Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/682b6135-e067-305c-a752-4e63ad4480df.roa
File:                     682b6135-e067-305c-a752-4e63ad4480df.roa (raw, json)
Hash identifier:          GfX516M6iyUYBn0M+a8C5Jx1V+KH+XsZr6Qqy9CqKvU=
Subject key identifier:   A4:E9:7D:21:16:DC:96:11:B8:6D:44:49:2F:51:FF:13:6E:B0:DD:6D
Certificate issuer:       /CN=fd7bd65f-83d2-4046-ad64-40ba458415a2
Certificate serial:       010D0C9F4328584582A89A64EC87CB6C8C5BCE40
Authority key identifier: 73:3D:A8:16:7C:90:7B:98:87:54:D1:1B:83:65:83:DF:2B:35:30:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/682b6135-e067-305c-a752-4e63ad4480df.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     40153
IP address blocks:        2620:8d:a000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/fd7bd65f-83d2-4046-ad64-40ba458415a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/fd7bd65f-83d2-4046-ad64-40ba458415a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:9a:64:ec:87:cb:6c:8c:5b:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd7bd65f-83d2-4046-ad64-40ba458415a2
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=8847c0cf-120e-4a42-9eee-f4f7efc95236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7d:93:b9:9c:43:4a:a7:e5:9f:ad:e0:6a:a0:
                    a2:3d:59:df:d8:86:fe:1d:69:33:c4:b4:83:25:45:
                    28:c7:21:5a:aa:5f:18:0c:0f:4b:32:c2:6a:45:ae:
                    9e:3d:0e:4a:6f:8c:2b:8d:b4:6d:13:9d:30:1d:d5:
                    15:c4:29:13:7d:c4:d2:27:fd:91:a2:14:8f:8b:f8:
                    5e:78:da:64:bc:3f:59:45:f4:13:cd:fa:27:0e:82:
                    11:63:25:16:3a:22:75:1a:28:c5:33:47:c4:21:0e:
                    7b:26:dc:fa:f9:32:a2:69:63:88:55:f2:ce:b5:3f:
                    1c:7b:47:00:ab:0a:71:8c:36:58:00:69:85:4b:a4:
                    62:7e:43:70:7a:5d:69:df:f1:1a:21:e6:23:63:7a:
                    69:21:e4:60:84:db:4a:72:64:1c:cf:55:40:8b:e1:
                    2b:92:98:60:c6:8f:38:72:8d:ff:cc:fd:6d:7c:ff:
                    ea:53:fc:b0:8f:2c:af:5d:fd:45:1f:3f:a9:54:23:
                    87:4b:46:9d:4d:e2:9e:75:26:05:42:b5:9c:26:3c:
                    b7:38:0c:e3:84:46:fd:ad:1f:b2:6e:3c:90:ad:ca:
                    f2:35:ab:30:52:f6:98:63:22:1a:11:f3:1a:4a:41:
                    d3:fa:02:6c:39:6e:fb:31:55:cc:47:e1:8c:2b:d8:
                    ec:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E9:7D:21:16:DC:96:11:B8:6D:44:49:2F:51:FF:13:6E:B0:DD:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/682b6135-e067-305c-a752-4e63ad4480df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/fd7bd65f-83d2-4046-ad64-40ba458415a2.crl

            X509v3 Authority Key Identifier:
                keyid:73:3D:A8:16:7C:90:7B:98:87:54:D1:1B:83:65:83:DF:2B:35:30:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:8d:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:25:51:5b:ee:14:b0:e5:ee:36:6f:83:c8:5f:69:f7:af:92:
         ea:00:22:8f:7d:ba:27:70:95:64:c0:a7:29:29:92:aa:83:49:
         ea:8a:59:a7:88:e5:ca:f2:f9:69:c4:0f:2d:bc:f5:ad:46:8c:
         10:de:1f:54:51:a2:83:83:3d:2a:dd:b6:96:8f:b2:67:65:f3:
         0e:fc:05:96:41:6e:2c:a7:f5:e3:d3:13:33:6a:25:24:75:cf:
         6b:58:6b:70:8f:a2:83:88:eb:95:87:95:91:7d:ce:31:a6:f5:
         ef:ea:b8:67:df:19:19:d1:a7:67:31:a2:53:ef:20:24:65:e0:
         d3:34:05:2d:90:85:e0:6d:49:b5:97:84:b7:bd:43:fa:44:24:
         aa:95:6a:34:26:8e:5e:d9:f9:a3:1f:36:3b:18:57:a9:2d:c4:
         c8:73:0f:7f:9d:3b:8c:4a:1a:8f:c3:c4:4e:57:79:86:bc:86:
         19:68:f0:09:b1:c7:4f:73:ac:6a:0f:a8:b0:aa:30:6d:bb:e4:
         56:91:91:ea:a1:63:d8:1a:3e:00:5c:91:96:9c:4c:a2:ec:62:
         32:16:82:07:c7:05:84:89:77:ba:71:a9:76:49:e2:80:38:a0:
         99:6c:c4:63:c3:b2:07:2d:bf:b0:47:dd:c9:bf:4c:2f:45:80:
         51:e8:36:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 20:49:53 2024 by rpki-client on console-fra.rpki-client.org