Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7118b531-0a27-3f70-8155-f1f0c5a4bff6.roa
File:                     7118b531-0a27-3f70-8155-f1f0c5a4bff6.roa (raw, json)
Hash identifier:          uSiLgZ5iJMCdqjCYbBS3yBZYuCwGIDahdSyZz520XIQ=
Subject key identifier:   3D:57:32:3D:1D:95:A3:2E:CD:B7:3F:BB:E1:97:0E:BE:A4:1D:79:A8
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845462E81C105FE4F98F1A26000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7118b531-0a27-3f70-8155-f1f0c5a4bff6.roa
Signing time:             Wed 20 Mar 2024 21:06:22 +0000
ROA not before:           Wed 20 Mar 2024 21:06:22 +0000
ROA not after:            Tue 18 Jun 2024 21:06:22 +0000
asID:                     15169
IP address blocks:        2600:1900::/31 maxlen: 31

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2e:81:c1:05:fe:4f:98:f1:a2:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 20 21:06:22 2024 GMT
            Not After : Jun 18 21:06:22 2024 GMT
        Subject: CN=86bcea38-63a3-4c2c-b7a2-aa3f7ca669b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8d:f5:92:bf:8e:54:9f:08:b6:4f:a8:50:4c:
                    64:5a:77:98:64:f9:2b:b6:a7:32:6e:d4:55:88:aa:
                    b5:c7:2d:ea:8f:7c:5a:c1:31:ed:90:57:10:23:58:
                    3c:11:ab:28:d0:29:f0:b9:b6:c6:9b:f2:1b:40:1c:
                    27:b1:d3:0a:71:95:52:21:cb:22:31:0c:e3:69:37:
                    c6:d1:59:42:af:19:21:a5:2c:62:11:dd:36:89:95:
                    2f:7a:b0:b3:4f:5a:24:a4:3f:be:67:03:9f:a8:bb:
                    23:e7:81:dc:86:6d:f7:00:16:6f:6c:60:a1:1f:6e:
                    60:0f:17:91:a9:58:21:f5:9f:28:b9:61:84:53:0d:
                    9f:fe:82:5a:3f:24:b6:f2:dc:72:42:cd:75:f6:25:
                    ed:ab:ad:4c:58:db:c5:a3:4e:df:62:5d:ba:a1:f1:
                    fb:e0:5f:9f:78:e6:cc:cd:7d:2c:52:c2:63:e5:9f:
                    db:2f:a1:f0:43:f2:f3:94:56:43:e6:19:40:0d:ab:
                    7f:3d:83:9f:92:02:14:47:7d:a8:9d:b2:e0:51:13:
                    1b:23:be:a5:e0:69:77:1e:0e:22:a8:01:d4:c3:3d:
                    a4:86:17:30:7c:ad:79:67:29:df:00:e2:17:44:71:
                    8b:3e:94:2c:c7:4b:6c:88:cf:93:24:b5:60:46:b3:
                    40:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:57:32:3D:1D:95:A3:2E:CD:B7:3F:BB:E1:97:0E:BE:A4:1D:79:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7118b531-0a27-3f70-8155-f1f0c5a4bff6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1900::/31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:52:f3:55:44:ef:93:39:fd:c8:dd:f8:ec:07:41:46:5b:fb:
         71:e3:da:0b:31:46:37:0f:3a:0c:db:dd:fb:d7:c8:65:05:22:
         fd:aa:7d:db:ab:11:94:d3:fe:85:02:ce:01:14:3e:85:10:40:
         8e:c0:e9:3d:3d:82:b5:c9:9c:76:c9:be:84:ae:99:df:aa:cb:
         33:6a:a9:02:87:0a:dc:b3:1d:8e:b9:03:a5:f1:a0:c5:d6:b7:
         15:5e:19:0c:24:7c:68:16:a5:f8:27:44:ab:65:f3:66:cc:95:
         8c:dd:e7:47:0d:a6:14:7b:9b:60:3b:e0:4e:72:98:d5:41:b6:
         ef:68:0e:e0:c4:a1:e4:d3:5d:61:d1:af:b4:b6:1d:00:4d:f0:
         65:f4:19:9f:1b:94:ee:5e:68:30:d4:2f:50:6e:24:f3:12:10:
         85:0f:87:60:39:8a:c9:63:c3:e7:08:8f:39:e8:25:87:d4:be:
         7b:d4:4e:0b:ff:4f:ef:c0:a7:8e:0f:b4:02:64:67:dd:46:34:
         3f:73:7a:c5:3b:28:d0:e6:20:33:e7:8f:c3:e0:fe:08:44:f2:
         c2:70:29:ee:57:65:f2:36:ef:3c:fc:5a:2b:5e:09:8e:71:d4:
         65:72:79:ce:df:61:8b:a0:e6:6d:f9:24:1a:94:a3:cf:de:4c:
         bb:de:a8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 07:45:08 2024 by rpki-client on console-fra.rpki-client.org