Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b963cfff-2b37-32ea-a36a-9d23d77965fd.roa
File:                     b963cfff-2b37-32ea-a36a-9d23d77965fd.roa (raw, json)
Hash identifier:          O82O27btsQOvEJWTy1Q6osDn9yYTEmld54bbthjVcnk=
Subject key identifier:   74:5B:80:DA:6B:D3:A4:2E:67:AB:FA:BF:76:B9:C3:30:3F:31:9C:FA
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F43285845462E78D9FD687F76B42AC8EA
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b963cfff-2b37-32ea-a36a-9d23d77965fd.roa
Signing time:             Wed 20 Mar 2024 21:06:18 +0000
ROA not before:           Wed 20 Mar 2024 21:06:18 +0000
ROA not after:            Tue 18 Jun 2024 21:06:18 +0000
asID:                     15169
IP address blocks:        2620:120:e000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2e:78:d9:fd:68:7f:76:b4:2a:c8:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Mar 20 21:06:18 2024 GMT
            Not After : Jun 18 21:06:18 2024 GMT
        Subject: CN=fb5a9dac-79c1-43c0-8693-5237c47c82e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a8:27:88:db:40:22:00:58:b8:31:37:34:c6:
                    a8:b1:5e:b0:8b:9f:60:1e:90:05:48:25:23:f5:0e:
                    5f:06:05:40:f6:24:70:00:ea:63:67:44:a8:a9:c1:
                    a2:22:08:87:be:bc:6b:bc:83:59:bd:29:3e:98:12:
                    df:72:9a:51:a8:91:63:8e:fa:08:23:35:a6:7b:c2:
                    17:0f:51:a3:80:3d:a3:50:71:8d:1a:cc:f1:f9:00:
                    ef:59:22:89:e5:78:88:5c:93:0d:88:99:d2:62:fe:
                    77:bc:66:08:53:7a:1c:a2:b2:c7:f7:d7:eb:b2:43:
                    57:fd:b6:a2:c9:cc:ac:b4:4d:23:9f:a4:31:be:ef:
                    63:15:f6:14:d5:d4:55:02:8d:9d:16:f1:8e:01:20:
                    cc:20:88:32:51:e9:52:f3:49:18:ca:b5:56:96:18:
                    e8:a6:4d:16:be:d2:a2:86:8d:f1:3c:0b:97:04:37:
                    c7:21:ef:87:75:22:6d:42:dd:71:83:dd:b9:2f:23:
                    6c:8d:31:5c:75:f0:ff:45:ab:8d:c7:2f:96:5a:5b:
                    a4:be:55:3c:b9:55:bb:82:a5:48:ed:97:fb:44:b0:
                    ce:c5:f5:09:56:1a:5a:f5:9b:e0:58:e4:b4:4e:da:
                    8b:43:af:09:de:70:a8:00:5a:38:77:31:de:c5:dc:
                    c5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5B:80:DA:6B:D3:A4:2E:67:AB:FA:BF:76:B9:C3:30:3F:31:9C:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b963cfff-2b37-32ea-a36a-9d23d77965fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:120:e000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:b3:c0:9c:46:6e:92:8c:bc:4f:ad:8f:68:b5:f5:15:d0:0c:
         41:91:58:5d:de:a1:f3:6c:8f:73:43:f4:6d:d6:ee:74:4e:8b:
         8b:dc:64:44:4f:c6:3e:ef:a0:2c:a9:65:06:cd:87:95:0e:9b:
         23:55:67:64:7b:e2:d2:8a:9d:d7:ff:8a:e8:5c:de:8f:6e:33:
         50:c7:fa:53:07:9d:6b:43:87:0d:b4:4a:6c:a2:53:64:b3:81:
         78:56:0b:bc:42:91:cd:60:21:fe:86:86:17:92:b3:be:8d:67:
         48:86:69:6e:3a:2d:e2:a4:b9:26:55:c6:2d:f2:f8:35:7a:fb:
         95:69:97:3c:0c:99:18:f9:70:3e:d6:9f:16:0b:b6:93:5e:bb:
         dc:2d:88:3c:cd:11:a9:99:f7:4d:67:19:63:64:66:44:a3:5b:
         0c:d7:f6:07:10:10:ad:d7:de:b1:ec:16:57:52:32:39:e6:c2:
         16:08:83:42:57:31:0a:64:36:81:29:a3:67:ac:44:5a:83:91:
         39:89:45:51:0a:c5:c9:21:aa:6b:55:da:93:3b:1a:43:9c:0f:
         7e:d8:98:f1:c6:3d:d4:cc:ba:d7:27:a7:b8:f2:38:b0:fc:52:
         a3:3a:37:f1:59:a8:7b:2f:04:17:d0:9b:f2:28:5e:fd:50:72:
         4f:32:b8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:40:52 2024 by rpki-client on console-fra.rpki-client.org