Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/00a33301-9187-30c7-82ee-d5b3029d2af1.roa
File:                     00a33301-9187-30c7-82ee-d5b3029d2af1.roa (raw, json)
Hash identifier:          0rmOLjn9Zv5d36jUsjOoHFJhBEV4I7mn0kwMs5Xff6Y=
Subject key identifier:   37:1F:30:78:F0:42:F7:32:C8:98:08:E3:A2:85:F2:46:9A:03:03:D0
Certificate issuer:       /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Certificate serial:       010D0C9F43285844EECFF6B0C9BA4E3ED5055F80
Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/00a33301-9187-30c7-82ee-d5b3029d2af1.roa
Signing time:             Sun 18 Feb 2024 14:00:30 +0000
ROA not before:           Sun 18 Feb 2024 14:00:30 +0000
ROA not after:            Sat 18 May 2024 13:00:30 +0000
asID:                     47065
IP address blocks:        2604:4540::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ee:cf:f6:b0:c9:ba:4e:3e:d5:05:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
        Validity
            Not Before: Feb 18 14:00:30 2024 GMT
            Not After : May 18 13:00:30 2024 GMT
        Subject: CN=5170ad1a-6c08-4d37-aa88-2b30fe220200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c4:60:68:02:3d:48:ea:0e:34:7c:c0:fe:0e:
                    b7:c4:9c:89:d0:b2:32:eb:96:56:76:2a:fb:41:d7:
                    36:34:57:c7:c7:96:33:8a:56:88:91:35:8d:96:cc:
                    db:93:54:23:f3:f5:17:93:06:51:3f:76:ed:c1:ab:
                    c3:e6:a5:0f:54:5f:49:54:ac:e5:dd:9f:94:0d:f1:
                    ec:90:a1:db:f3:42:68:8e:ed:69:b2:bd:a4:0a:43:
                    69:22:fd:9e:0f:ff:db:96:21:de:ad:29:e4:4a:97:
                    1c:aa:bd:37:56:f8:3c:a8:5a:ac:24:f3:98:d2:94:
                    37:19:e7:45:dc:ec:92:28:ca:17:c8:5f:f6:2a:8e:
                    3a:00:35:29:f5:de:ee:59:e3:44:25:aa:31:53:96:
                    cc:ff:49:01:c9:27:16:8c:c3:42:d6:16:61:9a:47:
                    fa:97:6c:cf:d5:2a:33:bb:51:3e:dd:11:e0:25:79:
                    be:9b:23:88:70:d8:fb:20:35:88:10:55:32:57:37:
                    e5:93:76:e1:bf:2b:c4:7c:b3:b9:ba:af:bb:09:c6:
                    65:b7:c3:5a:18:83:9c:d8:7d:27:f9:60:e6:a4:d1:
                    27:27:5a:ec:4f:b7:fe:9e:89:36:54:1a:2f:31:b1:
                    75:18:56:82:67:7e:02:f7:10:24:df:b1:51:ac:16:
                    58:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1F:30:78:F0:42:F7:32:C8:98:08:E3:A2:85:F2:46:9A:03:03:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/00a33301-9187-30c7-82ee-d5b3029d2af1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl

            X509v3 Authority Key Identifier:
                keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4540::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:0e:4f:f6:9e:45:99:a8:03:6e:fe:6d:b5:f9:73:33:35:9e:
         06:dd:ec:a0:5b:95:25:cd:a5:1b:90:b6:5e:fd:90:f9:b3:8e:
         27:b2:9c:44:83:65:20:5c:e4:68:92:94:77:2b:d6:c7:dc:78:
         dc:66:9a:9f:5a:5e:52:87:77:90:29:4a:f3:49:18:c5:fb:f8:
         38:46:c8:f7:bb:3d:9a:6a:8d:d7:e9:d4:c9:b8:57:8a:93:13:
         b9:da:6f:00:44:9e:ad:3f:ec:13:29:a2:7f:6c:27:6f:6c:b5:
         6d:bb:42:35:20:ab:1e:cc:22:67:7a:e5:d1:e6:97:ef:1b:c4:
         ee:66:08:12:d3:6a:ef:2b:c9:64:7e:2f:d7:e1:56:c0:0a:6d:
         e5:5c:9d:e5:6c:cf:72:2e:9c:e9:cc:c1:91:52:43:c3:57:12:
         18:4e:61:d5:67:3d:73:f8:2e:f4:05:5e:bd:5b:95:e9:28:72:
         a3:4e:7d:1d:67:01:0e:5d:ae:51:f4:44:d2:a3:68:36:23:a0:
         72:7b:f4:cd:04:0b:06:ce:08:41:89:1c:dd:5c:5d:0d:0c:86:
         23:aa:eb:1d:c8:20:c4:87:cc:ab:d6:35:ad:3e:00:bc:2c:57:
         3f:40:3d:00:3d:9c:1b:6f:c8:04:e8:e9:0a:52:d5:25:89:e0:
         e8:11:cb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:33:58 2024 by rpki-client on console-ams.rpki-client.org