Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/ba7544c9-2698-3c1d-882c-7ddabe9e62e2.roa
File:                     ba7544c9-2698-3c1d-882c-7ddabe9e62e2.roa (raw, json)
Hash identifier:          6HLev03Jv8OcSQNDb+SRDyNuCot4J6/OcFuUxjK5XiI=
Subject key identifier:   5D:CF:5D:61:94:13:10:56:E9:88:D0:71:D0:E1:DB:1A:B8:9D:1B:23
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F4328584574B3125A685094DB0A3F4A80
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/ba7544c9-2698-3c1d-882c-7ddabe9e62e2.roa
Signing time:             Sat 06 Apr 2024 13:00:35 +0000
ROA not before:           Sat 06 Apr 2024 13:00:35 +0000
ROA not after:            Fri 05 Jul 2024 13:00:35 +0000
asID:                     15418
IP address blocks:        2607:f1c0:fe::/47 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:74:b3:12:5a:68:50:94:db:0a:3f:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Apr  6 13:00:35 2024 GMT
            Not After : Jul  5 13:00:35 2024 GMT
        Subject: CN=49dd1ced-195e-46fc-a7e9-64efeec7f1e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:15:97:b0:44:e5:a3:f3:99:02:d3:a4:26:1f:
                    f6:fc:d1:b7:4c:7c:8c:d1:40:50:db:f2:e5:b1:98:
                    b6:5f:6b:fa:9c:9f:61:95:31:7c:1f:06:f0:3a:22:
                    5e:ba:2d:0e:77:7f:0d:8f:77:c4:2d:cf:b0:02:55:
                    14:6e:7d:b1:3c:8f:ac:27:80:8f:74:7c:4f:f6:fe:
                    eb:fd:21:e9:bd:a8:7a:cf:73:13:a7:f0:44:4c:f7:
                    af:9a:2e:f8:b7:a0:3e:76:c6:cd:69:02:37:5f:48:
                    19:ae:48:4a:fe:07:02:d5:c6:4e:25:9b:55:44:94:
                    08:c4:2f:63:02:8f:72:98:6b:aa:f4:f9:2d:12:1e:
                    08:84:0a:e4:d8:49:89:9e:c5:dd:69:a9:e9:be:84:
                    78:76:d5:44:da:30:f1:c6:8e:49:2f:c2:7e:0c:bc:
                    07:d7:e8:19:ad:a9:e0:d3:ad:20:73:85:e6:1a:ae:
                    a4:3c:d5:2e:ed:d2:89:e8:e0:7f:09:fc:de:21:ba:
                    a8:8f:f6:ea:cf:a3:91:12:14:6b:17:e1:45:df:7c:
                    23:a5:ca:f6:c7:9e:e8:d9:bf:3b:86:9d:6e:99:c3:
                    64:a5:48:63:fa:4c:fd:2d:8d:c6:cd:33:72:7b:15:
                    d7:06:cb:3d:35:8b:9b:26:e0:16:7b:38:8c:6f:60:
                    9b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CF:5D:61:94:13:10:56:E9:88:D0:71:D0:E1:DB:1A:B8:9D:1B:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/ba7544c9-2698-3c1d-882c-7ddabe9e62e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f1c0:fe::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:10:b8:9d:d3:d8:53:48:0c:8f:b1:99:7f:bb:d9:dc:e9:0d:
         dc:cc:ab:ef:c8:ed:a4:0f:4f:3e:7e:90:17:71:b9:9d:7b:16:
         ff:dc:cd:50:8b:f3:fa:23:e9:60:20:0f:c6:2a:c2:cb:18:8d:
         17:6c:f0:d7:d3:d0:67:25:09:10:8b:e9:71:ff:a7:be:3d:88:
         f3:66:fe:4f:02:e4:86:f1:f3:b5:4b:7f:75:3c:bc:2f:ed:7f:
         42:54:d4:78:99:92:48:ee:ff:1b:60:17:04:65:67:b2:24:44:
         0d:f8:7d:0c:7b:06:b6:8b:3a:57:26:f9:b3:d3:75:a1:f4:19:
         5c:a2:dd:1a:af:aa:b8:e5:37:dd:74:25:c4:4d:1f:c4:62:9b:
         18:75:8e:89:68:bd:86:7a:82:e1:79:71:30:54:81:5e:58:b2:
         56:71:83:c9:0e:bc:85:83:c8:c4:d6:5f:dd:7d:ea:3c:bd:ac:
         b5:42:95:56:5b:b4:53:ef:dd:ec:8a:dc:32:8a:87:73:63:c1:
         cf:fd:b6:ac:d9:b6:e4:04:10:04:5c:92:c4:f0:4d:29:d0:fa:
         d7:e5:95:5c:0d:69:4e:d8:34:ed:b0:a7:85:9e:14:8f:b7:50:
         da:c9:ee:57:8a:c6:7b:20:1d:d0:b1:59:48:e1:5e:e7:f6:33:
         dd:cc:5d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:34:21 2024 by rpki-client on console-fra.rpki-client.org