Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/275ddba4-64f3-3e1c-8798-63f43743a9c7.roa
File:                     275ddba4-64f3-3e1c-8798-63f43743a9c7.roa (raw, json)
Hash identifier:          Z5lE4SFqx3JpXScaxMQUvUH2vbtic7WVsydQ3bBg2a0=
Subject key identifier:   3C:3B:53:22:CF:D8:3E:8D:D7:E3:FA:5A:E7:14:9B:80:41:C7:02:12
Certificate issuer:       /CN=d23910be-77e9-4381-87eb-cb12cfc9b676
Certificate serial:       010D0C9F43285845883DD4FAEDD52ACC2099AF80
Authority key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/275ddba4-64f3-3e1c-8798-63f43743a9c7.roa
Signing time:             Sat 13 Apr 2024 13:00:34 +0000
ROA not before:           Sat 13 Apr 2024 13:00:34 +0000
ROA not after:            Fri 12 Jul 2024 13:00:34 +0000
asID:                     53766
IP address blocks:        2605:a7c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:88:3d:d4:fa:ed:d5:2a:cc:20:99:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23910be-77e9-4381-87eb-cb12cfc9b676
        Validity
            Not Before: Apr 13 13:00:34 2024 GMT
            Not After : Jul 12 13:00:34 2024 GMT
        Subject: CN=5333e572-1925-4965-9d47-e87f260f03bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:df:61:d0:96:2a:d8:87:44:6b:7e:46:6c:63:
                    5f:18:9e:10:63:9d:4d:55:14:19:c9:00:36:fc:db:
                    2a:72:03:f2:8d:cb:ce:a1:c1:34:15:80:6d:5e:5c:
                    3b:8f:96:69:31:e1:73:b6:7e:32:ed:e1:85:63:5e:
                    f6:15:b5:6d:b4:89:61:a5:b4:8c:c3:13:77:cb:c2:
                    57:f0:5c:d2:f1:d6:a3:d0:bb:27:41:11:56:21:b1:
                    05:80:7f:09:43:56:8e:12:e8:3e:f8:7b:5c:f3:5d:
                    a7:9a:9c:52:52:ef:69:03:87:91:48:f2:38:8d:cf:
                    46:f8:e5:fd:9d:f6:33:b5:da:69:df:ec:7e:b5:be:
                    58:d2:e3:3f:61:35:a3:c0:0d:8a:a2:a2:a9:43:ab:
                    e8:9a:ff:d5:52:1b:fa:a0:19:ba:ef:98:e4:23:ea:
                    90:72:28:97:3a:53:ea:90:32:ab:c0:ba:59:08:47:
                    89:f3:04:95:a6:b0:af:b4:9d:b1:b0:25:4c:56:8c:
                    08:f9:04:0c:79:15:57:83:9b:54:0a:f0:d9:c9:db:
                    e4:5d:7e:62:1d:c7:64:0b:4b:30:fb:eb:a7:1e:2e:
                    2b:48:7f:84:d9:e5:71:d8:2e:6e:4a:ba:b5:5f:42:
                    e8:7e:33:3f:2a:cb:59:56:0b:8b:e5:82:92:a1:79:
                    9a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3B:53:22:CF:D8:3E:8D:D7:E3:FA:5A:E7:14:9B:80:41:C7:02:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/275ddba4-64f3-3e1c-8798-63f43743a9c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a7c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:b1:69:0e:ac:64:98:81:03:b7:0d:97:21:89:59:be:26:e4:
         71:4f:c8:6c:0b:cd:f2:bf:3d:81:86:29:91:a4:a0:f4:d5:e5:
         14:79:ca:10:97:07:43:7f:dc:d8:ce:a7:b8:c1:41:bd:7d:4b:
         58:ef:67:f7:f1:4c:6b:09:a1:09:4b:dd:68:3a:4d:d1:dd:2e:
         07:4b:2e:93:ac:db:32:81:bb:b4:58:70:ff:7e:5c:df:13:16:
         93:2f:65:aa:96:b9:1d:82:7f:f2:cc:b0:0a:77:dd:db:bd:d5:
         09:bd:4c:d2:3f:1b:3e:5f:58:dc:ea:39:38:81:b2:7a:a8:f0:
         ec:74:91:42:ae:00:d4:0d:f1:84:b0:de:71:09:05:d8:cb:0b:
         8a:e5:cb:dd:6d:8e:00:01:44:52:cb:4c:84:17:21:6c:7b:f0:
         6d:fe:ab:9b:79:13:84:a0:c5:92:17:8b:c7:50:02:16:b0:10:
         8a:a6:06:0f:1d:37:3a:51:ae:9a:c3:e1:24:e9:2f:68:aa:38:
         99:44:ca:b1:80:c8:aa:d0:c2:da:6b:b0:d9:b3:66:eb:1c:07:
         e9:bb:68:04:96:7a:26:09:47:0c:6e:a4:5c:8d:54:0c:6e:0c:
         74:21:ab:e1:cf:c9:80:3a:c2:9b:06:a1:56:f0:f3:9e:7b:5b:
         20:94:e8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:51:54 2024 by rpki-client on console-ams.rpki-client.org