Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/45a0eb88-85c1-30a7-8674-338f6cc82f21.roa
File:                     45a0eb88-85c1-30a7-8674-338f6cc82f21.roa (raw, json)
Hash identifier:          dyuowOjXSzI0Tmn7O6c/2/wOfsmP/2HwLORoBT4MCpA=
Subject key identifier:   00:26:7E:D3:CB:B0:DD:64:15:AB:54:40:52:51:09:0D:87:45:23:F0
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F43285845B7B38C503EBC638F385E38A0
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/45a0eb88-85c1-30a7-8674-338f6cc82f21.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     21700
IP address blocks:        2606:f1c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:8c:50:3e:bc:63:8f:38:5e:38:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=cbc4ab9e-fdb6-47ee-9501-16e23f4ce91e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:07:52:b9:3c:eb:22:1a:df:08:14:69:ed:68:
                    6a:63:50:3a:19:57:63:6d:15:07:f7:b8:46:fc:fa:
                    b2:bb:9d:d5:40:30:2c:25:16:d4:97:8f:80:2f:ff:
                    c7:4a:5e:d7:29:e2:21:c0:4a:29:e5:73:c6:20:c8:
                    4a:ee:08:8b:ad:8f:0c:f1:5b:02:e0:55:ef:19:9a:
                    15:a5:f3:59:87:7a:db:12:3f:d5:2e:73:01:db:41:
                    c3:50:90:0b:d8:2c:db:af:78:7b:9d:e4:f1:e4:b2:
                    e0:10:70:98:67:fe:bb:ba:3c:9b:44:5f:04:51:06:
                    b8:87:d6:25:54:01:d7:00:c5:b5:ea:cb:9d:7f:4e:
                    44:61:5b:dc:e8:74:6f:cb:93:3b:97:14:ff:6e:52:
                    82:8d:c4:73:aa:6d:72:ae:b4:37:f5:0c:46:e5:89:
                    3f:7b:5c:19:a1:22:cb:a1:10:1b:45:ee:11:92:d5:
                    91:9f:b6:a2:5e:0d:c1:59:58:b9:26:2f:3b:0b:74:
                    ad:d2:06:ac:7f:a6:a4:8f:43:11:f0:f4:a6:0b:5c:
                    5d:f1:8b:41:98:16:3a:38:a1:87:20:2b:30:c7:a4:
                    9c:cd:51:c6:fc:f9:f5:e5:95:1e:78:f5:d5:82:c0:
                    1b:5e:f9:cc:a9:0b:49:e1:97:03:e1:a5:1c:ae:34:
                    0f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:26:7E:D3:CB:B0:DD:64:15:AB:54:40:52:51:09:0D:87:45:23:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/45a0eb88-85c1-30a7-8674-338f6cc82f21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f1c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:33:59:d0:d5:8e:02:e0:98:d4:77:c5:08:5d:70:4b:d6:1e:
         19:6d:95:40:4f:c3:7f:52:d2:d5:45:9a:d9:01:18:1a:74:e2:
         55:b3:c7:40:b1:34:f3:38:ef:75:e3:b5:89:c1:c2:b8:e6:d0:
         d4:41:47:f6:2e:e6:e1:c7:a6:fd:ee:e1:27:41:43:14:8b:01:
         83:49:23:ea:10:84:69:97:2c:95:ad:b8:ba:36:6a:5f:39:b5:
         66:f6:2b:8f:70:49:45:78:5d:22:e4:fd:34:da:d4:ad:4e:65:
         f2:00:8e:f1:f5:08:b7:13:d0:6d:0f:13:f2:11:e8:c1:a9:3f:
         79:b4:27:f2:55:90:6d:28:ae:8f:a6:d7:57:32:a3:42:fd:22:
         17:be:2b:68:c1:f8:b4:34:54:6a:45:57:9a:68:23:22:b6:4e:
         7f:3e:7c:5e:a2:14:55:e9:68:40:ed:98:9f:78:22:32:9d:86:
         66:90:b4:e6:29:51:f9:9d:4f:48:be:d9:ac:1b:ba:e6:00:a6:
         90:3d:67:22:91:38:b4:fb:5c:60:17:42:99:9e:5a:5e:41:69:
         fa:7e:0c:f1:7d:6d:32:c7:dc:8b:0f:94:47:c5:d8:09:54:5f:
         46:cf:a9:1c:81:13:1c:c5:9f:09:73:96:6b:22:d1:45:44:c3:
         64:78:28:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 04:40:20 2024 by rpki-client on console-ams.rpki-client.org