Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9a13dcc2-4825-38bb-9370-ec3557ce32dd.roa
File:                     9a13dcc2-4825-38bb-9370-ec3557ce32dd.roa (raw, json)
Hash identifier:          Pj3zMGB4clCV5AOSSZ10BaqrEKKut3XWbmRwZDwa09o=
Subject key identifier:   3F:C7:CF:53:76:E8:C1:5D:86:30:9B:A9:A4:32:ED:7E:80:57:AB:88
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285845347D47C6A72CAA19894CD3C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9a13dcc2-4825-38bb-9370-ec3557ce32dd.roa
Signing time:             Thu 14 Mar 2024 13:00:30 +0000
ROA not before:           Thu 14 Mar 2024 13:00:30 +0000
ROA not after:            Wed 12 Jun 2024 13:00:30 +0000
asID:                     852
IP address blocks:        2001:569:6f10::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:34:7d:47:c6:a7:2c:aa:19:89:4c:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 14 13:00:30 2024 GMT
            Not After : Jun 12 13:00:30 2024 GMT
        Subject: CN=c610ad08-9480-44c5-b455-216d61c4f502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:be:19:d5:53:01:32:1c:3f:9d:2e:07:f8:e0:
                    31:ee:e2:0d:26:d9:81:1b:17:89:57:cd:1a:f0:af:
                    4a:45:c2:91:50:52:c7:7b:5e:0c:3f:4b:8a:c3:10:
                    08:7c:bc:1d:04:8a:7c:48:61:4d:bc:38:87:af:fb:
                    95:bd:9f:dd:02:a6:89:57:cd:53:69:11:11:06:64:
                    af:8f:fa:54:ec:92:2f:4c:fa:68:5b:d0:a1:17:f4:
                    93:48:b6:13:5c:a2:0d:d7:c2:fe:55:3c:55:77:ab:
                    9f:7d:a6:5f:16:a7:cf:79:c2:b2:44:73:fd:47:cc:
                    57:92:96:b0:88:43:3e:25:eb:09:5a:66:0c:16:ba:
                    cc:71:bd:ef:86:c5:a3:af:54:ec:f3:42:97:29:9d:
                    a7:c6:fd:4e:7a:57:21:3a:97:fd:4f:d6:81:60:03:
                    f6:ca:05:f3:7b:7d:ee:8c:ca:a9:8b:89:b2:1b:88:
                    c1:3f:d7:13:a5:5a:08:7c:63:dc:7f:82:65:bf:f0:
                    7e:2b:2a:16:89:80:69:19:d0:2c:f8:50:ee:3c:9c:
                    e0:72:a9:0b:f5:cd:17:95:e9:e4:10:d6:ea:36:2b:
                    c5:96:47:cc:b8:c4:78:3d:93:7e:5c:09:7f:90:fb:
                    c4:63:b4:44:77:ce:cb:43:6e:c3:c8:ef:52:8a:27:
                    9a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C7:CF:53:76:E8:C1:5D:86:30:9B:A9:A4:32:ED:7E:80:57:AB:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9a13dcc2-4825-38bb-9370-ec3557ce32dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:569:6f10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:1a:b5:56:bd:7c:1f:cb:7c:77:b8:00:e0:2b:00:ee:29:c7:
         70:03:5d:15:e1:13:4b:6e:c3:91:dd:22:2f:6f:21:40:83:64:
         a8:ce:72:cf:ea:d6:e7:23:9e:e8:e7:66:c3:2f:b5:d9:d5:b1:
         f1:41:eb:0d:13:6d:66:b8:27:29:77:04:79:e2:0d:b9:31:a6:
         90:73:5f:6b:d6:f4:70:17:81:26:32:ca:0b:22:23:aa:ba:83:
         41:0f:68:ec:3b:af:0d:a7:c5:e1:b2:2a:f3:83:1c:de:98:88:
         74:f7:fd:98:ec:85:dd:6b:ee:eb:0a:b4:43:04:70:a5:a7:2a:
         9d:dc:1f:91:22:dd:72:4c:90:ee:b7:5c:51:e0:4e:c3:ac:8c:
         07:74:b2:f2:bf:d3:6e:fc:db:29:f0:c8:d8:01:54:e8:0b:21:
         6a:72:78:8f:30:40:2e:da:1a:fe:2d:3a:41:d6:cb:5d:c5:47:
         33:55:b7:1c:23:0a:ab:82:de:7e:0d:36:58:1c:34:39:22:f2:
         a9:1e:9c:cd:53:f2:6b:96:36:bb:31:25:0f:b4:c4:37:79:ff:
         36:db:c1:db:a3:ca:bf:64:c7:7a:78:fd:c0:c5:5e:85:a6:11:
         7a:ab:98:4c:02:e7:09:e8:fa:91:37:d0:52:1d:24:9d:50:2b:
         18:f7:c1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 07:23:55 2024 by rpki-client on console-ams.rpki-client.org