Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/064bb556-40a8-3b7a-9c55-3217f244b17d.roa
File:                     064bb556-40a8-3b7a-9c55-3217f244b17d.roa (raw, json)
Hash identifier:          eXGYFetZXnho9Z68+9mboYJDPHYAUjhnM0eO4vHqWHI=
Subject key identifier:   95:74:B6:E3:B7:3E:34:71:7D:B8:A8:37:58:31:9F:6C:31:1C:D6:7B
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285845777DD4916E29A656E4022020
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/064bb556-40a8-3b7a-9c55-3217f244b17d.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     205544
IP address blocks:        2607:f5b5:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:d4:91:6e:29:a6:56:e4:02:20:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=13d69405-6daf-42e3-8e5c-8120e3c61d44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fc:ac:30:0b:07:85:13:35:e3:e6:1f:e1:6c:
                    68:85:cc:c2:56:45:28:39:e8:99:e3:f4:8d:45:a8:
                    7e:13:2e:ba:0c:7d:7a:2d:81:c0:12:f6:29:11:0a:
                    67:bc:48:45:32:e9:b3:d6:61:3a:e6:74:6d:dd:c9:
                    85:e5:7c:ef:9d:be:e7:0c:ce:50:ca:c9:97:e9:4b:
                    e2:34:09:eb:0a:73:c8:92:03:07:18:d1:f8:d7:36:
                    43:92:8b:2e:54:ad:28:c0:69:ac:c5:c4:b5:eb:d8:
                    59:93:4d:fa:0c:ce:00:8b:5b:99:4b:3d:eb:73:76:
                    8c:fa:b7:1a:94:30:c1:4e:73:a0:31:77:fc:50:ef:
                    37:a4:5f:07:22:74:de:8b:bd:61:0f:6c:84:8e:d2:
                    7c:12:4b:c9:c5:2f:11:df:ec:19:3a:95:54:3a:83:
                    85:3a:30:19:c8:0b:f5:f6:3c:72:6e:67:d5:ea:cf:
                    85:1a:09:c7:af:73:2e:57:c9:b9:55:51:f6:c4:53:
                    a6:24:93:d3:b0:46:5c:51:64:d6:0a:be:18:e6:47:
                    c8:2d:bf:02:f6:68:36:75:bd:9e:1c:07:4e:a1:17:
                    71:c8:5e:e0:eb:71:9c:12:ef:37:35:b8:72:56:05:
                    42:f5:9b:0e:20:74:1b:b8:f9:f2:23:58:45:1c:49:
                    1c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:74:B6:E3:B7:3E:34:71:7D:B8:A8:37:58:31:9F:6C:31:1C:D6:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/064bb556-40a8-3b7a-9c55-3217f244b17d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5b5:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:04:5a:f0:f1:33:65:0a:c2:61:c7:f1:84:00:7e:03:a7:03:
         64:8c:fa:a4:98:b6:b7:79:c0:40:54:3a:d8:30:54:9c:03:f0:
         98:83:86:e6:a5:cf:4f:67:ec:60:07:3d:9f:93:76:71:ac:a8:
         3a:3d:b8:21:16:e2:74:b4:31:91:c6:32:45:ff:c7:ac:2e:f3:
         fb:f7:af:a0:9e:a1:5f:ba:b2:87:52:58:a7:21:18:e7:06:5f:
         57:cc:54:86:c4:6f:c7:11:fa:9c:67:4a:3e:cc:51:12:01:f8:
         16:6d:2a:2f:22:ec:e2:11:74:53:16:d2:e2:69:17:43:70:88:
         42:25:03:97:79:5d:7b:bb:c0:cd:5e:f0:74:7a:64:fb:9e:53:
         a8:25:5b:a7:07:77:5e:b9:d7:1c:af:65:ef:91:ea:7e:5f:dc:
         24:bb:a4:86:e4:05:f8:4f:29:25:d1:cc:22:c7:41:6e:b2:f1:
         50:72:54:ac:f9:10:81:81:6f:ff:4b:e9:b1:48:17:a4:f9:a0:
         e2:78:eb:be:ef:87:6f:f8:24:e8:6c:e6:ed:bb:69:6f:8b:c4:
         7a:db:6e:20:a3:bc:4d:ec:bc:c6:21:58:48:9b:ec:ef:c6:20:
         11:e4:63:de:a7:07:58:51:51:2d:40:55:bf:ee:cb:33:32:99:
         cd:5d:47:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 17:58:20 2024 by rpki-client on console-ams.rpki-client.org