Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/07e09fd9-cec1-3c30-8d10-49d050770f2c.roa
File:                     07e09fd9-cec1-3c30-8d10-49d050770f2c.roa (raw, json)
Hash identifier:          izQ7ketDaogkSYdoFFh2GeFUXLHQsGKfnNvatAkWzus=
Subject key identifier:   C6:2C:19:4F:9D:B7:DA:E4:A8:AB:BB:9F:D4:D6:41:15:EC:AE:60:F0
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2E1A634D9B623F00ABD80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/07e09fd9-cec1-3c30-8d10-49d050770f2c.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        2603:90fb:10::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:e1:a6:34:d9:b6:23:f0:0a:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=029b8592-469f-4f60-9b9d-df0bca9b34ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:98:f3:3a:39:7d:87:e4:fd:c8:6c:91:07:ab:
                    25:a1:a0:1d:de:c6:80:7a:2a:6e:85:9b:32:37:57:
                    26:fa:87:0d:af:c7:84:ac:cd:03:26:4b:5a:1d:ab:
                    e6:6b:19:59:39:7c:62:c1:51:3f:d8:03:7c:8f:23:
                    b2:26:cf:da:00:27:b6:57:41:73:aa:9e:46:a1:2a:
                    ad:18:fe:2a:c4:04:9f:57:d0:42:5f:26:43:16:2c:
                    0c:9c:9b:23:c3:6c:93:0b:0a:75:2b:1b:93:3b:c8:
                    3b:7f:ec:23:12:3b:31:6b:cf:a2:4d:8c:55:73:d7:
                    8b:e8:c7:80:13:7d:e2:a6:a0:a7:31:95:7f:52:38:
                    d8:1a:26:c4:57:70:56:09:22:0a:66:44:e2:5b:24:
                    b0:64:22:5c:48:5a:67:1b:5f:18:15:c7:c5:76:32:
                    16:80:00:46:7c:96:58:50:b2:de:1c:24:e9:a3:c0:
                    9d:0b:39:85:30:52:df:13:6b:f3:64:07:4a:bf:47:
                    ba:65:91:31:2f:51:37:d8:13:47:9a:c6:68:2e:e9:
                    b4:15:c4:be:f6:ab:18:69:14:d1:9a:25:3b:30:fd:
                    3b:d1:2f:6c:6b:a2:3c:c5:60:f1:c1:6c:09:0f:91:
                    11:da:b5:36:18:c0:a5:fe:23:0f:d0:5a:67:43:ea:
                    d0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2C:19:4F:9D:B7:DA:E4:A8:AB:BB:9F:D4:D6:41:15:EC:AE:60:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/07e09fd9-cec1-3c30-8d10-49d050770f2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90fb:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:d7:a3:9d:ec:03:a0:9f:f1:19:bc:62:65:97:ee:97:0d:14:
         07:92:f6:ec:23:bd:7a:78:18:b2:82:12:f6:dd:b2:90:25:4d:
         95:46:f3:aa:68:bd:1b:7e:0a:5e:98:f8:c3:b6:28:61:27:5c:
         7a:fc:0b:1e:1c:7e:88:c4:64:de:57:a7:b6:e3:97:2f:63:29:
         46:18:f2:03:ec:c6:29:83:51:b4:5c:55:8a:d6:46:71:63:53:
         5e:1c:ae:3e:de:3a:a5:ff:da:1d:b0:37:ae:c8:37:3e:37:00:
         6a:dc:1d:05:72:61:34:ca:e4:88:5e:10:7e:39:09:8b:a7:bb:
         dc:24:9c:21:56:7e:46:01:be:65:48:91:66:17:dc:ef:9c:ff:
         92:b6:d1:2b:17:1a:b8:05:6c:35:50:34:df:df:4e:85:5a:2e:
         10:78:18:1a:d4:33:5e:5a:cc:72:b1:c0:f0:58:c9:54:33:c4:
         a7:4a:98:55:30:c4:00:49:a8:37:3c:77:c0:eb:7d:da:d1:f1:
         c4:2f:f3:b9:90:2e:eb:74:e7:33:a2:31:ad:3a:f3:fb:ce:2a:
         9c:83:2f:97:c3:24:34:10:b4:82:40:15:a7:84:63:65:88:55:
         c3:6c:2e:1f:b1:69:2e:9a:fe:2f:20:1d:dc:17:51:1b:b7:40:
         d7:c9:ee:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 17:25:05 2024 by rpki-client on console-fra.rpki-client.org