Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5aa628fb-c695-354c-b9b2-d19dd3190da8.roa
File:                     5aa628fb-c695-354c-b9b2-d19dd3190da8.roa (raw, json)
Hash identifier:          8gKroE5s0qz/OqlzfTHUb9Qh44gN5ktHP0UmEcI283A=
Subject key identifier:   DE:76:45:A0:B9:8A:47:78:AF:B2:18:17:09:91:C2:7B:EB:E7:B6:0A
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2DE93A55386027E897080
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5aa628fb-c695-354c-b9b2-d19dd3190da8.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     19115
IP address blocks:        2603:90fb::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:de:93:a5:53:86:02:7e:89:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=17161614-ba32-4862-9374-ef237876a4eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:82:a7:19:f6:c9:76:68:a3:ac:f9:7a:5e:49:
                    1f:dc:b9:95:dd:cb:b6:ca:90:eb:9a:90:3a:ee:c3:
                    ac:5d:ed:49:a2:92:cf:61:62:28:44:1b:ed:7f:c1:
                    af:71:38:dc:c3:df:bb:4a:98:52:04:d9:81:05:93:
                    49:38:ba:65:97:92:6f:29:ea:1f:52:ec:3c:84:fc:
                    a6:b3:af:05:6b:7c:ac:cf:eb:f3:e3:d7:07:ad:21:
                    06:94:72:a6:2d:ea:00:66:f5:94:f2:fc:ef:6f:74:
                    b9:ef:55:bb:26:2b:07:ee:19:a8:42:4a:3d:b0:25:
                    b8:bf:fe:66:ab:00:60:8b:d7:9d:5f:2f:ff:08:98:
                    6c:fe:0f:6c:94:90:f4:2b:d4:07:65:ce:2b:63:98:
                    3d:eb:d8:5b:1a:26:e6:d6:4b:b6:34:d4:59:6f:97:
                    e3:86:f8:76:3e:9a:e1:78:7a:b5:d8:10:ca:02:06:
                    fb:53:c1:d3:c9:4b:5d:ac:24:17:72:d1:e8:b9:4b:
                    2c:11:1f:e5:f7:0c:22:4e:f4:1e:09:b1:f2:71:07:
                    73:7f:39:b8:28:2c:15:7a:2f:f5:28:fd:24:0a:25:
                    6c:b1:05:e5:8a:3c:a5:ad:1f:b4:83:cb:cb:bb:51:
                    02:ed:0a:5c:bd:8d:7a:55:a2:c4:05:85:bd:0c:49:
                    97:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:76:45:A0:B9:8A:47:78:AF:B2:18:17:09:91:C2:7B:EB:E7:B6:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5aa628fb-c695-354c-b9b2-d19dd3190da8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90fb::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:d5:de:64:c7:6e:60:e6:0c:3c:29:14:00:45:ee:84:c4:f5:
         dc:5e:1f:d1:57:a5:34:ff:f4:89:53:e1:61:cb:26:c5:fe:b3:
         8b:7b:40:93:f7:62:03:fb:8d:23:ae:4f:3e:6b:99:fa:95:d0:
         99:e0:3c:c6:69:5c:0b:b8:9c:db:e0:6a:5a:2b:f8:3e:81:c3:
         49:8b:a9:9e:11:bb:da:ae:c0:14:93:12:41:76:a5:a8:13:24:
         8d:0e:a9:3c:68:44:21:ba:48:2b:8d:d2:ab:93:63:26:66:13:
         82:d2:ae:d9:65:48:c2:54:f7:15:4f:63:d8:4d:b9:80:f4:6a:
         f0:c9:86:0d:e0:06:ee:d3:27:a7:5a:8e:93:30:7b:e2:76:a9:
         11:ed:48:f8:a1:17:61:d7:c8:18:f3:20:34:d2:e2:96:e9:17:
         35:83:82:c6:b6:67:f1:a0:1b:5f:d3:ff:f0:39:82:e0:c4:a5:
         71:aa:86:1f:a8:57:5a:c3:83:c9:d0:cf:41:af:a9:47:48:36:
         c7:05:4b:8c:6b:f1:10:9d:10:bc:79:19:3a:61:73:6a:3d:fc:
         49:42:fd:be:24:f4:26:cf:b3:1d:4a:90:3b:08:24:3b:d3:d5:
         24:25:42:6a:b4:0f:51:10:8d:cb:8d:7c:cb:49:00:23:2a:79:
         03:c8:73:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:34:11 2024 by rpki-client on console-fra.rpki-client.org