Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c1cdef4e-bae3-359d-ae3f-0e9d60e3fdce.roa
File:                     c1cdef4e-bae3-359d-ae3f-0e9d60e3fdce.roa (raw, json)
Hash identifier:          050p8A0OVU2fb1G6Bpgu0aE7sGYYXKppZgScbbRWFwg=
Subject key identifier:   06:C0:B9:AE:BD:4C:71:DD:44:A6:32:06:CD:48:24:22:BE:D8:A9:75
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F432858456F1DBFCF1234F67A888004C0
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c1cdef4e-bae3-359d-ae3f-0e9d60e3fdce.roa
Signing time:             Thu 04 Apr 2024 13:00:36 +0000
ROA not before:           Thu 04 Apr 2024 13:00:36 +0000
ROA not after:            Wed 03 Jul 2024 13:00:36 +0000
asID:                     7065
IP address blocks:        2001:5a8::/32 maxlen: 64
                          2602:240::/28 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:1d:bf:cf:12:34:f6:7a:88:80:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: Apr  4 13:00:36 2024 GMT
            Not After : Jul  3 13:00:36 2024 GMT
        Subject: CN=d9f9c3c5-4ab2-456a-8cee-a856e539bdd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4c:33:85:9a:d1:be:03:d8:e1:a8:b6:2a:0c:
                    b8:d6:74:f0:1e:62:3b:d0:c6:91:1c:9a:83:27:46:
                    bc:de:58:19:a1:a2:44:83:2f:ca:6f:c5:84:17:c3:
                    bf:cc:de:27:4e:96:96:d0:84:47:ef:97:ff:0d:7e:
                    83:93:5b:77:18:ec:c4:df:c6:da:1b:23:78:ad:c2:
                    f0:87:30:96:13:cd:2c:39:a3:fc:51:cb:aa:96:5b:
                    2f:9a:9f:4b:37:85:cb:20:6f:dd:6f:2b:b1:44:5b:
                    31:6f:df:01:ea:c8:fd:1c:1b:55:db:79:23:bf:c1:
                    8c:43:87:c6:54:00:76:c0:3e:6d:23:77:d1:2e:c6:
                    ca:71:06:1e:fc:0e:e4:ed:9e:90:c0:38:e4:1c:ae:
                    c2:64:e5:c3:a7:7e:1c:9d:49:7d:5b:a7:6c:bc:f1:
                    c2:ad:18:99:3b:29:7e:ff:d3:43:2b:dd:0a:dd:dc:
                    5c:88:7f:82:4b:ab:61:d1:a1:ec:b5:d2:3a:33:69:
                    c6:0d:b3:21:d1:34:96:3f:b4:31:3b:66:f5:d7:bb:
                    f6:22:89:f0:f8:0c:1a:60:b7:d8:8b:1b:bf:80:db:
                    26:4b:dd:3c:bf:1a:49:ee:02:b8:9f:38:4b:cf:af:
                    94:db:d6:3f:5d:ab:97:06:2b:75:20:15:3e:5c:b2:
                    f2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C0:B9:AE:BD:4C:71:DD:44:A6:32:06:CD:48:24:22:BE:D8:A9:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c1cdef4e-bae3-359d-ae3f-0e9d60e3fdce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5a8::/32
                  2602:240::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:21:c2:ca:db:40:6d:a0:0b:74:73:ea:68:86:57:be:0c:61:
         dc:a9:8a:29:08:3d:4d:1b:20:79:93:00:59:7f:22:c9:f9:1f:
         9f:be:14:da:2a:a2:54:d8:40:35:26:9b:c8:3f:5d:9f:32:ec:
         5e:c5:bd:b5:31:97:2c:cc:da:e4:94:a4:07:ea:ab:d4:96:62:
         83:e6:72:01:3c:fa:81:4c:15:7b:5f:f4:cc:1b:bc:eb:3f:98:
         3f:be:84:53:0a:f2:dd:6c:8b:54:a0:0b:ba:63:b4:c6:6c:68:
         71:e1:4a:cb:9e:c9:12:c6:4e:12:33:6f:2c:95:3b:c9:37:96:
         3e:ad:2e:b2:ec:1a:ac:df:b9:be:ed:2e:f5:9c:a2:a2:83:9e:
         c9:cd:e9:36:1a:91:a3:9d:2e:80:47:ba:25:18:94:86:00:1d:
         01:fc:79:0d:f7:62:c7:7a:3a:44:ee:d6:d9:2b:cd:dd:e7:3f:
         8b:ec:88:6e:6e:e1:e8:46:f9:a9:c8:1c:83:3f:b0:2a:d7:ee:
         a3:27:38:d4:a3:63:62:de:f6:ed:d0:18:fb:25:d9:62:26:a1:
         c2:fc:31:db:71:e5:b3:50:52:c8:c7:7e:f9:2f:9f:f5:05:5c:
         91:e2:2f:94:38:7d:b0:e6:2a:24:d7:57:a2:91:f6:09:92:01:
         c3:78:d5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 07:41:43 2024 by rpki-client on console-ams.rpki-client.org