Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/a8ef8ebe-92a7-3667-b275-a0fed342786e.roa
File:                     a8ef8ebe-92a7-3667-b275-a0fed342786e.roa (raw, json)
Hash identifier:          sOgkxhXXymiYwtawOrcbf/xAqYeWyMB7dNK560b1bRQ=
Subject key identifier:   C6:FB:CA:B1:58:3D:02:A9:A1:DC:55:BC:A7:5E:04:C2:41:EF:9B:D6
Certificate issuer:       /CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
Certificate serial:       010D0C9F43285845E193C470D7AFF529A4022FC0
Authority key identifier: 26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/a8ef8ebe-92a7-3667-b275-a0fed342786e.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     32554
IP address blocks:        2607:6b40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:c4:70:d7:af:f5:29:a4:02:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=6175ab68-88d8-42e4-aa10-473274332039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:17:9c:03:57:92:c6:e3:ed:51:9e:30:b0:c6:
                    b4:f8:2b:9c:91:b8:00:b6:44:25:73:60:08:5d:17:
                    6b:0b:86:ff:02:81:dd:21:3f:87:9e:0f:1e:75:37:
                    a7:cf:1d:28:75:c1:cf:4d:6a:14:ac:21:c1:1c:67:
                    c7:f0:d2:cc:97:20:00:a5:7a:89:a0:84:86:8a:49:
                    00:b9:fd:67:9f:b5:e0:ba:a6:21:5d:6e:ac:6c:af:
                    9e:6e:61:9c:d8:94:3a:bb:90:7d:47:c2:ac:0d:b0:
                    eb:d4:db:b5:a8:ba:ce:c3:3b:a4:10:ad:4c:24:b4:
                    cb:8b:f1:4d:cf:2a:4d:7a:cc:93:da:2b:39:eb:c7:
                    92:90:0e:87:18:3d:33:be:65:36:32:4f:5a:65:92:
                    4f:56:76:83:5a:68:21:ee:67:29:7e:48:4f:47:b9:
                    56:d0:8f:72:e3:11:3f:c0:3f:32:b1:f8:51:05:43:
                    c6:b7:b0:15:20:e3:68:29:33:5b:b3:4d:e0:28:62:
                    4e:37:3a:88:92:4c:97:7e:71:1e:73:73:72:d7:b7:
                    98:4f:9f:30:1d:a1:a3:23:7c:5d:33:39:83:32:f3:
                    ff:e1:56:2b:d4:02:5b:73:24:47:68:2e:d2:c2:91:
                    33:0a:91:61:e8:f4:c4:48:60:97:4b:73:36:0d:40:
                    40:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FB:CA:B1:58:3D:02:A9:A1:DC:55:BC:A7:5E:04:C2:41:EF:9B:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/a8ef8ebe-92a7-3667-b275-a0fed342786e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl

            X509v3 Authority Key Identifier:
                keyid:26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:08:d6:48:05:54:af:80:31:73:3f:d0:9c:83:7e:eb:e3:10:
         16:f0:65:82:22:2a:a5:cd:45:0c:92:b8:bc:d2:92:b5:44:83:
         cf:13:3e:66:08:40:4e:c3:da:f0:95:ce:17:dd:c8:b3:a1:00:
         55:0d:c2:9b:40:3b:05:05:41:30:72:6c:1d:a7:5f:6f:27:3a:
         cc:e8:b8:e7:e7:58:38:ec:03:80:4b:be:b2:e0:67:34:51:bb:
         1a:17:0f:c7:eb:5c:ec:a6:4c:f3:2e:11:41:ea:4b:5f:9c:86:
         7c:0d:25:ca:b0:25:31:12:8d:d4:3d:d4:de:24:43:42:96:66:
         2a:b2:32:1b:19:5d:93:b3:16:66:84:a8:74:c0:3a:51:8b:45:
         2b:f8:b6:be:3b:fa:f8:a3:35:3b:7c:d5:b7:2c:4d:c5:f7:71:
         89:60:73:44:81:6b:b4:63:99:dd:4d:98:0a:05:5d:44:12:73:
         0e:b6:be:f2:eb:60:b1:5b:93:df:75:4d:39:fe:15:59:d2:83:
         c2:86:fc:9e:cf:eb:19:1a:d8:55:43:a3:a4:e8:f2:c1:b8:ac:
         59:c3:11:a5:18:0d:6e:c3:9d:e6:df:ae:d9:f3:28:22:cc:09:
         73:ee:4c:f6:6f:1b:fa:c5:ea:2a:59:20:cf:4f:e2:db:6e:5b:
         9f:1a:47:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 16:42:41 2024 by rpki-client on console-ams.rpki-client.org