Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/567bda5f-81d1-34f7-bf07-3e68026cb72d.roa
File:                     567bda5f-81d1-34f7-bf07-3e68026cb72d.roa (raw, json)
Hash identifier:          z4Yg8h5yeIhYd1v2yOYOE9wc9PDOYzZZ7w1Xda2rwAA=
Subject key identifier:   37:43:40:51:33:22:6A:15:A7:56:AB:F8:A2:C4:AD:93:15:6B:0E:94
Certificate issuer:       /CN=55e7b8e0-0df5-4481-84e4-83619b05f966
Certificate serial:       010D0C9F43285845A15E16F6B467B72A301B3480
Authority key identifier: 61:AA:90:72:0A:BC:38:A3:EE:E2:A2:55:8A:C1:C0:63:76:26:67:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/567bda5f-81d1-34f7-bf07-3e68026cb72d.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     14618
IP address blocks:        2606:ec0:2000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/55e7b8e0-0df5-4481-84e4-83619b05f966.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/55e7b8e0-0df5-4481-84e4-83619b05f966.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:16:f6:b4:67:b7:2a:30:1b:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55e7b8e0-0df5-4481-84e4-83619b05f966
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=a9fcfa28-a85b-4202-9be3-e758fae07f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:77:6a:4c:d5:7c:f0:f0:23:eb:84:e8:d9:fe:
                    8a:f5:e0:ea:72:40:a6:3a:8b:52:8f:3e:05:5b:a3:
                    a0:45:62:6c:a3:89:2b:b8:6b:89:dc:c2:d2:e4:b8:
                    20:1e:05:29:9c:cf:b0:b8:0c:8a:b0:88:89:9d:b4:
                    67:de:d0:b7:71:c1:2f:b8:ed:b6:0b:c1:da:f3:78:
                    a6:72:ca:49:e3:38:d5:47:fd:2b:c6:2b:b2:d6:20:
                    f9:88:43:2c:2b:de:e9:0f:b0:0b:fd:47:03:09:05:
                    42:57:cb:87:35:70:fd:a8:3f:35:c7:73:dd:0a:91:
                    8c:08:d6:2c:17:b3:41:56:c9:c1:55:7b:f5:cd:75:
                    7b:f7:64:d9:04:a3:24:15:8d:71:23:8e:24:c7:d9:
                    64:99:60:9c:ba:a7:3a:9c:13:8e:aa:ae:d1:ab:d8:
                    69:6e:d7:81:1f:a3:da:ef:49:46:bf:df:96:72:b5:
                    d0:0b:a1:4c:bc:47:80:c5:ea:90:b3:99:31:a4:22:
                    90:d9:fa:d9:a4:5f:8a:59:c9:e9:02:a0:3a:0f:12:
                    66:37:e7:e8:2a:e7:1f:9f:a3:16:8b:af:7f:a1:25:
                    a6:f8:6f:ec:9f:75:c9:49:c3:0e:49:94:55:01:3b:
                    c0:7c:6d:8f:4d:32:92:24:c2:ca:c5:3f:46:e6:08:
                    7d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:43:40:51:33:22:6A:15:A7:56:AB:F8:A2:C4:AD:93:15:6B:0E:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/567bda5f-81d1-34f7-bf07-3e68026cb72d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/55e7b8e0-0df5-4481-84e4-83619b05f966.crl

            X509v3 Authority Key Identifier:
                keyid:61:AA:90:72:0A:BC:38:A3:EE:E2:A2:55:8A:C1:C0:63:76:26:67:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:ec0:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:52:68:df:d0:dd:ee:7c:e4:32:06:be:69:29:56:c4:32:e5:
         6a:e6:81:a4:56:db:c2:58:82:fb:80:1b:f6:08:1c:ec:7e:e9:
         dc:30:f7:d8:4d:db:9d:76:0c:7a:a9:c4:ec:b1:42:7d:2a:de:
         1e:b3:6e:be:ee:96:42:32:4a:ae:28:b3:ed:43:6b:34:d2:52:
         3e:79:5f:3b:a1:2e:17:d0:fd:30:dc:98:60:ed:1a:2d:b8:12:
         9d:2e:d1:b3:fe:72:87:07:97:37:99:9b:f5:69:14:fb:5f:57:
         20:d1:df:b9:99:96:11:95:67:d6:97:24:90:6a:90:23:41:a7:
         6c:13:87:d9:24:72:5f:e7:9c:cd:fe:64:f9:82:c5:b3:7b:ee:
         f2:3b:e7:fd:cb:39:ce:5d:1b:13:4a:9a:ac:8d:b1:64:14:d4:
         3f:e1:4f:47:bf:70:ce:b5:aa:a1:2e:26:5e:98:f1:30:6c:24:
         3a:97:55:ca:a5:89:90:6d:d9:80:a6:57:3c:86:f9:4d:3b:0f:
         8b:d0:75:42:80:1b:26:6d:09:2b:a9:68:37:51:59:fd:4d:a2:
         bf:26:0e:9c:b7:67:f9:f2:ba:ac:c9:87:53:33:2e:65:1a:cf:
         aa:e5:5b:33:a5:42:c3:ba:ea:27:98:e8:a5:36:6c:5a:7d:e2:
         fa:95:38:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 14:11:57 2024 by rpki-client on console-ams.rpki-client.org