Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/323e4eb5-73e4-3f1d-b613-2b7750199565.roa
File:                     323e4eb5-73e4-3f1d-b613-2b7750199565.roa (raw, json)
Hash identifier:          mGo9dJyN+DryM3pIM6qtmnGkbYa/uRqw+C+MNuIRG2U=
Subject key identifier:   FA:C4:01:18:BA:F1:39:91:55:DD:1B:32:C2:D2:3B:9B:C4:24:A6:63
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F432858457A488A323C4F02B7D5A9C9B0
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/323e4eb5-73e4-3f1d-b613-2b7750199565.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     30133
IP address blocks:        2001:500:67::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:8a:32:3c:4f:02:b7:d5:a9:c9:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=64fdc537-8c60-4ccd-97a8-cfb884cd18e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:33:de:ce:0d:82:e5:0a:14:5d:52:76:44:cf:
                    c0:67:00:56:54:53:9c:51:4a:6c:26:f8:71:40:ac:
                    96:d3:6f:3d:75:10:42:c2:ec:d0:2b:33:36:96:2a:
                    34:aa:f5:7b:73:7b:c3:14:e7:6a:51:69:1a:80:8c:
                    85:ae:08:d2:7c:ab:6a:f7:44:38:7e:e5:f3:aa:bb:
                    d4:f8:4c:99:73:84:e0:3d:1d:f6:a5:1a:10:1f:dd:
                    ff:5e:8a:69:e5:57:b1:9c:0b:d9:e8:28:90:0d:07:
                    39:b2:38:34:22:54:d0:c0:2c:13:e3:6a:c9:7b:e7:
                    2d:5a:da:b6:e1:5f:94:bb:f6:03:08:1b:10:35:7d:
                    65:9d:ee:13:4c:11:7e:08:f2:53:af:c6:df:e9:e4:
                    71:41:9a:e0:32:b3:19:7c:cb:4b:b1:fc:56:89:e7:
                    0b:4d:ba:61:fe:30:ae:90:1c:41:d9:9f:63:e4:e0:
                    73:53:84:b7:a1:e5:eb:a5:9c:35:8d:9c:12:b4:d0:
                    2c:e6:f5:8a:95:12:11:89:21:fd:7b:46:de:4f:cc:
                    b8:e9:23:9a:4b:f9:ce:64:25:41:b3:66:60:48:00:
                    7a:71:08:16:62:ac:ce:b3:ce:51:7c:d7:c4:91:51:
                    bb:ec:fd:4d:cd:68:a1:92:a3:68:53:ed:3a:43:66:
                    a2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C4:01:18:BA:F1:39:91:55:DD:1B:32:C2:D2:3B:9B:C4:24:A6:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/323e4eb5-73e4-3f1d-b613-2b7750199565.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:67::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:80:de:04:28:8c:2b:15:1d:ca:02:c7:95:fc:f1:cc:9d:0f:
         db:25:dd:ee:2e:3e:d2:7c:2b:88:e7:10:7e:6f:ec:03:bc:49:
         71:93:10:cd:08:9c:ba:00:06:e3:56:62:e8:33:34:22:62:3a:
         b0:11:5e:64:74:85:e4:cf:28:9d:5b:b2:99:33:64:94:a9:a5:
         cb:ea:e9:3d:ab:24:12:42:1e:57:07:31:ac:e1:09:2a:f5:d1:
         e7:45:52:91:96:1e:32:7c:a6:c8:68:e6:41:f4:91:a6:3d:7f:
         c4:a4:38:ec:eb:7f:61:31:ed:80:c0:52:69:8d:bf:05:be:b5:
         21:01:08:cd:8d:82:0a:81:14:2e:0f:43:13:c5:06:29:e6:99:
         c7:01:34:67:43:46:d5:6e:d8:d1:1e:b8:0a:33:dc:2b:e9:ca:
         37:e6:67:d5:fb:cb:04:18:61:74:02:5e:c3:2a:f1:c6:1a:6b:
         ee:0a:df:81:fb:6d:01:42:71:ff:e1:e4:20:7e:80:d4:b3:bf:
         ef:6b:f5:d3:4e:21:ad:0b:78:a1:8c:86:24:f4:4a:9a:89:d8:
         a5:bc:ae:a6:31:3a:bb:d0:f3:4d:d9:3a:b1:7a:b5:7c:bd:63:
         e1:58:dc:82:c5:0a:69:78:b9:e1:80:9c:aa:c3:0a:3f:8a:80:
         f8:3e:17:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 20:15:29 2024 by rpki-client on console-fra.rpki-client.org