Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/09c7597f-fdd5-3742-aa9a-6a360b4cab15.roa
File:                     09c7597f-fdd5-3742-aa9a-6a360b4cab15.roa (raw, json)
Hash identifier:          GLiwiZcBLgYeqlyUDB01ZsCEBg85jS4Yt2oMeWYYriA=
Subject key identifier:   39:66:25:71:9D:2B:36:0C:03:7A:ED:B7:3B:01:89:7F:E1:52:6A:6D
Certificate issuer:       /CN=223ca9d9-14f2-4824-b1ba-16bc030ccf15
Certificate serial:       010D0C9F4328584531B296CB3863FAF4320BE600
Authority key identifier: 6A:78:B9:AC:DB:19:7E:87:5D:2E:D8:52:E1:25:FE:21:99:B1:D3:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/09c7597f-fdd5-3742-aa9a-6a360b4cab15.roa
Signing time:             Wed 13 Mar 2024 13:00:30 +0000
ROA not before:           Wed 13 Mar 2024 13:00:30 +0000
ROA not after:            Tue 11 Jun 2024 13:00:30 +0000
asID:                     399078
IP address blocks:        2606:42c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/223ca9d9-14f2-4824-b1ba-16bc030ccf15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/223ca9d9-14f2-4824-b1ba-16bc030ccf15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:31:b2:96:cb:38:63:fa:f4:32:0b:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=223ca9d9-14f2-4824-b1ba-16bc030ccf15
        Validity
            Not Before: Mar 13 13:00:30 2024 GMT
            Not After : Jun 11 13:00:30 2024 GMT
        Subject: CN=3c261a72-68c5-46f8-9d42-9602890f79f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:80:c8:66:5d:0c:1a:53:a0:5e:a3:7c:b8:b5:
                    0c:fb:ad:1d:a0:14:73:e2:e9:30:36:78:93:26:ef:
                    78:75:74:89:e5:05:fa:1c:12:37:ae:ba:b8:c3:83:
                    d8:fe:dc:6d:63:b5:84:07:1e:90:cd:c8:cd:af:ea:
                    2b:5c:69:ad:e2:8d:84:1d:5d:61:ae:da:f8:f5:3e:
                    6c:8a:1d:f6:10:99:e3:db:8b:61:85:b1:aa:ae:e6:
                    f6:e7:bd:18:97:3e:09:14:75:ec:a3:a5:33:51:2c:
                    10:9c:35:1d:25:f5:61:98:9e:b0:50:f6:77:47:8e:
                    b4:49:91:7a:b6:c3:3e:62:61:69:38:eb:4e:73:68:
                    67:91:6b:50:12:c0:47:f5:db:1a:77:38:f9:80:d4:
                    f4:76:16:3a:80:59:95:33:46:d5:56:be:27:86:55:
                    51:af:b6:7a:17:04:92:fb:7d:ae:f2:fd:04:07:7f:
                    2c:32:82:06:3a:d9:e9:cf:a0:85:f8:a6:af:fa:9a:
                    59:67:6a:41:15:3c:ea:10:51:77:32:64:97:4e:8e:
                    13:9c:1f:84:cb:34:21:02:72:53:df:83:02:ee:a5:
                    6f:e1:12:5c:8d:11:07:78:f7:35:62:5c:5b:23:5e:
                    2d:b7:51:87:fc:5b:2e:61:8f:5d:55:59:23:f6:69:
                    99:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:66:25:71:9D:2B:36:0C:03:7A:ED:B7:3B:01:89:7F:E1:52:6A:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/09c7597f-fdd5-3742-aa9a-6a360b4cab15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/223ca9d9-14f2-4824-b1ba-16bc030ccf15.crl

            X509v3 Authority Key Identifier:
                keyid:6A:78:B9:AC:DB:19:7E:87:5D:2E:D8:52:E1:25:FE:21:99:B1:D3:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:42c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:ae:ad:4b:0e:d4:8b:81:4c:5e:e3:8d:9d:ff:9d:06:ce:9f:
         41:6a:3a:56:72:38:04:4f:1c:43:2d:f5:ff:58:f3:ce:1c:49:
         72:f4:11:33:81:e0:e7:68:d7:bf:73:2c:87:8a:d9:6d:7f:df:
         27:0b:0e:dd:cb:99:d5:e1:46:ed:62:bd:bd:97:8e:cb:1f:8e:
         52:ca:2d:bd:ba:1b:20:41:96:19:f9:84:af:ae:f0:32:c0:7d:
         8f:05:68:21:ea:c5:41:9b:f7:63:c4:65:8f:20:4e:6d:85:0f:
         f1:48:2a:cd:17:e4:39:30:2d:fe:bd:0f:35:de:13:0b:8d:cf:
         f3:cf:db:2c:e6:1d:9b:02:3f:10:03:50:b8:a9:85:42:6d:cc:
         70:9a:42:c1:bb:d8:f2:aa:00:05:cb:39:3a:2d:6e:11:77:4a:
         75:36:4e:1f:5d:32:b6:8b:4e:4a:3b:c8:08:30:65:6b:7d:15:
         de:0f:d9:3f:28:ee:19:32:d0:68:86:c0:38:a2:c6:fb:6d:30:
         79:c0:b2:52:98:d8:6b:ca:7b:59:3c:b7:03:7d:e8:3a:91:45:
         b8:3a:f3:c5:5c:dc:ca:5d:f2:8b:8e:8b:ee:23:95:ca:31:1b:
         0a:48:2f:11:f1:0b:5c:c0:8d:b9:2a:63:ca:b1:c0:14:5c:56:
         c4:52:1a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:36:37 2024 by rpki-client on console-fra.rpki-client.org