Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9f12aa87-6a5c-3cd2-a4e3-81e2498c1cc7.roa
File:                     9f12aa87-6a5c-3cd2-a4e3-81e2498c1cc7.roa (raw, json)
Hash identifier:          SmHmWjPZrqMRXCI9vB356xXT7lSilJz8nTutvD+7uic=
Subject key identifier:   4A:D2:DD:5A:6F:63:78:FD:7C:A2:44:EC:DC:71:36:1A:B5:11:FF:99
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584535E29A44594ECE65C3CA6780
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9f12aa87-6a5c-3cd2-a4e3-81e2498c1cc7.roa
Signing time:             Fri 15 Mar 2024 01:00:26 +0000
ROA not before:           Fri 15 Mar 2024 01:00:26 +0000
ROA not after:            Thu 13 Jun 2024 01:00:26 +0000
asID:                     852
IP address blocks:        2001:569:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:e2:9a:44:59:4e:ce:65:c3:ca:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 15 01:00:26 2024 GMT
            Not After : Jun 13 01:00:26 2024 GMT
        Subject: CN=eba39bef-207b-4241-b5f8-ffc236d590ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b4:8a:5a:8f:83:bb:3b:7b:46:bc:1e:ed:60:
                    8d:2a:57:8f:81:81:73:f8:8c:0c:88:9d:51:0f:fb:
                    e4:93:21:33:e3:89:69:de:30:50:9d:30:b0:bc:78:
                    bc:ad:c1:74:9f:21:41:30:e9:da:ae:37:d2:34:d6:
                    95:7e:67:2a:04:d3:eb:3c:71:67:da:b7:74:c3:83:
                    4a:62:08:85:4a:e2:ab:3d:14:61:af:b7:0d:6e:4e:
                    77:c1:08:72:80:bd:69:2b:39:24:4c:34:8e:e2:d7:
                    05:6b:99:90:7e:d7:af:f1:5f:5d:41:23:93:67:4b:
                    56:27:b2:2b:07:8d:37:d3:21:4f:91:c9:79:ca:7e:
                    d6:f8:00:ab:94:81:79:ed:e9:15:08:ea:83:4d:c9:
                    7f:e2:cc:71:4c:e2:b5:e3:47:1c:c7:64:07:2d:cd:
                    86:f5:10:ef:51:a2:3b:a8:2d:8a:e8:6e:fc:20:99:
                    48:0b:44:b5:d1:b6:84:4c:46:64:80:8e:93:37:ad:
                    aa:13:fc:a9:39:21:c6:2c:a6:29:5a:99:a4:10:68:
                    35:6e:2f:43:6b:53:44:6f:ea:99:0d:e0:48:d3:42:
                    03:d3:d6:2e:9a:56:48:23:4a:a2:b2:cc:93:81:f2:
                    0b:40:68:df:70:86:89:56:32:f3:55:99:89:1b:05:
                    33:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D2:DD:5A:6F:63:78:FD:7C:A2:44:EC:DC:71:36:1A:B5:11:FF:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9f12aa87-6a5c-3cd2-a4e3-81e2498c1cc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:569:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:14:cc:00:63:6e:a2:6f:a7:c1:04:77:8f:fa:cd:f1:20:9b:
         2b:93:9f:95:db:fe:6e:d3:2c:99:8a:af:fe:cf:7b:fe:45:49:
         e9:43:1d:5d:ef:86:ba:f7:db:80:29:99:ee:b5:75:d8:d0:fe:
         f4:3a:e8:ff:c9:0c:72:4d:49:6a:ae:f3:79:ef:32:08:4b:23:
         51:6e:bd:90:a5:f9:7a:03:9a:10:5f:30:01:43:b2:56:7b:4a:
         e4:2f:49:84:1b:e1:81:dd:23:b8:d5:75:d3:a6:af:a3:85:29:
         5d:e0:71:90:ff:b5:c3:34:5e:14:3a:b0:1a:66:b7:c0:56:60:
         01:95:35:06:db:9b:32:e6:88:b9:b2:41:90:1d:54:b0:19:db:
         49:69:f2:cd:da:ae:a9:c9:06:98:15:8b:dc:0b:c7:18:80:59:
         cd:ea:ca:28:b1:9e:a9:b1:85:6a:7d:ed:00:49:a1:10:b4:a3:
         b2:85:3a:d4:f2:64:e5:79:20:56:7a:f0:6e:35:65:80:d8:db:
         24:61:18:a0:db:fa:17:09:da:2b:b6:a9:ac:68:24:c5:e7:92:
         9c:7d:3a:44:a6:e6:f0:3a:98:cc:a8:91:a3:50:a9:d5:74:45:
         25:b7:c6:3c:37:cd:93:3c:b7:f5:35:c2:b0:0d:22:1b:73:65:
         74:10:57:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 07:23:55 2024 by rpki-client on console-ams.rpki-client.org