Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/aa767222-4e8d-39e9-9387-7c5ae1e14549.roa
File:                     aa767222-4e8d-39e9-9387-7c5ae1e14549.roa (raw, json)
Hash identifier:          FU59aQra2WZa56lz7Ujm8aE9rhgi5HCmRQgv1JXRSzw=
Subject key identifier:   DF:98:A0:93:7E:4F:AC:76:24:EA:13:76:95:9A:31:91:7D:97:A6:B6
Certificate issuer:       /CN=415b363a-8f59-46ca-baf4-e6cb4b8fdf20
Certificate serial:       010D0C9F43285844DCAA801D5F8437B6B6151320
Authority key identifier: 39:D9:D1:A1:3D:AC:AE:DF:23:16:FE:9B:20:DD:D0:8A:E1:19:11:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/aa767222-4e8d-39e9-9387-7c5ae1e14549.roa
Signing time:             Mon 12 Feb 2024 02:00:25 +0000
ROA not before:           Mon 12 Feb 2024 02:00:25 +0000
ROA not after:            Sun 12 May 2024 01:00:25 +0000
asID:                     397881
IP address blocks:        2605:5fce::/32 maxlen: 32
                          2605:5fc4::/32 maxlen: 32
                          2605:5fcb::/32 maxlen: 32
                          2605:5fcc::/32 maxlen: 32
                          2605:5fc1::/32 maxlen: 32
                          2605:5fc7::/32 maxlen: 32
                          2605:5fca::/32 maxlen: 32
                          2605:5fcd::/32 maxlen: 32
                          2605:5fc9::/32 maxlen: 32
                          2605:5fc5::/32 maxlen: 32
                          2605:5fc6::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:dc:aa:80:1d:5f:84:37:b6:b6:15:13:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415b363a-8f59-46ca-baf4-e6cb4b8fdf20
        Validity
            Not Before: Feb 12 02:00:25 2024 GMT
            Not After : May 12 01:00:25 2024 GMT
        Subject: CN=c976efc4-6788-41cf-b0f3-89f3f94dd99c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:02:b9:0b:ee:5b:22:c3:e5:84:80:ba:fc:24:
                    af:4a:9d:ff:f4:0c:b3:bd:68:1f:2c:f6:42:01:a8:
                    e4:11:d1:0e:fd:bc:a2:5b:6d:39:62:a3:a2:0b:a6:
                    50:cb:d9:fc:ad:2c:b8:81:0c:4a:ef:a1:2c:37:0f:
                    64:bb:d7:ac:37:53:6e:83:e8:74:e6:6d:17:c5:bc:
                    af:cc:98:8a:e0:1d:45:82:01:17:ef:3b:91:70:1d:
                    c8:71:88:96:1c:5a:fe:bd:29:a0:1b:f1:fe:83:92:
                    99:52:99:23:ed:7d:7c:be:b9:0f:9a:81:f5:f0:d6:
                    a4:d2:e2:59:0d:b2:80:a9:ad:a3:b7:84:09:a1:ae:
                    91:44:78:25:72:91:9e:74:4d:35:28:ad:0a:7a:ec:
                    af:47:3d:1f:81:33:54:82:60:0f:95:2b:23:bf:e6:
                    56:ef:1e:2d:69:4b:53:b7:44:a0:eb:79:fd:a1:6f:
                    59:ea:fa:8c:ad:5b:ba:f7:5d:d5:65:3b:7e:f7:86:
                    5c:06:0f:ae:6e:df:65:0d:07:1e:0f:3f:2b:95:f4:
                    04:cd:9b:e8:7f:a5:77:b7:a0:cd:b3:6d:dc:96:3a:
                    6a:b3:9d:da:13:df:3d:e4:ea:12:71:9a:79:22:c4:
                    9e:d3:dc:3c:01:04:a9:ff:f7:96:94:89:4c:f4:bc:
                    9b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:98:A0:93:7E:4F:AC:76:24:EA:13:76:95:9A:31:91:7D:97:A6:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/aa767222-4e8d-39e9-9387-7c5ae1e14549.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.crl

            X509v3 Authority Key Identifier:
                keyid:39:D9:D1:A1:3D:AC:AE:DF:23:16:FE:9B:20:DD:D0:8A:E1:19:11:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:5fc1::/32
                  2605:5fc4::/30
                  2605:5fc9::-2605:5fce:ffff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:7f:ea:60:b6:14:4a:fc:ed:1e:43:9c:33:81:a2:92:83:73:
         fb:a3:cb:ee:97:f3:55:8a:41:0d:8c:04:af:dd:c9:98:8b:51:
         0b:c1:99:d7:df:df:e2:26:3f:4f:4c:4d:0a:63:cb:57:7f:ea:
         51:8f:1d:64:44:4e:d9:b0:51:7c:88:6b:1f:7b:fa:82:61:07:
         3c:8d:ab:19:49:04:0c:88:dd:f2:79:ec:9f:26:55:fb:cc:93:
         fe:3b:fc:af:49:a9:19:49:e0:1a:80:51:34:bf:e3:7e:10:c3:
         d3:5e:6a:3b:39:03:a2:28:f3:ee:14:2b:e3:6e:a1:98:e0:37:
         d5:f0:e2:87:78:f8:52:99:27:e0:c7:57:c1:c3:c6:e1:89:10:
         94:a7:5e:05:ec:51:52:d2:c1:4f:0b:ad:10:dd:c2:b5:de:4a:
         89:c1:2c:1f:6f:e4:7b:7b:1c:4c:49:99:a9:8e:e1:12:94:d0:
         08:e3:08:05:f5:ca:34:1a:24:9f:75:4d:b4:25:1c:cc:69:54:
         d7:bf:d4:4d:cd:77:7f:07:92:50:db:18:6b:b6:27:de:a3:b9:
         47:eb:cf:1a:92:7e:e8:80:45:29:38:da:36:4f:9c:af:79:b6:
         b0:50:dd:b6:3e:7d:bf:22:0d:57:e2:a7:61:01:85:0c:2f:71:
         38:77:a0:5b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 24 14:36:22 2024 by rpki-client on console-fra.rpki-client.org