Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/ebf9b2cc-5b56-304a-9601-ce7416e9e1d4.roa
File:                     ebf9b2cc-5b56-304a-9601-ce7416e9e1d4.roa (raw, json)
Hash identifier:          VuNx8h0rLi5zvkK0xlcCSr5p3adRluwSWkdT8A/RYwY=
Subject key identifier:   72:1D:4A:C8:2A:D6:AD:DC:AF:81:8D:EC:07:33:D9:A5:11:0C:AF:B5
Certificate issuer:       /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Certificate serial:       010D0C9F43285844EECFF695ADB953DC03687400
Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/ebf9b2cc-5b56-304a-9601-ce7416e9e1d4.roa
Signing time:             Sun 18 Feb 2024 14:00:30 +0000
ROA not before:           Sun 18 Feb 2024 14:00:30 +0000
ROA not after:            Sat 18 May 2024 13:00:30 +0000
asID:                     559
IP address blocks:        2604:4540::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ee:cf:f6:95:ad:b9:53:dc:03:68:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
        Validity
            Not Before: Feb 18 14:00:30 2024 GMT
            Not After : May 18 13:00:30 2024 GMT
        Subject: CN=7a9af4a7-4edf-4a66-ac04-e087f033df4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e5:5e:cd:ce:da:8a:ad:52:b4:ed:b5:1e:1d:
                    fe:23:52:94:c8:59:55:c9:b8:ff:1b:78:b3:5c:a1:
                    d5:40:27:fb:0c:bc:b3:fc:de:ab:b5:45:ca:09:a7:
                    cb:97:5c:6d:64:83:6a:61:8d:63:bc:44:03:22:0d:
                    43:63:b1:09:f6:14:e6:58:24:20:d8:b0:5b:f1:a6:
                    af:07:d0:eb:cf:c7:f3:bb:c2:cd:a1:66:3d:8b:f5:
                    32:ec:84:1a:19:d9:25:b0:a3:7e:2c:f2:d4:5d:3a:
                    2d:17:13:e5:a9:01:6c:74:cf:17:66:0e:70:2b:09:
                    9e:3a:2e:2b:2f:2a:d0:ca:6b:8d:29:75:4a:a3:ab:
                    2d:e4:e2:d8:64:d0:62:0a:ad:a6:0d:86:45:f5:73:
                    e7:55:01:d2:1a:ae:b0:71:c7:fc:f3:e1:a4:4c:ca:
                    a1:55:6c:ee:56:49:ba:9c:c4:09:b5:15:8e:b7:b3:
                    02:35:84:a5:a0:61:44:5e:6d:b4:72:f7:c8:fb:a6:
                    b8:4e:d6:48:20:b8:c7:1e:10:4e:bf:71:15:ff:48:
                    5e:4d:ca:b3:63:17:4d:53:fa:86:8c:b5:d9:06:7d:
                    60:80:4c:4f:6d:98:c2:5b:e9:3e:87:b1:03:44:ed:
                    75:de:7f:f1:c5:cb:49:83:d5:a1:dd:6e:e4:26:58:
                    bb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:1D:4A:C8:2A:D6:AD:DC:AF:81:8D:EC:07:33:D9:A5:11:0C:AF:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/ebf9b2cc-5b56-304a-9601-ce7416e9e1d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl

            X509v3 Authority Key Identifier:
                keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4540::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:8a:53:85:b5:f5:70:5b:63:90:d1:23:1d:f3:18:90:7b:7a:
         a2:87:33:cb:b5:b8:66:84:73:30:3f:38:b5:53:64:82:a0:c5:
         da:1d:b9:51:3c:bd:f1:d9:d0:c7:0a:d8:56:39:ed:f9:61:07:
         9c:12:0f:51:7c:cc:c2:f8:8e:c5:48:48:b2:ed:b8:cb:7b:77:
         e9:20:f3:00:2a:9e:03:c6:97:24:66:4f:cf:6e:ff:b1:f9:22:
         df:b3:33:1d:a4:d6:d0:4c:2a:16:bc:61:1d:bd:2a:e7:14:ff:
         e9:54:c5:f8:b7:91:67:76:da:ed:f0:2d:89:9d:2f:53:2b:5b:
         c2:42:1c:cd:6a:7a:92:59:d7:f3:e5:d7:d4:2e:28:c0:6f:a8:
         46:2a:bc:9d:e7:f3:3c:1b:a6:99:2c:f1:0c:d9:7c:33:ad:58:
         36:e0:1c:8d:ba:7e:27:7c:54:d7:45:e0:53:72:12:2a:14:e1:
         ac:25:19:c5:00:2e:84:11:e1:5a:4a:20:7e:9a:78:a2:3b:22:
         45:8f:77:ed:08:c6:e6:3d:33:78:f6:80:88:cf:6f:4b:d7:fb:
         ca:3f:1a:4e:0b:97:17:90:f8:9a:4e:d9:0c:82:9b:1b:f1:9f:
         d6:a0:61:70:7d:98:6b:90:86:86:10:12:92:04:87:ae:ca:22:
         65:01:83:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:53:30 2024 by rpki-client on console-fra.rpki-client.org