Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/6b983b9b-3d7a-3d9e-8138-1eb898f0fd33.roa
File:                     6b983b9b-3d7a-3d9e-8138-1eb898f0fd33.roa (raw, json)
Hash identifier:          mbWJzu/U8e84NhzR+AAKyTiP4/OtGrQ7fX9MDCI6Y04=
Subject key identifier:   55:2B:5B:C0:91:61:25:50:27:0E:F4:6C:6E:6B:17:BB:A6:0F:B1:EF
Certificate issuer:       /CN=d8a0f176-b4a2-4e32-8a98-4e12e07d8996
Certificate serial:       010D0C9F43285845068ABB194626AF70682C3C00
Authority key identifier: DC:75:7C:13:7E:A8:82:8E:7C:F9:53:75:19:D0:B1:85:4E:C5:3F:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/6b983b9b-3d7a-3d9e-8138-1eb898f0fd33.roa
Signing time:             Tue 27 Feb 2024 02:00:26 +0000
ROA not before:           Tue 27 Feb 2024 02:00:26 +0000
ROA not after:            Mon 27 May 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        2600:400:ff00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:06:8a:bb:19:46:26:af:70:68:2c:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8a0f176-b4a2-4e32-8a98-4e12e07d8996
        Validity
            Not Before: Feb 27 02:00:26 2024 GMT
            Not After : May 27 01:00:26 2024 GMT
        Subject: CN=35108058-acff-4dd1-9895-36367cc63c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d1:15:79:2c:8a:cb:81:93:e5:47:f1:03:37:
                    e9:63:96:68:2e:4c:54:45:df:da:f1:3f:23:42:02:
                    18:7a:31:4b:1d:1e:c6:e9:f0:56:23:ea:12:2e:20:
                    2f:1c:53:a0:a1:f6:79:98:c8:08:ff:f9:86:e0:b2:
                    aa:b8:f8:8c:74:ae:59:f5:50:d5:27:15:c9:54:83:
                    b4:0d:44:2f:33:de:78:f1:00:cd:b2:48:fa:a4:fe:
                    ef:71:ee:09:99:6b:15:99:66:1c:2c:df:33:09:73:
                    54:bd:e8:f8:19:db:9c:64:dd:e5:8f:5e:0e:95:b9:
                    e7:df:7d:2d:6d:02:74:61:a4:81:69:aa:9c:29:8f:
                    96:83:d0:ba:66:20:ab:2f:a5:e9:00:f2:c6:75:e5:
                    15:b7:27:08:1f:f5:30:cc:ed:36:e1:16:69:be:5b:
                    11:02:d4:4f:6f:c0:e5:a4:5c:75:49:dd:9d:e8:1f:
                    ea:ad:8f:fe:1e:11:48:9d:a2:c3:37:f5:ea:60:34:
                    52:af:ec:32:d3:6a:01:c6:fd:61:33:1a:27:d3:19:
                    51:38:01:14:8a:4f:9b:b1:5f:de:8e:ec:dc:92:53:
                    2f:15:36:6a:2f:d1:1f:3e:6b:d0:c9:24:a2:4a:64:
                    73:d6:9d:c4:84:a4:b7:77:72:88:c6:65:03:4b:06:
                    df:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:2B:5B:C0:91:61:25:50:27:0E:F4:6C:6E:6B:17:BB:A6:0F:B1:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/6b983b9b-3d7a-3d9e-8138-1eb898f0fd33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl

            X509v3 Authority Key Identifier:
                keyid:DC:75:7C:13:7E:A8:82:8E:7C:F9:53:75:19:D0:B1:85:4E:C5:3F:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:400:ff00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:b4:a1:ff:a9:84:f8:c9:6d:00:ca:55:2d:5b:ca:18:a0:36:
         27:56:37:0e:dd:6b:d0:6a:58:bc:a7:7b:4a:df:10:dc:5f:7c:
         c2:9c:b3:06:13:e3:d5:50:31:c4:1e:b7:a6:94:60:fc:3c:4a:
         28:06:e1:52:da:84:5c:61:2d:cc:f2:6f:2f:43:0f:08:b9:cc:
         23:61:59:35:20:98:46:d1:3a:51:f0:d4:e3:9f:70:18:5b:d4:
         96:60:13:3d:ed:56:9c:b5:0d:ae:1f:ef:83:1f:b9:86:a1:a0:
         98:75:b7:02:30:a4:a8:29:11:b2:58:36:7e:99:9f:4e:8c:dd:
         ef:41:59:de:27:16:e4:61:c1:bd:59:2c:52:2d:14:32:b5:72:
         cc:c5:ad:ac:bf:fd:6e:3e:c3:89:fe:7f:57:f9:e6:24:25:d7:
         08:c8:f3:56:b9:cb:e4:b6:00:a7:bf:2e:c2:80:ba:7b:2b:81:
         c1:78:d8:85:cb:52:d0:71:dc:1d:ee:77:27:ad:3b:6c:2b:50:
         fc:b5:b7:06:54:5f:cc:d1:75:e5:d9:20:0f:f8:50:af:31:45:
         38:8e:97:66:2b:2e:32:26:ac:b4:c1:6b:de:a6:da:1b:04:98:
         1c:36:25:3b:54:b6:b4:bd:78:be:fc:9d:1a:4f:dd:a9:d6:31:
         cc:2f:1d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:52:10 2024 by rpki-client on console-ams.rpki-client.org