Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/28d9a954-6de6-3037-9560-f9bac3e99c3d.roa
File:                     28d9a954-6de6-3037-9560-f9bac3e99c3d.roa (raw, json)
Hash identifier:          UWYD9zrRGHec81pReMyss4fDV5LrDogaddf9ZP+DXeQ=
Subject key identifier:   97:54:98:A0:DE:BE:09:18:19:AC:D0:D3:2F:36:88:63:DF:66:AB:60
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285845777DDB3A53BDFD17AC37B9E0
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/28d9a954-6de6-3037-9560-f9bac3e99c3d.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     30133
IP address blocks:        2001:500:65::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:db:3a:53:bd:fd:17:ac:37:b9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=4b6ae362-619d-47d7-86cb-1bd29f4d7e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:96:ec:0f:d1:4f:71:58:37:61:71:96:fe:3a:
                    7e:6a:48:98:d5:e8:9a:eb:d6:29:08:e7:d3:0b:f3:
                    94:ba:e7:ef:bd:85:52:af:13:27:d4:1a:d8:96:7e:
                    9d:60:52:8b:7f:8d:f6:69:5b:76:aa:d7:bd:90:6d:
                    b7:5d:0f:8f:18:30:88:72:d1:8a:2d:f5:a0:2e:fa:
                    92:32:cb:01:97:83:af:9a:d5:6d:68:b5:04:18:01:
                    40:fd:40:e6:9a:b5:e4:40:e9:be:e1:46:cc:b6:71:
                    9c:43:5b:d4:b6:b9:93:fe:e1:af:e8:23:b2:69:11:
                    42:26:ab:3a:c0:d2:fc:13:29:d2:58:38:01:ac:76:
                    83:33:1d:a3:6e:b7:36:9f:15:48:a7:de:c6:f4:4a:
                    f5:ae:fe:fb:4b:2f:67:fb:d8:93:2c:8d:19:b9:41:
                    7e:8d:45:7a:a4:b2:12:84:f7:db:d6:dc:20:be:96:
                    4f:30:68:68:f4:fc:44:2e:6c:de:d8:b0:43:7b:cd:
                    85:f1:c7:ce:8f:bb:15:53:d9:8d:6b:3d:81:42:f9:
                    9b:5b:9d:74:f4:f1:c3:04:0d:f3:15:cb:46:89:ef:
                    da:59:33:dd:72:b3:38:84:12:6a:ef:be:ba:89:4b:
                    f6:83:59:9c:72:a0:3c:8d:36:7d:41:e6:d5:b9:b8:
                    92:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:54:98:A0:DE:BE:09:18:19:AC:D0:D3:2F:36:88:63:DF:66:AB:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/28d9a954-6de6-3037-9560-f9bac3e99c3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:65::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:09:5f:68:01:c1:e8:4d:bb:34:a7:48:94:b6:f8:a6:e1:90:
         e3:81:a3:31:90:28:28:cd:42:f2:9c:f0:58:10:b0:5d:2f:9f:
         b5:57:0f:34:1a:9c:4b:30:2e:0e:2b:5c:6e:6b:3d:d2:2b:8c:
         87:19:bf:79:d0:83:ba:8e:e4:44:fe:92:31:c8:45:95:a9:c4:
         b7:74:d6:2b:32:ac:11:de:9d:4d:36:41:28:8b:35:81:6f:bf:
         52:cf:cd:5d:f7:cd:29:47:10:00:e3:09:52:99:56:66:51:91:
         2a:98:cd:e4:c3:cc:8b:74:c7:83:e9:5f:c9:95:bc:21:0b:7c:
         2f:62:ee:04:22:5c:d4:20:83:27:54:3a:72:21:e5:0d:fc:34:
         38:e4:a9:c6:bf:6b:c0:71:11:6a:ad:e8:b6:3c:b7:d8:95:9a:
         35:0a:e8:1a:39:5f:0d:3c:e2:e1:cd:8f:f7:be:a4:9b:f9:ae:
         5a:d4:e0:56:4d:1e:7f:d7:ef:f3:8b:f1:94:44:14:6d:29:43:
         78:ef:cd:0d:82:d9:49:5a:29:3b:95:2e:64:49:57:3e:f8:20:
         ac:1c:de:98:25:c8:0e:ae:65:73:50:5a:56:0f:fe:cd:fb:4c:
         29:73:4c:0c:69:4a:3d:f8:aa:6a:61:8e:cc:f4:5a:a0:71:41:
         2c:71:c3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 20:35:18 2024 by rpki-client on console-ams.rpki-client.org