Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/c89fe8d3-db84-3821-9492-1ecfc90006ca.roa
File:                     c89fe8d3-db84-3821-9492-1ecfc90006ca.roa (raw, json)
Hash identifier:          9wduvY3G0i5WO4ZzBr1ddWQVtmZgt/eCZn170COhyZ8=
Subject key identifier:   49:71:ED:F2:C5:98:0E:B2:B9:4B:EB:D0:DC:EB:01:CD:7B:F8:3A:C6
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F4328584608A953A427784433BB5F9140
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/c89fe8d3-db84-3821-9492-1ecfc90006ca.roa
Signing time:             Wed 29 May 2024 13:00:34 +0000
ROA not before:           Wed 29 May 2024 13:00:34 +0000
ROA not after:            Tue 27 Aug 2024 13:00:34 +0000
asID:                     0
IP address blocks:        2605:f440:56f0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jul 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:08:a9:53:a4:27:78:44:33:bb:5f:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: May 29 13:00:34 2024 GMT
            Not After : Aug 27 13:00:34 2024 GMT
        Subject: CN=fee6d711-c65f-453c-a0f2-ecb5f8f75729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1c:ab:4b:2e:53:77:8e:90:ac:e0:6b:53:ea:
                    5c:9b:6f:28:71:5d:d6:6c:7f:ce:81:2c:8c:7e:7e:
                    47:7b:06:57:e1:77:37:e0:6d:f4:9a:23:39:bf:d3:
                    13:e4:eb:93:4b:24:89:26:8b:bf:e0:94:bf:31:da:
                    72:32:15:a7:e1:20:4c:62:83:ee:0b:80:f1:a3:4e:
                    fd:00:f9:16:d3:67:bd:2f:e4:ff:a0:d1:bb:7f:ee:
                    9d:39:fe:a0:ce:1e:74:cc:54:ca:ac:ec:15:5d:71:
                    a8:e0:fc:94:53:fb:5a:aa:32:22:cd:5f:5f:8a:dc:
                    bd:30:f8:f4:85:c0:4f:e8:5e:55:66:f8:fc:63:77:
                    69:ac:12:39:f7:29:0e:de:63:6d:42:eb:48:38:23:
                    bb:d5:7e:1e:09:98:e2:c5:e6:4b:c4:4d:fd:70:f3:
                    09:35:de:6b:87:c7:0c:dc:e2:c8:d2:e4:01:48:4b:
                    6d:ef:26:0e:c3:b4:de:6f:aa:85:f2:dc:75:4a:f5:
                    9c:c0:43:24:1f:4e:2b:55:db:9b:90:6c:fd:e3:60:
                    01:5d:a6:45:d4:5f:21:7a:dd:0c:35:9e:a9:55:ed:
                    3a:08:ec:7b:a9:b7:77:32:83:7b:ae:63:93:68:0d:
                    e6:1c:f0:f2:a7:90:c1:66:18:b2:d9:eb:a5:94:d4:
                    f8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:71:ED:F2:C5:98:0E:B2:B9:4B:EB:D0:DC:EB:01:CD:7B:F8:3A:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/c89fe8d3-db84-3821-9492-1ecfc90006ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:56f0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f0:4c:51:91:ff:1c:65:53:9d:5c:e7:ee:9f:88:7f:01:ea:
         53:70:e9:e0:dd:8f:22:03:28:e9:8d:97:f7:fe:25:35:a4:a5:
         3c:15:38:a4:72:3b:0b:d4:7e:b9:28:43:af:5e:08:ab:4f:a7:
         ae:81:ea:35:e8:db:44:92:97:ca:8f:02:3e:74:66:ea:10:e5:
         c0:d9:8b:07:e9:47:5f:0f:4f:52:17:ee:f5:12:5b:d0:50:d3:
         14:ed:3b:66:a2:bf:df:91:54:b4:4d:f0:10:d1:76:81:4c:c7:
         84:e8:9f:57:ad:89:53:f8:13:90:7a:da:54:5f:59:d6:35:e9:
         9e:f5:75:af:70:d6:3a:3e:35:4f:42:ce:63:f0:95:07:b3:45:
         6b:94:cd:64:89:28:da:1c:d9:db:48:9b:ba:67:51:29:36:c3:
         26:50:76:08:f1:8a:57:e2:a6:09:b0:3d:7f:a1:cb:20:38:c8:
         cf:dd:88:16:bf:50:ef:a2:b5:03:8e:f0:ef:5f:02:da:1d:5c:
         24:7a:a4:bd:27:f3:2f:b8:2d:10:11:f9:e4:0b:71:83:75:ad:
         51:31:1c:59:5a:b3:03:de:4f:b9:89:ec:63:00:8a:f4:6b:c6:
         c0:f4:b9:89:71:0a:c4:61:cd:80:09:d3:14:34:6f:fd:0d:e1:
         13:91:6f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 07:42:17 2024 by rpki-client on console-fra.rpki-client.org