Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/bbf00ddb-ddfb-3967-8d3d-eb6d5e03c3f3.roa
File:                     bbf00ddb-ddfb-3967-8d3d-eb6d5e03c3f3.roa (raw, json)
Hash identifier:          oYn3t1P5q4hjzaELUhvgfsJ2bQR8NDz9SlvSo7KUaCc=
Subject key identifier:   28:03:75:CB:7F:D5:FA:F0:11:23:BE:97:91:31:9E:80:D0:52:C9:10
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285844FAB3EAB9140AC66D65CD6E20
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/bbf00ddb-ddfb-3967-8d3d-eb6d5e03c3f3.roa
Signing time:             Thu 22 Feb 2024 20:13:44 +0000
ROA not before:           Thu 22 Feb 2024 20:13:44 +0000
ROA not after:            Wed 22 May 2024 19:13:44 +0000
asID:                     2914
IP address blocks:        2606:b9c0:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fa:b3:ea:b9:14:0a:c6:6d:65:cd:6e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Feb 22 20:13:44 2024 GMT
            Not After : May 22 19:13:44 2024 GMT
        Subject: CN=56ef3eec-a996-470a-9adb-08b039d29b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:38:04:42:fa:b6:1d:48:08:68:92:4c:0f:a1:
                    ba:c4:ae:73:d4:db:ea:e9:4a:35:56:b1:33:fc:c2:
                    5d:f5:a2:b2:82:bb:26:d4:11:4f:3d:41:39:c1:4a:
                    4c:d7:f8:48:f6:62:36:0e:31:d7:18:d2:fd:37:47:
                    86:1f:0e:a5:34:ca:d9:14:e5:fe:7f:f4:cc:9e:aa:
                    b6:dc:aa:1e:f6:f6:3b:85:db:21:59:d7:96:42:ff:
                    48:05:ec:20:40:e0:24:89:c4:6d:ee:fa:10:28:44:
                    89:26:66:1a:c8:cb:2f:86:c1:d9:b8:35:a7:70:d6:
                    85:f7:f6:a2:af:81:a4:c8:15:99:40:b1:58:79:c4:
                    46:8c:f7:99:19:11:e0:bb:79:24:db:77:8e:2d:d4:
                    5d:2c:eb:6e:74:c4:d7:af:1e:75:80:48:9e:53:26:
                    2a:98:e9:90:e0:28:53:ff:32:38:67:53:03:82:9b:
                    4c:aa:ca:31:8d:3d:70:1f:f8:d5:97:c9:4a:97:64:
                    bd:cc:70:6d:35:12:dd:a7:94:b6:46:2f:0e:00:21:
                    a0:32:51:28:c6:35:f0:de:bc:00:a8:10:1d:8b:57:
                    f1:62:95:ba:1b:15:a2:6f:09:a3:be:3b:38:42:47:
                    f2:87:89:23:74:5a:c6:98:18:53:8e:79:75:a4:2b:
                    80:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:03:75:CB:7F:D5:FA:F0:11:23:BE:97:91:31:9E:80:D0:52:C9:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/bbf00ddb-ddfb-3967-8d3d-eb6d5e03c3f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b9c0:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:5a:09:2e:2b:2f:df:25:c8:67:12:b8:e8:51:05:09:9a:99:
         45:1d:7a:1b:b6:e2:95:ab:49:c6:58:42:0f:4e:6a:19:30:37:
         f7:da:91:78:5d:ff:3b:0f:0a:f6:2d:58:84:03:69:5f:ab:4f:
         ed:21:e8:7b:de:28:dc:d9:5f:90:d9:6c:c4:5c:8e:11:ca:55:
         29:49:7c:a2:ab:9d:49:d0:64:7e:91:fe:6e:0f:88:04:8b:fd:
         20:51:5a:00:48:57:1e:9b:81:df:a9:aa:aa:5c:39:a5:72:38:
         d1:bc:df:95:28:2c:be:92:73:9c:2e:30:b1:e3:3b:ce:5c:d6:
         37:7f:13:79:63:93:45:e4:3d:6a:94:75:2e:d9:66:ed:2e:13:
         a1:34:55:5d:c1:d7:b4:08:3a:67:87:0a:62:4a:67:80:13:14:
         15:2a:aa:e4:e5:b0:48:65:e7:32:ea:96:c9:d9:7a:d0:67:4b:
         cb:af:e2:8c:4d:b6:4c:89:95:2e:71:a4:d5:1a:e1:08:f3:c1:
         6f:56:d4:6a:86:33:f9:02:a3:c8:0d:cd:26:17:8b:a2:f7:8d:
         05:78:12:57:66:71:71:71:63:d9:6e:19:76:96:a9:ce:5c:e7:
         68:ae:1f:b3:0d:de:ea:86:fb:8a:16:ad:81:03:55:d7:e2:69:
         12:6a:e6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 06:59:35 2024 by rpki-client on console-fra.rpki-client.org