Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/318d32b2-4926-3ac5-a179-d09a02b1e609.roa
File:                     318d32b2-4926-3ac5-a179-d09a02b1e609.roa (raw, json)
Hash identifier:          kSuzABDucIwCwKIVh9wUb9z57Ga7TGOLVoJTo1mizT4=
Subject key identifier:   C0:63:BF:91:78:D7:EA:85:33:A0:F8:65:20:26:7B:2B:99:75:D6:46
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F43285845909DE5E9B70EB2A7D7C11B80
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/318d32b2-4926-3ac5-a179-d09a02b1e609.roa
Signing time:             Tue 16 Apr 2024 13:00:33 +0000
ROA not before:           Tue 16 Apr 2024 13:00:33 +0000
ROA not after:            Mon 15 Jul 2024 13:00:33 +0000
asID:                     20454
IP address blocks:        2607:6003:2301::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:90:9d:e5:e9:b7:0e:b2:a7:d7:c1:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Apr 16 13:00:33 2024 GMT
            Not After : Jul 15 13:00:33 2024 GMT
        Subject: CN=fdde25ea-09de-4a4c-a2a8-62a7633238fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2e:9f:5b:75:02:c6:3e:50:34:6f:3c:f2:41:
                    2c:35:d9:9e:bd:4b:08:60:37:71:f4:2c:04:fd:55:
                    7a:8d:65:f5:cb:a6:bf:e2:3a:40:3c:19:1a:8e:80:
                    b9:1d:df:f5:fb:7f:f9:f0:e5:d1:42:35:d4:35:69:
                    a6:c0:46:c9:8c:0e:b5:20:a6:84:f5:c7:ef:8b:67:
                    01:f9:f2:04:0b:4b:74:23:59:dc:49:fd:3d:98:ed:
                    f9:fd:87:da:1e:a8:f7:85:35:71:49:6b:c1:07:f5:
                    31:09:ef:9b:e6:72:51:58:33:a8:1f:94:ab:91:b7:
                    3b:36:c7:2a:0a:2b:93:a0:af:09:ae:93:77:fe:f5:
                    1e:ce:1c:2e:40:b9:97:e4:49:39:8d:75:c6:63:61:
                    1e:70:62:02:f5:5c:b3:49:7f:76:73:f6:3e:4f:5b:
                    43:dd:96:bd:9f:1e:b8:56:d1:cf:55:86:0e:ad:95:
                    23:d6:e8:66:12:a9:16:34:e8:1c:36:5a:b9:25:d4:
                    60:07:67:7b:a9:f5:89:35:02:e9:a9:aa:86:c6:86:
                    c2:8d:41:9b:3e:4d:45:88:97:0d:5c:bc:27:4d:39:
                    23:f1:17:a7:9c:93:62:ae:8d:f4:5e:85:ab:65:a0:
                    a4:be:8e:2e:da:50:9c:1b:c6:da:cf:3d:3f:4e:56:
                    13:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:63:BF:91:78:D7:EA:85:33:A0:F8:65:20:26:7B:2B:99:75:D6:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/318d32b2-4926-3ac5-a179-d09a02b1e609.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6003:2301::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:b4:56:c4:ba:e2:36:39:3b:64:2e:81:9e:04:58:42:97:cf:
         06:50:12:62:88:9e:f6:b7:9e:e7:33:5f:76:ca:ac:db:ac:c8:
         79:56:33:15:77:c1:51:71:65:e6:2f:ed:c7:25:13:16:7b:21:
         b3:e5:ff:cd:e3:8d:97:c2:37:39:7e:eb:44:6a:24:b1:63:77:
         bf:4a:c8:54:6d:e7:3a:d4:7c:9d:69:f1:d1:cd:11:c0:a9:e5:
         81:68:74:38:4f:2c:40:35:9a:91:de:44:b8:7e:28:15:d6:fb:
         87:94:de:64:16:d2:15:0e:2d:1d:19:02:db:30:55:fa:eb:cd:
         ec:af:57:1e:7b:42:50:06:89:07:c3:1e:ce:84:85:60:02:4d:
         78:40:f1:af:6d:6a:41:e1:53:fd:bc:af:d8:b3:6e:50:85:78:
         12:e4:d4:14:9c:42:96:f6:f3:45:7b:96:71:82:ea:6c:ce:69:
         c1:14:a0:79:77:10:5b:93:b7:d3:73:ea:8d:66:30:70:01:64:
         0e:b4:e8:12:67:80:ca:8c:9c:41:b4:56:07:aa:ca:23:cc:4f:
         d8:6c:29:21:fe:76:35:b0:fe:aa:ac:dd:e7:83:d2:51:61:96:
         7f:41:5e:0f:40:4f:d3:4e:ba:62:29:57:54:f4:f4:c9:b1:ad:
         54:67:fc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 20:39:27 2024 by rpki-client on console-fra.rpki-client.org