Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9176e2a-57c3-493e-acd0-2507f77918d1/2d14848b-657a-3497-802e-0cd5cc122d20.roa
File:                     2d14848b-657a-3497-802e-0cd5cc122d20.roa (raw, json)
Hash identifier:          i1lLXewqlLOzktRKHIMBMleHnoWH0WnvJb310brVM1E=
Subject key identifier:   97:78:AE:C5:14:FB:6A:A1:47:30:C2:60:F1:6F:35:A7:06:6F:77:CA
Certificate issuer:       /CN=b9176e2a-57c3-493e-acd0-2507f77918d1
Certificate serial:       010D0C9F432858455BCED4968263E30E2C238280
Authority key identifier: 31:F7:86:5A:8B:81:14:FA:25:4F:84:22:C3:6F:E2:81:5A:3B:58:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9176e2a-57c3-493e-acd0-2507f77918d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9176e2a-57c3-493e-acd0-2507f77918d1/2d14848b-657a-3497-802e-0cd5cc122d20.roa
Signing time:             Thu 28 Mar 2024 15:01:22 +0000
ROA not before:           Thu 28 Mar 2024 15:01:22 +0000
ROA not after:            Wed 26 Jun 2024 15:01:22 +0000
asID:                     7029
IP address blocks:        2605:c248::/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9176e2a-57c3-493e-acd0-2507f77918d1/b9176e2a-57c3-493e-acd0-2507f77918d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9176e2a-57c3-493e-acd0-2507f77918d1/b9176e2a-57c3-493e-acd0-2507f77918d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9176e2a-57c3-493e-acd0-2507f77918d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5b:ce:d4:96:82:63:e3:0e:2c:23:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9176e2a-57c3-493e-acd0-2507f77918d1
        Validity
            Not Before: Mar 28 15:01:22 2024 GMT
            Not After : Jun 26 15:01:22 2024 GMT
        Subject: CN=d8070d47-0a29-474b-ae27-6ff998ae324d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:05:a0:ba:6a:e7:6b:ef:90:79:53:b6:bf:89:
                    e6:5e:02:b7:1a:fd:2f:a0:fa:d3:2d:2b:51:b2:2e:
                    ef:f6:29:5a:0c:83:28:a3:8f:d5:1b:f4:bb:44:c3:
                    1d:37:2e:68:77:d2:91:25:57:76:0c:1b:a4:73:98:
                    89:06:53:4a:21:0a:0e:97:c6:28:dd:de:33:92:de:
                    81:2a:2d:06:06:3e:ed:6d:56:fa:17:a4:22:1d:24:
                    0b:17:73:84:b4:fb:4b:c2:dc:ed:cf:cb:ba:38:95:
                    35:7d:3b:89:db:6b:c9:e3:00:6c:44:ef:3f:6d:29:
                    88:25:11:0d:a2:1e:63:f4:db:01:8e:dd:69:cf:75:
                    fb:8f:2d:be:12:40:97:34:52:94:e5:9d:26:6d:4c:
                    16:89:7c:cb:d7:e8:b1:ba:2e:6c:8c:6f:74:f3:a0:
                    b7:b8:16:df:34:97:a4:38:ef:8f:b8:11:a3:bc:e9:
                    64:ca:40:b4:d8:31:4b:7a:4a:fe:4e:8f:e6:86:ea:
                    5c:97:de:12:fd:9e:29:2e:5e:38:53:0f:37:10:b2:
                    d9:d0:2e:ae:94:57:ce:f8:aa:ce:b8:bb:51:80:a0:
                    29:13:5f:29:aa:11:35:c5:fa:b5:11:ec:5c:81:06:
                    dd:49:d1:f6:0e:9e:c4:3a:9c:30:e1:58:a9:33:0d:
                    7f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:78:AE:C5:14:FB:6A:A1:47:30:C2:60:F1:6F:35:A7:06:6F:77:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9176e2a-57c3-493e-acd0-2507f77918d1/2d14848b-657a-3497-802e-0cd5cc122d20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9176e2a-57c3-493e-acd0-2507f77918d1/b9176e2a-57c3-493e-acd0-2507f77918d1.crl

            X509v3 Authority Key Identifier:
                keyid:31:F7:86:5A:8B:81:14:FA:25:4F:84:22:C3:6F:E2:81:5A:3B:58:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9176e2a-57c3-493e-acd0-2507f77918d1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c248::/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:50:23:86:33:07:32:0d:76:3e:5e:52:70:a8:f4:dd:40:4b:
         42:77:1a:51:46:22:00:0c:32:07:91:f0:94:d4:9e:78:14:81:
         40:4d:a6:27:52:dc:52:ec:ac:71:89:ed:e3:5a:3b:6e:f4:3d:
         eb:28:cd:31:e2:d6:c3:0d:67:66:f0:37:09:bd:49:18:93:05:
         28:8b:ed:30:23:e6:da:29:dd:8c:36:a8:a0:ee:6e:8a:35:de:
         10:c8:4b:e0:95:82:d2:59:19:9a:63:66:54:37:55:5c:00:f6:
         e7:e8:d6:04:f2:ff:03:3b:9f:f4:ea:d3:f6:a1:8a:83:0d:ac:
         5e:fd:6e:d6:60:6f:aa:2c:bb:31:aa:d4:82:04:17:21:9b:a3:
         b9:85:96:67:78:70:d7:14:0a:22:51:c3:4d:ed:ea:af:b6:5f:
         3c:5a:a7:20:06:67:a8:14:30:a2:89:97:66:21:d4:c5:f6:b1:
         93:5b:6e:21:38:3d:37:6b:f3:8b:e7:2a:ec:c5:60:dc:92:5d:
         04:eb:66:42:08:95:91:a1:9f:71:79:c1:20:30:de:90:16:6b:
         87:1c:75:06:06:20:4d:ab:bb:ce:37:04:74:03:d6:e8:48:0d:
         ff:e4:84:93:fb:46:1b:0e:77:09:44:8f:25:1a:d8:6f:23:2d:
         51:17:b8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:26:35 2024 by rpki-client on console-ams.rpki-client.org