Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/0b03c905-b522-32eb-a850-2403339cbdc5.roa
File:                     0b03c905-b522-32eb-a850-2403339cbdc5.roa (raw, json)
Hash identifier:          hrSoz+CkoNtN1UPadVcJrEvUmS+2+3RofG4tbxqzu24=
Subject key identifier:   D9:43:14:69:C3:E4:4C:A6:4B:AE:B5:62:EB:A7:C2:3D:67:AD:64:22
Certificate issuer:       /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Certificate serial:       010D0C9F4328584571E872A0863AB2511BC12300
Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/0b03c905-b522-32eb-a850-2403339cbdc5.roa
Signing time:             Fri 05 Apr 2024 13:00:33 +0000
ROA not before:           Fri 05 Apr 2024 13:00:33 +0000
ROA not after:            Thu 04 Jul 2024 13:00:33 +0000
asID:                     7354
IP address blocks:        2606:d640::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:71:e8:72:a0:86:3a:b2:51:1b:c1:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
        Validity
            Not Before: Apr  5 13:00:33 2024 GMT
            Not After : Jul  4 13:00:33 2024 GMT
        Subject: CN=b076ca1d-4d14-4c1a-8d0c-43984c9f6b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c3:cb:81:1d:9c:86:23:4f:48:92:4e:f9:fd:
                    12:d7:7c:31:3e:0a:00:25:ee:8a:2d:fa:61:e3:4b:
                    50:ab:13:46:90:34:e2:2b:18:16:7e:89:10:1a:8f:
                    f0:71:70:de:6c:3b:e8:ae:05:36:5a:97:8c:4e:64:
                    5a:ec:14:7e:90:e2:e3:b8:36:52:41:dc:dd:50:71:
                    cb:29:f9:bd:eb:c1:8b:31:9b:f9:68:d4:f1:d1:29:
                    55:ce:6a:5a:af:22:ae:58:4c:08:8a:a0:98:0a:c3:
                    2f:03:51:11:57:83:29:92:01:6d:a7:f8:85:14:7c:
                    f0:b3:ac:3c:03:12:15:c4:2d:5f:90:d6:80:9e:8e:
                    97:08:3c:1a:10:ba:af:cc:56:b7:f5:5f:e8:99:b8:
                    39:99:bc:55:19:ef:f1:dc:b4:b6:b3:f2:37:d1:c0:
                    37:af:90:1f:27:07:c8:09:f6:12:c8:44:ae:cf:c9:
                    8d:a6:4c:b7:21:d4:53:69:67:7e:c6:25:34:50:a6:
                    a4:86:d9:f4:e1:cb:9d:7b:27:13:ae:fc:1b:15:6a:
                    da:48:b5:4f:f5:c4:7b:62:69:78:3c:e5:bb:ae:23:
                    93:3f:ff:0d:bb:a8:5e:7a:69:87:f4:5f:8a:bc:59:
                    f4:67:81:bf:6d:41:41:ab:f9:ef:a9:6b:03:03:74:
                    01:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:43:14:69:C3:E4:4C:A6:4B:AE:B5:62:EB:A7:C2:3D:67:AD:64:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/0b03c905-b522-32eb-a850-2403339cbdc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl

            X509v3 Authority Key Identifier:
                keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:d640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:0b:8b:02:7b:4d:1a:fd:f2:c9:9e:2c:46:4f:9e:2e:58:1f:
         ec:37:0c:70:8e:5a:24:63:0a:5c:7c:65:9f:8b:8d:56:ac:12:
         39:08:73:a6:9f:57:32:82:13:13:5c:2f:c7:2d:d6:f9:8f:a6:
         5c:83:2d:15:d3:33:9c:15:1c:41:01:a8:f5:23:c2:bf:29:ec:
         be:f8:88:9a:78:da:e5:08:eb:5c:fd:b4:9b:f0:b1:b0:2f:6a:
         1b:b6:12:d4:d0:e9:0a:04:67:c2:be:3b:e5:0e:ad:26:d7:59:
         b4:e5:65:27:ee:8f:e4:29:25:03:c9:c1:f1:c1:97:b9:f0:ad:
         a4:e1:01:d9:5c:94:c6:d0:f0:a0:79:ad:1e:9d:f0:59:dc:fc:
         15:14:1c:ec:69:62:d9:ca:75:97:bd:d5:00:96:95:c8:fd:c8:
         6b:8c:31:df:00:a0:6e:8c:83:c6:b9:13:41:54:85:e1:bb:64:
         f9:cd:96:8b:25:92:b7:5d:0e:ba:7e:94:5f:7b:e5:1f:06:df:
         d9:53:24:f5:27:77:9c:12:9f:61:c2:d0:5b:7e:80:74:92:76:
         a0:96:fe:27:86:33:4f:6f:04:dd:9b:67:1e:dd:34:ca:81:1a:
         b6:ee:e6:78:37:18:a9:b7:0e:b4:41:f8:f5:a9:d1:f0:e7:78:
         4a:23:5b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:58:55 2024 by rpki-client on console-ams.rpki-client.org