Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/9eaca58c-b8fa-31e6-a0dd-7837998d58c3.roa
File:                     9eaca58c-b8fa-31e6-a0dd-7837998d58c3.roa (raw, json)
Hash identifier:          WfCbvFrHScw9nCNSLoq7mXdcQuy8X3UZJdDf5fd/V98=
Subject key identifier:   25:4C:A7:7F:9A:70:60:16:DA:85:B5:FF:D8:2B:8E:CC:4C:5C:32:D4
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F43285844EED00607C0D6414294CF3200
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/9eaca58c-b8fa-31e6-a0dd-7837998d58c3.roa
Signing time:             Sun 18 Feb 2024 14:00:30 +0000
ROA not before:           Sun 18 Feb 2024 14:00:30 +0000
ROA not after:            Sat 18 May 2024 13:00:30 +0000
asID:                     11404
IP address blocks:        2001:1868::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ee:d0:06:07:c0:d6:41:42:94:cf:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Feb 18 14:00:30 2024 GMT
            Not After : May 18 13:00:30 2024 GMT
        Subject: CN=efa5d1f2-beae-40dc-9f2a-a311a989d5aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fa:14:8e:b6:76:bf:18:1e:97:4c:31:e7:79:
                    ee:e9:ad:22:e3:23:95:6e:ff:14:73:5e:c9:8d:31:
                    8c:8b:61:3f:11:cc:5f:fd:20:21:60:a7:2d:84:ba:
                    d9:f5:42:9c:ae:a9:73:8f:a3:a3:1f:7f:92:70:e6:
                    5a:80:53:4b:6e:b6:81:0f:12:27:d8:28:c3:ec:20:
                    8d:59:85:b2:ba:3d:6d:13:3b:9d:31:c3:2c:4b:19:
                    0d:40:74:b8:1e:75:f4:0e:ad:5d:cc:a2:c6:ff:04:
                    e7:2e:25:e5:31:25:4f:f0:73:73:fe:3a:40:44:ca:
                    67:af:40:02:cd:fc:22:ff:54:f8:f8:a2:e5:91:f3:
                    c0:53:68:08:0c:db:39:e8:bc:49:e5:f2:0c:de:e0:
                    42:74:0e:3a:31:32:51:b7:cf:60:72:e7:0f:7a:51:
                    40:89:7c:2c:a7:bc:bc:6e:35:ff:8b:7c:d9:18:6c:
                    fb:2b:9b:94:87:c2:76:9c:16:f7:53:9f:36:b8:0a:
                    9b:82:92:f2:31:ac:73:35:53:ac:c8:53:37:a0:9d:
                    ae:b9:83:6b:8d:54:29:70:ec:fb:0b:90:bb:c8:f9:
                    2c:3d:e8:5a:2a:93:96:86:26:85:91:3c:a4:3f:79:
                    49:54:2d:e5:e8:53:a5:1a:57:93:d3:3d:98:7e:86:
                    17:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:4C:A7:7F:9A:70:60:16:DA:85:B5:FF:D8:2B:8E:CC:4C:5C:32:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/9eaca58c-b8fa-31e6-a0dd-7837998d58c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1868::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:21:78:38:8a:76:c1:38:95:28:e4:71:eb:cd:89:26:15:a0:
         eb:e5:79:5d:a1:e1:9f:ce:3f:49:56:e7:c2:7e:f7:99:e5:76:
         c5:ce:2e:04:f2:da:66:a3:17:ad:13:d6:c7:c3:6f:40:50:b4:
         8b:e0:1f:1e:f8:21:02:f0:0b:8b:e1:01:25:b7:27:d0:00:4b:
         32:77:dc:47:29:16:16:b1:24:6d:65:8b:e9:87:bf:08:00:ed:
         3c:7d:52:81:9d:ce:ae:71:7f:1a:b8:0b:7e:10:27:07:36:74:
         84:84:b7:8d:08:e5:09:a0:63:9e:6b:ad:d9:c0:3d:aa:b8:a5:
         80:aa:53:79:b2:d9:dc:55:b1:84:4b:fd:60:2f:7f:0c:6c:79:
         05:2d:0f:03:f2:f5:2a:28:71:a2:aa:a8:31:71:56:28:14:56:
         bb:6e:75:59:18:d3:fd:d9:a3:fb:93:df:69:e7:c7:47:d3:70:
         2a:6e:ab:d9:b3:aa:17:6c:7b:cd:76:7f:3e:9d:23:4c:63:6c:
         fd:e9:26:00:b4:70:70:76:32:f4:a0:00:94:04:dc:2e:fa:0a:
         a8:c4:2d:26:6d:9a:65:a3:0b:66:4d:37:5c:9a:79:36:91:d0:
         04:3b:ad:96:1e:5c:d1:0c:e8:44:ba:8e:89:d2:c3:e1:10:40:
         19:73:42:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:52 2024 by rpki-client on console-fra.rpki-client.org