifier:   20:94:DE:17:63:93:CE:39:CC:42:3F:87:FE:28:37:62:57:25:50:91
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F43285845A428B0E67006AC02CCDA8800
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/b04ffde5-2a11-345e-918b-88673ef2babf.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     6453
IP address blocks:        2001:5a0:9400::/38 maxlen: 64
                          2001:5a0:9800::/38 maxlen: 64
                          2001:5a0:9000::/38 maxlen: 64
                          2001:5a0:9c00::/38 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:b0:e6:70:06:ac:02:cc:da:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=b7ac62f7-5c9f-461a-822b-00267820886c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5a:e2:e2:a2:fd:e8:65:0e:65:7b:a1:5b:a5:
                    97:2e:3a:53:85:3b:cb:db:c8:67:e6:a5:67:88:7a:
                    dc:bb:a3:94:61:f5:82:4c:db:fa:27:a6:fa:20:62:
                    59:e6:69:06:ee:f3:4d:05:36:04:9f:a1:7b:db:5e:
                    5c:c5:31:5f:f4:ee:a9:c1:d2:20:b1:e4:9c:0a:ee:
                    ee:73:99:71:d5:57:b7:e6:b2:58:47:e9:7e:37:fd:
                    ee:4c:55:ef:6b:b2:aa:24:46:62:40:f2:3b:30:5a:
                    67:de:85:c8:cc:f9:d6:37:93:f6:f4:84:46:5c:49:
                    6a:c3:73:b5:3a:b3:54:9f:5b:08:ea:39:af:48:02:
                    09:07:c3:10:0e:8c:b1:84:2d:8a:51:18:04:30:d2:
                    56:ab:da:49:21:24:df:f9:3a:bb:bb:e7:a7:f9:0e:
                    f6:c9:63:2a:61:17:0c:b7:36:21:07:20:a8:46:b5:
                    98:f1:f7:82:d0:23:74:e6:a2:aa:fe:7c:a3:83:da:
                    36:7f:4f:c3:69:de:75:66:a6:a2:56:ec:7f:7c:66:
                    10:1b:aa:1a:e8:a1:4f:cc:81:01:28:a2:c0:22:54:
                    e7:e8:cb:1f:3c:84:e2:fa:b4:07:08:70:13:c7:99:
                    29:13:69:07:84:8a:4b:51:80:40:13:fb:36:7b:86:
                    d2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:94:DE:17:63:93:CE:39:CC:42:3F:87:FE:28:37:62:57:25:50:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/b04ffde5-2a11-345e-918b-88673ef2babf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5a0:9000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:ae:ad:8e:dc:08:63:a2:38:26:a6:23:c5:61:49:70:97:9d:
         b8:22:1e:39:50:2f:27:00:3d:8b:1a:b3:50:e1:c2:82:3e:8f:
         0c:42:ed:5a:00:35:fa:0e:32:4a:d0:b0:52:64:ed:d9:8f:13:
         39:f0:21:f6:51:37:32:04:eb:f4:1b:3d:ad:6d:5d:17:e8:40:
         13:3f:28:7b:51:4b:1d:41:00:6f:3f:1e:8c:fc:86:71:4b:cf:
         5c:fc:2c:aa:86:cb:b1:5b:87:da:a5:da:b8:ca:93:10:b4:f2:
         db:41:a2:f9:6a:34:6d:88:78:f7:1e:5b:3b:f6:b3:3d:03:52:
         d8:cb:a1:8b:22:3f:aa:37:d6:0d:c5:39:b9:17:5e:57:fb:d0:
         f5:18:cc:2a:9f:9f:cb:17:75:4b:66:f5:96:b9:26:70:46:3d:
         bb:e4:8c:e1:1c:7f:2b:3b:3b:e3:f7:0d:b0:7f:c5:0d:0c:b4:
         17:54:a5:63:0c:d3:27:e1:73:b1:1c:61:7d:3b:f1:ea:fc:8a:
         97:c8:a6:2c:d0:28:64:5e:74:55:bc:19:7d:5d:4d:2b:b8:5b:
         ca:cd:60:fd:33:46:85:92:21:bf:48:b3:ee:89:57:50:c9:d6:
         ee:96:8b:1f:6a:3a:89:0e:9e:58:5e:84:0b:4d:6f:26:e9:18:
         b4:69:28:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:03:49 2024 by rpki-client on console-ams.rpki-client.org