Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/5af83517-5c07-3ae7-8015-a5e60f3f5a81.roa
File:                     5af83517-5c07-3ae7-8015-a5e60f3f5a81.roa (raw, json)
Hash identifier:          W0kT8uEZWNcj0FWmc/2rV7qLpvPtcIA8AFCCXkZWenE=
Subject key identifier:   58:97:04:1E:E1:B4:B7:68:5A:B5:0E:A3:C2:EF:FB:23:B7:92:1F:70
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F43285844F0354880724A567C672ADE80
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/5af83517-5c07-3ae7-8015-a5e60f3f5a81.roa
Signing time:             Mon 19 Feb 2024 02:00:25 +0000
ROA not before:           Mon 19 Feb 2024 02:00:25 +0000
ROA not after:            Sun 19 May 2024 01:00:25 +0000
asID:                     21957
IP address blocks:        2605:f440:5652::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f0:35:48:80:72:4a:56:7c:67:2a:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Feb 19 02:00:25 2024 GMT
            Not After : May 19 01:00:25 2024 GMT
        Subject: CN=3aea1b24-f869-45f6-b8e4-6d36f3fe43da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:04:fa:d3:dd:d9:0e:f5:a2:6d:0a:13:5b:61:
                    cc:0d:24:69:89:d6:2f:2a:e5:3c:a1:a0:91:5c:43:
                    91:b5:93:ee:61:56:bc:be:55:5d:e5:17:8b:67:dc:
                    81:6b:58:85:98:7d:d6:e2:7c:7d:58:4e:d7:38:ff:
                    6a:a8:6e:7f:b0:e5:2e:e6:5c:b4:49:fd:34:8a:cc:
                    14:7e:dc:95:46:a2:94:63:7e:84:5e:23:e4:eb:94:
                    fe:ea:e5:68:22:b1:f4:49:e1:a2:64:fe:fa:f5:4e:
                    92:e2:95:58:99:e8:53:19:fc:d3:7b:b3:f8:d5:31:
                    ff:13:1a:d0:58:f0:22:68:28:ad:f9:4c:a3:04:6d:
                    fe:99:ca:5a:34:5e:a0:4b:64:03:18:10:67:46:7b:
                    2b:76:0a:c0:ba:65:ca:47:c2:3d:3e:46:cd:1e:cd:
                    4d:b4:d7:28:4d:46:70:43:9b:9c:f3:b6:8c:22:3a:
                    20:59:03:b8:32:3a:8c:ec:04:db:e0:35:56:68:d5:
                    ea:0b:0e:f4:3f:38:c6:49:dd:3b:09:4f:cf:7a:3f:
                    2f:f6:c1:95:45:fd:8f:3f:91:b1:a3:f9:cb:45:cc:
                    43:cc:f4:99:bb:08:b9:9e:e4:22:15:36:67:38:b3:
                    c3:8b:61:ec:d5:22:90:5a:3c:c6:50:b7:42:4d:1b:
                    4e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:97:04:1E:E1:B4:B7:68:5A:B5:0E:A3:C2:EF:FB:23:B7:92:1F:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/5af83517-5c07-3ae7-8015-a5e60f3f5a81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:5652::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:f5:19:8a:ee:51:00:08:e4:40:55:22:5c:0f:b0:af:28:6a:
         d0:3b:a8:6b:bf:93:1d:06:72:7e:84:ed:8f:c0:06:17:4b:b8:
         71:5c:d1:52:8c:b3:f6:ce:e2:ab:60:54:7c:bf:4b:c5:d0:fe:
         f8:31:2e:95:c3:76:83:92:00:c5:cb:8b:6e:a0:ec:97:4d:37:
         2f:31:f7:c3:56:22:b2:42:b1:b1:15:e7:da:82:9f:c6:09:9c:
         66:be:9c:0f:bd:62:00:09:20:1a:ef:a5:a6:86:6a:0a:f8:08:
         1b:03:42:74:78:13:05:4f:b0:50:9e:19:9c:8e:df:8d:df:05:
         60:ef:a3:bf:07:70:66:44:5b:fa:24:62:ed:e3:8c:bc:f2:f6:
         8b:37:2f:e3:02:86:33:3e:39:84:f4:45:f1:7f:9b:85:f1:ad:
         de:30:e5:ba:95:2a:2f:09:b6:9f:19:41:3a:1f:6e:6b:9e:59:
         76:69:c3:c3:f5:be:3b:3c:3c:a8:dc:4b:54:38:80:64:f5:24:
         6f:ef:5a:d1:a4:0c:b5:24:d6:15:c1:c9:c5:9d:59:3e:92:39:
         1b:c3:2a:27:0b:d6:40:4d:07:cc:d3:fd:52:32:fa:71:89:05:
         34:5d:c7:55:40:35:76:5c:6d:e0:67:fe:bc:62:6a:ba:d6:2a:
         e3:2c:62:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 01:55:21 2024 by rpki-client on console-ams.rpki-client.org