Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/91a0f82e-0c80-3031-8728-18426dbe1fb0.roa
File:                     91a0f82e-0c80-3031-8728-18426dbe1fb0.roa (raw, json)
Hash identifier:          HMGU+VfA0JfRoN5iuGVqwey7WclSbPX9s5rDh69Wv3E=
Subject key identifier:   24:22:A6:5B:C8:07:9F:F3:48:2A:72:5E:BC:48:65:F5:76:2A:1E:90
Certificate issuer:       /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Certificate serial:       010D0C9F43285844E3A53639DEFB3A7DEBE5CA40
Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/91a0f82e-0c80-3031-8728-18426dbe1fb0.roa
Signing time:             Wed 14 Feb 2024 14:00:30 +0000
ROA not before:           Wed 14 Feb 2024 14:00:30 +0000
ROA not after:            Tue 14 May 2024 13:00:30 +0000
asID:                     20473
IP address blocks:        2604:4540:80::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e3:a5:36:39:de:fb:3a:7d:eb:e5:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
        Validity
            Not Before: Feb 14 14:00:30 2024 GMT
            Not After : May 14 13:00:30 2024 GMT
        Subject: CN=ff2b4ba2-ae3a-479f-ab63-9734ba0cfdb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6c:e0:82:f4:56:cb:87:f2:b1:e6:67:7f:2b:
                    e0:41:27:81:57:94:90:26:a2:41:ac:ab:df:06:82:
                    67:d8:93:99:52:82:1b:f1:17:6a:4b:01:f3:53:8a:
                    77:e2:3c:d5:9a:8c:ba:2b:0b:4c:de:c8:04:03:ca:
                    97:bf:8f:0a:81:b1:5e:8c:70:7f:79:8b:75:cb:6d:
                    0b:63:f4:55:37:25:bd:07:8c:5c:41:3b:29:49:0e:
                    bb:0b:5c:81:b0:02:62:5f:ba:5a:8d:76:80:78:4d:
                    aa:61:8c:33:d7:d7:95:42:7c:49:12:c7:fd:3d:c2:
                    6d:74:6e:b9:a3:5c:e1:ab:c2:1f:0f:33:a3:30:0a:
                    6d:d7:dd:71:83:2d:3d:4a:5c:87:8e:ac:7a:0d:00:
                    38:c6:6f:e6:76:74:42:69:a3:39:35:09:ee:f9:24:
                    fe:c1:16:5f:80:61:fd:66:2b:2e:c6:c1:4a:13:fd:
                    9f:c7:74:0a:5b:d3:8f:b5:b2:6d:2e:c3:19:64:34:
                    42:10:5b:85:6e:42:fc:e0:33:96:bc:db:d4:57:f2:
                    0f:3d:c6:ac:e0:9e:3b:2a:99:ea:38:a6:47:6d:64:
                    94:37:2e:da:bc:ea:5a:29:6f:3a:54:74:86:cd:3c:
                    1b:aa:aa:c6:7f:9f:3c:8e:da:85:63:24:4d:f4:a6:
                    42:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:22:A6:5B:C8:07:9F:F3:48:2A:72:5E:BC:48:65:F5:76:2A:1E:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/91a0f82e-0c80-3031-8728-18426dbe1fb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl

            X509v3 Authority Key Identifier:
                keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4540:80::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:b0:31:af:6c:b2:5a:39:38:99:17:ab:70:e9:77:db:9a:95:
         d6:eb:20:34:94:8e:6a:9c:6a:9c:4c:18:ba:03:c8:1a:f6:e6:
         56:64:3d:e0:5f:f4:11:9f:f1:da:1e:27:23:da:a7:c3:83:f6:
         55:5d:fe:57:34:44:94:03:d7:55:d1:6b:b5:35:e4:7d:7d:7f:
         cf:8f:76:45:a1:aa:c2:64:c8:22:05:3e:b8:b1:c2:5a:83:5c:
         08:33:38:64:29:f1:dd:2a:70:a9:eb:e3:17:db:c3:bf:0d:cd:
         c2:72:c2:52:17:8e:4e:f8:db:3c:59:70:fa:fb:e1:0f:b8:ed:
         73:a9:32:5f:18:21:c9:7f:8e:70:f0:f3:3d:bf:50:0e:ec:36:
         60:3e:46:2a:a3:e6:30:57:bf:50:15:8a:e3:53:05:f2:29:b2:
         f7:ea:ee:6b:d9:c3:77:2c:13:6e:1e:d6:fb:3b:a4:61:b9:15:
         fc:ff:9f:08:f7:01:dd:1c:6f:43:72:38:0b:f4:cd:8c:20:81:
         8f:1e:5e:7e:ef:27:8d:ba:37:8e:fc:98:f7:6d:34:a1:6f:93:
         15:04:0b:67:c0:c1:76:cc:02:e5:48:30:19:ed:18:30:05:b7:
         bb:b8:01:3c:15:da:45:a7:75:95:7c:0b:cf:f6:03:a3:48:84:
         36:d2:f4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 06:28:33 2024 by rpki-client on console-ams.rpki-client.org