Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/0031a041-b006-384e-9de5-299525d9bc7e.roa
File:                     0031a041-b006-384e-9de5-299525d9bc7e.roa (raw, json)
Hash identifier:          cZ/lZFTba+E36Jwh7aRKs8jKu8ypFxTzhCY3eZqMlz8=
Subject key identifier:   04:AB:10:CE:C3:8B:3F:4F:87:6A:64:07:46:E1:3A:1D:E3:0B:A4:C0
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285845D503CE318FF5C8850ADB1180
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/0031a041-b006-384e-9de5-299525d9bc7e.roa
Signing time:             Sat 11 May 2024 01:00:27 +0000
ROA not before:           Sat 11 May 2024 01:00:27 +0000
ROA not after:            Fri 09 Aug 2024 01:00:27 +0000
asID:                     1280
IP address blocks:        2001:4f8:ffff::/48 maxlen: 48
                          2001:4f8:4::/46 maxlen: 48
                          2001:4f8:fffe::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d5:03:ce:31:8f:f5:c8:85:0a:db:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: May 11 01:00:27 2024 GMT
            Not After : Aug  9 01:00:27 2024 GMT
        Subject: CN=e9aad3d5-c8d3-4a7e-adda-a8d5d9376409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ff:a5:9b:c8:0f:3d:c4:3b:a1:1a:59:e1:07:
                    30:18:ad:03:bc:d1:b7:91:5c:d7:67:d3:e1:67:5f:
                    f2:a4:2a:3b:0a:a5:38:1b:57:ff:1c:ef:dd:1a:85:
                    09:20:73:36:5e:07:7a:6c:d4:eb:84:59:3b:c6:09:
                    77:8e:5b:76:e9:5f:0e:69:66:43:26:1a:db:e9:d0:
                    03:6f:17:24:02:55:55:51:94:cc:f8:d9:f4:b6:4f:
                    a4:84:99:3c:da:79:23:73:a0:7a:06:54:9a:c9:09:
                    80:09:03:b1:f0:6a:91:cb:c6:5c:3a:a8:27:a3:9f:
                    45:a1:00:cc:87:b7:ed:c3:2f:cd:51:ef:6d:6f:21:
                    b8:aa:8d:39:61:0d:4e:b2:10:6d:2c:eb:08:ac:60:
                    78:40:1e:4b:ff:97:30:74:8a:13:7e:39:62:bd:c1:
                    43:cc:fe:9d:6e:b8:ba:db:6f:cf:82:cb:4f:8c:b1:
                    38:40:a2:76:1a:7e:94:ff:cd:8c:02:51:0f:b0:18:
                    55:db:ec:04:8e:5b:c6:0d:9b:7d:27:bb:93:94:c3:
                    c2:97:2e:49:f9:c5:c2:14:f3:06:f5:e0:55:68:9b:
                    f1:44:34:25:39:be:9a:e5:29:04:78:7f:72:f8:37:
                    de:45:f0:2f:0c:f1:5c:cb:3b:20:36:d9:7f:2f:00:
                    aa:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AB:10:CE:C3:8B:3F:4F:87:6A:64:07:46:E1:3A:1D:E3:0B:A4:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/0031a041-b006-384e-9de5-299525d9bc7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4f8:4::/46
                  2001:4f8:fffe::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:db:e0:94:07:9a:b5:b4:3a:76:93:34:a6:77:20:96:c0:7f:
         fe:68:ba:58:93:bf:e2:e4:c2:34:bc:44:cb:c0:60:8a:b2:41:
         23:08:d5:bf:16:08:88:9e:10:29:ad:b6:d9:f5:d0:b8:4a:18:
         2a:71:03:06:8a:9a:da:30:01:6a:57:87:c7:c0:31:ef:20:d6:
         ed:bb:9e:b1:28:a4:43:a9:9c:5c:dc:80:c2:b1:95:f5:f2:52:
         e8:35:ee:87:74:be:81:f5:40:35:4f:16:39:ab:7a:ea:cd:18:
         f8:b8:a9:cf:6f:4c:9b:05:a1:60:e4:39:d6:38:b4:fc:fe:6c:
         ef:ce:bb:2a:1f:4d:a9:e3:aa:2d:57:83:d6:06:1b:86:33:90:
         a4:80:e4:37:33:64:fc:9c:5b:17:95:24:62:bd:d2:f7:e5:65:
         83:fc:43:d0:01:f0:f6:6d:e7:73:b1:e6:6e:03:a3:22:69:0d:
         5f:3c:c3:73:37:d1:d2:c8:72:6f:b3:b8:08:bd:73:74:50:2e:
         c7:20:e6:9d:31:f1:5f:96:ed:3a:e5:d6:85:af:e2:f4:8e:bf:
         d2:f0:32:a2:6b:e1:68:36:e2:29:1c:fa:15:23:b3:72:67:11:
         ef:06:ca:8d:4d:9e:32:9b:a1:9c:9f:23:48:76:a8:f2:81:1f:
         54:8f:d4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:40:55 2024 by rpki-client on console-fra.rpki-client.org