Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/9485cf81-084e-3d3e-8edb-007a5ff6e337.roa
File:                     9485cf81-084e-3d3e-8edb-007a5ff6e337.roa (raw, json)
Hash identifier:          SoHjAJkeQ+z7F/P7u0ddIw1JXBAa6MYbzQkBJ9VeFGE=
Subject key identifier:   CA:20:B0:4B:65:18:05:AC:A8:70:F8:85:F3:96:2C:AE:7D:F8:4C:FF
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F43285845280AF501A7570DF0F66AD900
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/9485cf81-084e-3d3e-8edb-007a5ff6e337.roa
Signing time:             Sun 10 Mar 2024 02:00:25 +0000
ROA not before:           Sun 10 Mar 2024 02:00:25 +0000
ROA not after:            Sat 08 Jun 2024 01:00:25 +0000
asID:                     970
IP address blocks:        2605:f440:5600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:28:0a:f5:01:a7:57:0d:f0:f6:6a:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Mar 10 02:00:25 2024 GMT
            Not After : Jun  8 01:00:25 2024 GMT
        Subject: CN=6da05907-0612-4234-831d-7481637678a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:17:cf:17:b3:03:c3:68:ed:2f:e1:7d:94:05:
                    45:f1:69:85:7f:be:bf:f3:6f:e3:c0:62:b2:27:93:
                    63:82:9e:32:f2:7e:5c:91:73:cf:4a:bb:f4:5a:9b:
                    47:30:44:b3:a6:3a:7f:71:8b:94:3b:bd:58:95:4f:
                    a9:07:4a:20:b9:41:94:1b:8d:ba:9c:76:16:5c:ce:
                    87:45:b9:0d:9b:27:2e:80:c8:7e:03:e8:c5:fa:83:
                    c5:d0:8b:30:83:ba:3a:71:67:4e:e5:07:67:06:a2:
                    f9:b7:01:66:20:9b:75:e5:8c:84:bd:77:ff:d5:30:
                    68:77:2e:59:69:53:b8:16:63:57:79:40:cd:44:4f:
                    09:84:3b:bf:da:a2:ee:65:cf:88:06:ed:1a:94:8e:
                    90:ab:43:50:b3:2a:58:85:96:a7:6f:5a:58:39:22:
                    b1:81:ab:00:21:34:15:b4:85:19:74:77:1c:91:b2:
                    6b:3b:97:4a:95:02:7d:e7:3c:a4:d3:7f:73:20:d1:
                    7e:8e:9c:bb:c0:d8:b4:c1:5c:cf:df:22:45:33:6e:
                    ab:53:af:26:14:fc:d5:b5:41:72:86:33:d6:62:01:
                    77:72:3d:41:aa:0a:84:4a:81:8f:8f:7a:2b:74:7a:
                    96:ed:c7:2d:07:1c:d8:ce:48:3c:05:1c:d6:a8:59:
                    bc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:20:B0:4B:65:18:05:AC:A8:70:F8:85:F3:96:2C:AE:7D:F8:4C:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/9485cf81-084e-3d3e-8edb-007a5ff6e337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:5600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:b0:9b:63:3f:0a:83:fc:21:a7:f0:8e:40:2b:13:02:0b:cb:
         fc:aa:95:0d:58:a2:9d:2c:48:01:ce:82:b8:ae:b3:66:35:c2:
         9b:40:ba:ca:23:a1:93:58:55:9b:ef:4b:ee:94:95:66:a3:48:
         e4:36:5c:d9:91:76:05:f3:0a:9d:d0:63:a5:2f:d3:e6:8d:39:
         bd:9f:b5:24:c9:22:e2:a1:cc:d4:f4:2b:c2:66:88:da:a4:dd:
         ab:81:8c:70:45:7e:2f:c6:01:7b:6c:cb:b5:6b:7b:46:0f:02:
         b4:37:2d:fe:fc:90:7e:72:08:11:58:e3:5f:c3:d0:9f:c7:37:
         60:e9:a9:37:91:bb:60:ca:c4:41:fb:af:6d:06:54:2c:fd:5f:
         89:a1:1d:46:d5:0a:bb:62:b6:a0:25:61:2c:ba:0c:53:78:90:
         12:c9:af:b0:c8:64:36:39:30:f4:22:5c:56:62:05:5c:c9:73:
         51:e5:72:26:9f:c8:85:43:88:4b:b2:df:6a:ca:a5:06:f2:c4:
         b1:33:ed:cb:a4:a4:fc:fd:12:b9:06:5e:df:5a:88:55:2c:74:
         e4:6a:8a:38:20:f4:95:e5:23:99:11:1e:26:3c:df:6b:49:43:
         33:de:7f:e7:af:5e:28:6d:34:ff:04:8f:39:b1:e0:c0:8e:8b:
         6e:b5:4d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 06:18:42 2024 by rpki-client on console-ams.rpki-client.org