Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fc3e49c7-fbd9-3d88-84fd-215324bebbb2.roa
File:                     fc3e49c7-fbd9-3d88-84fd-215324bebbb2.roa (raw, json)
Hash identifier:          FZcjL3ACCNFaiGDpdwuyBewsZPNqVieL5Av2bavYOYQ=
Subject key identifier:   36:8B:C4:6B:98:B3:D7:7F:27:3F:AB:E9:98:E7:FE:4C:39:9D:EA:75
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845462EAF43DED230853AA73700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fc3e49c7-fbd9-3d88-84fd-215324bebbb2.roa
Signing time:             Wed 20 Mar 2024 21:06:43 +0000
ROA not before:           Wed 20 Mar 2024 21:06:43 +0000
ROA not after:            Tue 18 Jun 2024 21:06:43 +0000
asID:                     15169
IP address blocks:        2600:1908::/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2e:af:43:de:d2:30:85:3a:a7:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 20 21:06:43 2024 GMT
            Not After : Jun 18 21:06:43 2024 GMT
        Subject: CN=036f7539-6a25-497d-adfb-d10f91e7794b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a8:5a:42:38:c0:4b:ff:cd:ab:bb:5d:c9:b8:
                    7f:9a:5e:12:a5:53:1a:ad:f6:ab:4e:b2:07:7e:c0:
                    8b:b0:6e:d8:8e:64:b1:ab:11:7e:9c:f9:6b:b5:a2:
                    92:05:b6:fe:88:7a:54:ba:6e:e8:cb:fa:76:4b:a0:
                    5f:7b:38:1d:33:0c:d4:3f:b3:9c:fa:47:56:b2:a3:
                    a8:ee:de:dd:eb:65:12:68:eb:c5:f7:a5:a2:4b:94:
                    95:51:0a:f7:13:a2:23:0b:3c:e0:d6:01:03:3f:56:
                    f0:5f:e6:e0:80:00:a4:78:01:fc:75:40:20:f6:3f:
                    96:7c:1d:1b:2b:0f:fe:26:39:93:f4:ef:fc:76:bd:
                    13:23:00:8a:1e:29:fa:d0:21:a5:95:f1:8d:31:2a:
                    02:d9:4a:a7:c9:2b:14:da:0f:14:ea:c3:d1:43:61:
                    cf:b5:b0:47:a8:a2:9c:e8:e1:f0:87:b7:8c:30:57:
                    16:0b:58:be:6c:8e:22:61:95:c6:db:f6:8f:3f:ec:
                    ef:e7:c4:b0:f4:fb:e6:20:36:39:8c:7c:89:ea:f4:
                    c4:09:bb:d3:07:07:f3:50:83:59:ad:d9:b2:25:5f:
                    e9:21:b9:ee:11:1e:0d:14:23:8a:81:58:8c:1a:fb:
                    e6:c3:42:aa:23:9b:52:99:04:a4:9b:33:52:ae:c1:
                    db:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8B:C4:6B:98:B3:D7:7F:27:3F:AB:E9:98:E7:FE:4C:39:9D:EA:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fc3e49c7-fbd9-3d88-84fd-215324bebbb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1908::/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:4e:15:05:69:60:12:f5:8b:99:94:21:b3:39:ac:be:61:2d:
         4e:93:f6:aa:ea:fe:2c:6e:c3:d0:24:6b:09:5c:74:25:32:c9:
         16:9c:0d:f9:b2:2f:71:01:8f:49:a6:2e:7c:4f:c8:f0:3e:02:
         a5:5b:7c:3f:0f:17:ee:92:00:37:d4:bf:1f:c3:dd:8b:e7:95:
         60:b9:48:53:6c:cf:db:a0:8c:50:ef:00:f9:69:ed:a0:53:bd:
         ab:8e:ba:c0:38:41:b1:22:78:3d:ec:18:0d:2f:8d:5b:6c:a1:
         de:d7:71:74:31:60:6e:8a:da:8a:84:80:b9:59:ba:3d:33:e8:
         73:e4:62:f0:7a:ee:87:22:7a:d4:e3:9a:04:51:30:b9:b9:0b:
         9d:48:9a:50:1d:78:35:31:c8:9c:00:c4:f9:bf:92:24:ea:c3:
         58:77:ce:a8:8c:a5:2b:8e:67:3e:ab:f5:12:f8:02:f2:b0:b4:
         29:35:56:09:8b:eb:1a:af:e1:77:de:06:7b:a2:47:a5:fd:62:
         2f:53:6f:5a:cd:d6:6b:bf:2c:74:e7:43:28:a7:e0:61:b3:04:
         b3:d7:c3:2d:6e:e4:ab:da:d4:c5:8b:fa:7b:25:fe:26:05:69:
         c6:01:28:16:22:6f:dd:d9:6a:7c:66:b9:03:c2:16:b5:a4:c4:
         c0:74:8f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:30:17 2024 by rpki-client on console-ams.rpki-client.org