Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/4c2c360c-478a-3425-9f56-f62728506879.roa
File:                     4c2c360c-478a-3425-9f56-f62728506879.roa (raw, json)
Hash identifier:          qk/8balF94P6v4GESzw0l0TTuEGHi8s/kkZIXlVZq4Y=
Subject key identifier:   DF:53:64:C4:B1:72:7E:6E:40:71:0E:AA:5A:A0:2D:26:70:CB:C0:85
Certificate issuer:       /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Certificate serial:       010D0C9F43285845ECBE84C3FAE553AAADCCD600
Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/4c2c360c-478a-3425-9f56-f62728506879.roa
Signing time:             Sun 19 May 2024 13:00:33 +0000
ROA not before:           Sun 19 May 2024 13:00:33 +0000
ROA not after:            Sat 17 Aug 2024 13:00:33 +0000
asID:                     56555
IP address blocks:        2607:64c0::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ec:be:84:c3:fa:e5:53:aa:ad:cc:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
        Validity
            Not Before: May 19 13:00:33 2024 GMT
            Not After : Aug 17 13:00:33 2024 GMT
        Subject: CN=2c59544c-b096-48da-a9a0-9ab073f818bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ae:93:3d:b8:49:c0:c4:4d:9a:42:72:69:98:
                    2a:ff:c7:d5:4d:8f:66:64:53:3c:f5:1c:74:82:40:
                    bc:8c:dc:c4:97:4c:fc:7e:ec:83:38:fb:f2:73:f1:
                    a4:e4:66:d7:e2:f5:d6:7f:34:06:2a:48:8d:6a:e7:
                    f6:7d:46:50:e4:a9:32:bf:e7:09:83:e7:28:82:c1:
                    02:50:cf:49:28:53:e9:c7:da:69:92:ef:35:af:be:
                    4c:2d:01:48:c4:52:f0:c5:c1:ae:cb:fb:7a:eb:80:
                    ff:69:2e:7f:17:bc:ec:6c:15:75:17:fc:e1:24:1c:
                    9a:f1:2e:37:5c:a2:a9:0c:ba:97:3b:e4:74:5a:7e:
                    53:b1:a3:bc:01:44:af:8e:6b:ca:e1:22:b6:49:ae:
                    fc:64:fd:36:7c:37:1f:2c:a7:93:6c:a0:9e:f0:ca:
                    0c:db:83:3b:7f:36:e4:c2:a0:64:55:8e:e9:9c:be:
                    79:6c:db:9f:5d:88:f7:90:eb:c5:c9:22:77:19:5b:
                    2d:2b:32:06:f6:41:8f:95:7e:3d:6b:71:16:b6:94:
                    0d:6e:1e:99:6b:d5:67:d4:ef:de:fd:16:1e:e6:d3:
                    a1:f0:74:ec:e8:9f:78:f2:e5:9c:4f:f8:14:74:c5:
                    d1:fb:15:4c:9b:4f:cd:86:c5:c7:b9:e6:3d:af:21:
                    89:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:53:64:C4:B1:72:7E:6E:40:71:0E:AA:5A:A0:2D:26:70:CB:C0:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/4c2c360c-478a-3425-9f56-f62728506879.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl

            X509v3 Authority Key Identifier:
                keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:64c0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:ca:ea:62:ef:c9:94:9f:25:fe:c6:f3:4b:50:6b:62:12:80:
         21:fd:f2:22:b6:e5:c7:43:8f:5a:ae:2b:f3:d7:29:b5:a3:fa:
         54:9e:78:ed:7a:2d:3f:b1:ec:fd:0f:39:d4:1a:1e:dc:77:de:
         38:d1:c9:81:62:9b:a9:7a:90:4c:5f:7e:73:dc:6c:63:48:f2:
         cd:fe:dd:6e:f0:7a:a9:8d:21:9b:e4:6c:4c:e2:4e:fd:72:ca:
         cf:e6:bc:8b:15:60:21:10:7f:2b:a8:8c:ae:c5:23:3a:d5:37:
         03:c2:cc:8b:10:9b:76:29:2c:15:5d:8d:e9:ce:94:59:34:26:
         a0:51:ec:9f:56:72:9c:37:4d:72:d0:8c:32:d3:2e:87:ec:72:
         21:46:56:ad:44:91:dc:e9:4c:40:d7:4c:17:5f:32:3e:3e:0c:
         48:3e:ab:a1:1c:7a:77:2c:c9:5f:23:8c:c4:b0:23:4d:f9:96:
         17:f0:c1:68:c0:db:17:13:d8:36:0b:1f:71:93:99:7a:05:87:
         a3:5f:ab:06:a6:35:1b:c2:d4:fb:04:d9:7b:9e:ad:28:f2:c4:
         3c:ac:d5:cc:7b:e9:d3:db:e6:fa:25:bb:ef:98:f2:a2:0c:0f:
         3c:42:cf:ab:11:61:06:49:ab:76:54:c9:b0:5c:e4:c4:3a:36:
         14:94:b4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 05:01:34 2024 by rpki-client on console-fra.rpki-client.org