Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/bd2034c3-eeb6-3a5d-9432-f14ba173d18c.roa
File:                     bd2034c3-eeb6-3a5d-9432-f14ba173d18c.roa (raw, json)
Hash identifier:          mdjwOvKGy5OBc1c7B2Yc2h1AxU8acjWcLbQuLG/Okrg=
Subject key identifier:   8D:F6:26:17:A1:C4:6A:2B:02:90:16:66:95:20:85:6B:30:0D:93:C4
Certificate issuer:       /CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
Certificate serial:       010D0C9F43285844F19AACC736761D4BBDAC5E80
Authority key identifier: 5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/bd2034c3-eeb6-3a5d-9432-f14ba173d18c.roa
Signing time:             Mon 19 Feb 2024 14:00:31 +0000
ROA not before:           Mon 19 Feb 2024 14:00:31 +0000
ROA not after:            Sun 19 May 2024 13:00:31 +0000
asID:                     30698
IP address blocks:        2606:e740::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f1:9a:ac:c7:36:76:1d:4b:bd:ac:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
        Validity
            Not Before: Feb 19 14:00:31 2024 GMT
            Not After : May 19 13:00:31 2024 GMT
        Subject: CN=48a090f6-7deb-431d-8d09-d28ac5be9f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c4:a4:49:09:c7:b5:dd:01:cc:ff:03:4a:c7:
                    0e:92:e4:1c:fe:c9:16:e3:98:a8:77:bf:aa:47:00:
                    3a:c6:fc:13:9d:7d:90:55:53:5b:3e:2b:1f:e1:ab:
                    1d:d4:78:ba:07:de:7b:db:00:17:5a:a6:45:d9:e8:
                    20:45:a3:99:8c:7e:d8:d7:2a:61:a0:97:d1:5b:40:
                    41:01:01:e2:ac:10:91:0e:d6:94:7d:de:e7:b7:67:
                    66:60:e1:e4:27:aa:9a:5f:b2:a1:91:df:da:3a:82:
                    c5:1b:1e:24:0e:07:ac:6b:53:84:aa:20:f5:f4:cc:
                    c3:48:25:e6:23:72:61:52:a3:98:10:8b:54:ad:4f:
                    ff:03:b5:a2:87:50:98:4b:db:a4:0b:6d:e3:b2:20:
                    39:25:01:8b:47:e3:01:1c:fa:99:f6:2e:f5:49:e0:
                    cd:41:e0:db:f6:42:08:a7:13:f6:96:c4:3b:c7:61:
                    d4:95:7f:b4:2e:44:04:b8:aa:14:b8:8d:a1:57:84:
                    42:8c:d0:85:67:34:52:0e:10:27:2d:ac:75:8d:67:
                    87:3d:1c:8b:0c:18:44:93:5e:48:64:77:fa:be:fb:
                    5d:4b:33:81:3e:ac:40:b9:5b:b1:ef:b0:08:73:a3:
                    b3:24:4d:d6:62:93:83:20:70:7e:3a:a4:a9:ec:fd:
                    7c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F6:26:17:A1:C4:6A:2B:02:90:16:66:95:20:85:6B:30:0D:93:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/bd2034c3-eeb6-3a5d-9432-f14ba173d18c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl

            X509v3 Authority Key Identifier:
                keyid:5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:e740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:6d:c0:7e:07:3c:ad:8a:1b:66:cd:94:b2:c4:a1:43:47:e0:
         53:ed:32:0a:47:c4:58:c4:ba:a6:24:fa:9f:18:88:2a:27:da:
         a1:c3:dc:fc:8d:50:59:68:f8:eb:22:4a:78:a9:89:54:43:62:
         e1:6e:05:75:27:a2:e0:98:d4:5e:98:07:a4:59:91:e1:a4:8f:
         d9:db:2a:ed:f0:48:ff:8c:34:2d:1f:6a:2e:f6:d5:9b:98:93:
         33:72:96:7f:42:37:bc:42:22:37:7e:16:fd:e0:46:e2:3e:4d:
         b5:bf:5f:1a:35:5d:43:f2:95:4d:94:ea:01:a5:ff:01:1b:dd:
         48:55:7a:d0:74:3c:7c:9a:f6:23:61:c4:52:ef:97:9a:35:c4:
         60:03:c7:76:34:a1:b5:12:8e:a1:dd:e8:af:38:d2:f2:bc:6a:
         76:4e:ef:24:5d:16:25:44:56:a0:60:bd:8e:f7:f2:53:64:6c:
         88:fc:19:a6:a2:f1:c8:07:d5:1b:c9:b3:8f:16:cd:a4:9c:1d:
         55:b3:cf:fd:a2:61:61:47:17:da:aa:ea:89:e9:e6:c1:c4:a3:
         7c:a7:ca:c4:57:28:a6:48:0c:39:8a:2c:a1:6b:ab:b0:23:df:
         62:c8:74:86:d9:78:a2:95:49:eb:7c:0a:69:a3:39:8d:32:54:
         65:97:b1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:00:03 2024 by rpki-client on console-ams.rpki-client.org