Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/68b0539d-9001-3fdf-a61a-75dbfde2df07.roa
File:                     68b0539d-9001-3fdf-a61a-75dbfde2df07.roa (raw, json)
Hash identifier:          uROMqLHfSxUNpFrB99Sbcx0ERNkMYCr1Q7JG7azpHRE=
Subject key identifier:   E3:E2:3E:D7:D5:CB:F2:3A:1F:77:C7:E6:CB:23:33:BE:F5:42:30:F8
Certificate issuer:       /CN=4e653f37-4b22-40a3-a8bd-e70f208c0efb
Certificate serial:       010D0C9F43285845777DC300278D4723613E58B0
Authority key identifier: 22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/68b0539d-9001-3fdf-a61a-75dbfde2df07.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     19905
IP address blocks:        2604:fb80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:c3:00:27:8d:47:23:61:3e:58:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e653f37-4b22-40a3-a8bd-e70f208c0efb
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=a1e1fdd7-793f-4bf0-a683-7ac1fd9b8fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:7d:bb:e0:bc:ba:ce:42:e2:91:20:69:22:46:
                    e2:17:4b:17:48:77:6b:af:7d:6f:91:c2:d9:77:00:
                    97:23:1d:68:02:1c:67:17:20:29:df:c8:85:8c:9e:
                    80:ea:8c:e7:b5:84:bc:e9:64:14:22:b6:d7:a6:1b:
                    44:bb:d8:96:8e:b3:a5:6e:7e:30:62:ee:2a:56:67:
                    13:04:91:f9:31:6d:aa:96:8f:82:eb:f5:7c:24:c8:
                    fb:77:a3:8c:64:57:6e:97:55:df:8a:b6:c7:86:7b:
                    8e:1b:a0:3e:c0:66:88:f4:c1:b7:16:75:80:33:53:
                    c8:84:98:9b:fe:2e:7a:bd:5c:e2:c7:10:22:b2:01:
                    ee:a9:b1:d5:60:dd:7a:9c:43:17:06:f5:d2:c0:82:
                    f7:1e:31:08:89:dd:d9:fa:a7:8b:1e:1e:b9:f6:37:
                    6e:cd:5d:60:10:63:80:c7:df:17:dc:ca:28:92:a9:
                    2a:ab:69:65:a1:23:bd:09:d8:57:ab:a6:e3:b4:e0:
                    d0:f6:e7:c2:b5:aa:be:6e:c0:90:37:0c:53:c2:57:
                    fd:d9:36:4d:e7:4b:90:b3:38:be:73:ac:a1:7c:c9:
                    f5:36:05:15:54:51:80:18:5c:ea:a8:e7:1a:e5:72:
                    2d:bc:da:d7:10:31:f8:7c:23:1d:5d:64:f5:54:06:
                    d3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E2:3E:D7:D5:CB:F2:3A:1F:77:C7:E6:CB:23:33:BE:F5:42:30:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/68b0539d-9001-3fdf-a61a-75dbfde2df07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.crl

            X509v3 Authority Key Identifier:
                keyid:22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:fb80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:a0:c1:c5:b9:c0:57:bb:52:3e:a2:3d:5e:30:b0:7c:cd:d0:
         54:83:32:2e:90:53:3f:84:21:ee:ed:11:25:1a:1a:ad:d2:9e:
         de:91:1c:89:a0:cc:1b:91:90:7c:a1:46:24:74:21:bb:79:52:
         b9:ac:11:b1:a6:59:a1:76:63:d7:ed:01:3b:ed:59:af:fe:b1:
         cb:f2:79:e7:5a:fe:27:58:e1:b2:ca:38:92:d7:1c:c8:69:1a:
         1c:2d:3e:ba:11:b3:34:b1:30:9f:73:bb:f9:43:9e:2b:46:4b:
         79:7e:2a:13:1c:2d:7e:13:88:a3:cc:50:ce:2e:27:45:b8:c0:
         2c:e0:55:ca:65:24:2d:9d:5c:38:a7:c1:36:a4:f2:22:68:54:
         f3:0d:4f:ce:3a:07:f5:7b:ee:a3:76:cf:39:4a:c4:25:a7:e5:
         34:2a:cc:9f:b6:52:42:08:39:0e:0d:15:e5:25:44:20:0f:d6:
         04:2a:15:50:79:c5:c6:0b:6f:b7:38:f7:fb:07:65:bd:41:df:
         f4:52:6e:4c:f3:7d:8b:e5:ca:14:89:73:45:31:18:26:bd:44:
         2d:df:a3:36:f9:3a:2e:aa:5e:e1:66:49:29:31:8b:2c:40:eb:
         d2:38:8d:70:f0:38:04:a3:ff:b0:37:eb:cc:5c:3f:1f:c2:f5:
         b4:72:97:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:53:37 2024 by rpki-client on console-fra.rpki-client.org