Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/2a3b35d7-1df8-3a46-8e06-935ce2ee1d98.roa
File:                     2a3b35d7-1df8-3a46-8e06-935ce2ee1d98.roa (raw, json)
Hash identifier:          kxdYhjyE59lVI0XBaMVpquUe8z6pD32t5TSiuh0/zcw=
Subject key identifier:   E7:2F:04:B2:03:3E:6F:BF:0E:AD:F4:B6:04:99:03:DA:01:95:98:A7
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F43285845280AF523C2E88293C8C133A0
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/2a3b35d7-1df8-3a46-8e06-935ce2ee1d98.roa
Signing time:             Sun 10 Mar 2024 02:00:25 +0000
ROA not before:           Sun 10 Mar 2024 02:00:25 +0000
ROA not after:            Sat 08 Jun 2024 01:00:25 +0000
asID:                     57439
IP address blocks:        2605:f440:53::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:28:0a:f5:23:c2:e8:82:93:c8:c1:33:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Mar 10 02:00:25 2024 GMT
            Not After : Jun  8 01:00:25 2024 GMT
        Subject: CN=c74f1b95-60b6-4cc4-9683-211f8b57523c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:77:57:e9:36:00:88:49:9f:60:ee:8c:23:f1:
                    ce:68:ce:73:e3:6d:da:84:e3:cb:54:97:d9:d0:a6:
                    d2:01:ff:84:55:7e:95:76:9f:67:45:e3:9c:c5:fa:
                    a7:dd:f7:c5:a4:10:94:3e:52:68:09:9a:e4:0b:e2:
                    3d:12:03:16:6a:e5:3f:95:ed:20:bb:6e:e5:8d:0a:
                    65:46:44:64:50:f4:39:51:cc:12:ec:41:38:a2:0e:
                    8c:15:4d:3d:d2:74:37:65:4b:a3:b5:3d:82:c0:48:
                    88:08:64:b5:95:53:49:a4:f7:dd:83:d7:8b:d2:79:
                    ff:4a:72:43:23:9f:8c:bb:bd:f5:f1:d8:86:de:41:
                    36:98:b6:36:3d:7d:4c:25:1d:9e:c6:ea:35:d7:64:
                    af:67:2d:c0:2a:4c:67:13:53:40:41:55:97:8e:0f:
                    ad:68:af:3f:b6:6d:40:b8:15:65:c6:e2:34:74:54:
                    52:df:2f:71:b2:fa:01:49:0a:e7:c2:2c:e6:4c:f1:
                    79:a0:9b:a9:4e:82:37:87:2d:3c:d4:ed:cd:d7:b8:
                    c0:db:27:2f:af:b7:33:7b:fb:8e:b6:68:75:e5:45:
                    bc:d8:f4:a1:80:b5:58:b2:25:9e:35:18:a6:a9:92:
                    2c:7e:07:a6:7a:e5:83:6b:e2:c6:a7:65:70:2d:eb:
                    63:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:2F:04:B2:03:3E:6F:BF:0E:AD:F4:B6:04:99:03:DA:01:95:98:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/2a3b35d7-1df8-3a46-8e06-935ce2ee1d98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:53::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:01:26:b5:50:84:1c:76:55:84:79:71:e2:75:df:72:41:94:
         04:7b:f2:cb:06:9c:e1:85:a2:f5:ad:d9:a6:6a:fa:5b:e6:b8:
         a2:ee:b4:33:62:20:5e:c9:ff:bb:96:e8:19:57:6f:8a:f3:ba:
         3a:65:f7:35:f7:53:af:35:86:76:2b:2e:a9:51:7c:44:fc:94:
         1e:e0:39:12:40:e3:d4:a0:2c:48:7b:60:12:f8:f7:bc:24:ac:
         eb:a7:5e:b4:c8:fe:b3:ab:73:79:cb:8f:83:ef:8a:b7:a3:14:
         42:a9:0e:9b:ee:65:99:4a:d0:cc:66:3e:a1:c2:05:9f:a9:8a:
         29:65:cc:38:9f:f3:33:93:e5:ac:4d:02:98:1b:5d:3f:a8:dd:
         7e:d8:cf:3b:81:9a:0c:8d:a7:6c:6c:a6:ee:2e:5a:f7:03:ec:
         c4:05:66:11:91:10:40:21:95:f3:a5:63:96:24:1c:13:0c:1a:
         de:1d:2e:b1:7e:ff:c4:05:90:3c:b8:9b:c3:2b:23:8b:04:00:
         1a:8e:a4:ba:b5:49:4f:13:19:21:31:ff:a7:42:0f:6e:56:f0:
         9f:92:37:a6:b5:71:be:56:6e:53:8d:4f:db:99:e9:fc:db:60:
         79:ca:bb:34:4a:38:0f:db:0f:74:65:1b:05:0f:09:0d:d2:b0:
         ad:bc:66:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:48:41 2024 by rpki-client on console-ams.rpki-client.org