Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/64daa7c2-736b-3c7b-9ab9-c9d30090beff.roa
File:                     64daa7c2-736b-3c7b-9ab9-c9d30090beff.roa (raw, json)
Hash identifier:          uU241YR9HDSz7jII/MfzMek0lUs+CNJSY3WdXQm47mw=
Subject key identifier:   9B:94:3E:10:20:A0:67:1D:5A:BA:A1:51:96:BD:EA:63:E2:A7:4B:89
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F43285845D50393742EDF4FA897886880
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/64daa7c2-736b-3c7b-9ab9-c9d30090beff.roa
Signing time:             Sat 11 May 2024 01:00:27 +0000
ROA not before:           Sat 11 May 2024 01:00:27 +0000
ROA not after:            Fri 09 Aug 2024 01:00:27 +0000
asID:                     54113
IP address blocks:        2620:11a:c008::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d5:03:93:74:2e:df:4f:a8:97:88:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: May 11 01:00:27 2024 GMT
            Not After : Aug  9 01:00:27 2024 GMT
        Subject: CN=f8166fbc-05d7-4fa0-9121-7f2ae93314f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:52:70:04:d6:b9:5c:21:f7:34:0a:0c:ea:c3:
                    ba:ac:42:a2:57:76:8b:90:68:72:c9:44:c8:a3:bb:
                    af:5a:8f:c2:b8:ea:62:dd:3a:95:a4:65:20:b4:1b:
                    9d:de:ea:56:f5:27:5a:c2:85:08:cf:02:48:60:f8:
                    eb:a9:49:dd:2e:72:ec:94:66:d2:2b:71:21:1d:c5:
                    8b:2d:7c:93:f8:d6:76:8e:39:80:c1:fa:71:17:f8:
                    8c:f0:fd:01:59:a1:76:0f:e1:8f:78:63:2b:93:d9:
                    53:c4:cf:8b:34:62:7d:c6:a5:1c:e7:ec:9d:8c:5f:
                    b2:2e:9c:a8:c9:f2:79:07:1a:c9:a7:2b:82:72:1c:
                    f7:53:34:2f:a9:af:0e:b4:92:7c:6d:a5:18:e1:62:
                    8a:a1:53:6f:78:2a:06:43:24:09:41:ad:56:82:29:
                    45:f5:26:07:66:37:80:a6:75:0b:0a:b3:36:e0:34:
                    69:b0:54:d3:93:52:89:92:8d:f1:ee:1e:12:d1:00:
                    bd:78:e8:ec:b0:e3:87:07:00:81:04:8e:ef:4d:fc:
                    3c:6a:86:f2:41:b1:a4:39:99:7d:dd:9c:ed:1b:db:
                    a2:ef:bf:72:5a:7f:a5:21:ec:8d:45:b5:4a:41:f9:
                    32:6c:4a:63:77:da:c8:3e:83:c5:44:a5:e7:4b:54:
                    d8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:94:3E:10:20:A0:67:1D:5A:BA:A1:51:96:BD:EA:63:E2:A7:4B:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/64daa7c2-736b-3c7b-9ab9-c9d30090beff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:c008::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:5d:c0:ac:70:08:ca:d5:0c:86:6c:e8:8e:33:c6:0e:4e:33:
         28:b8:66:35:47:8e:83:ab:42:13:4c:ef:19:5f:0c:b2:30:ef:
         85:15:f5:e0:19:91:8c:99:11:7c:0c:34:5a:60:8e:19:42:95:
         6e:45:a0:a1:75:25:6b:7c:3f:12:06:c6:78:ef:13:e5:36:45:
         c9:41:ac:7a:72:b5:97:e0:5b:a9:47:2d:9e:42:0e:4f:99:b9:
         07:01:dc:48:c4:0b:85:cc:f2:8a:a4:cd:77:18:40:d3:e6:12:
         8c:95:7a:a7:b7:1b:37:34:07:09:ab:d0:ec:e4:f0:67:ee:9d:
         fd:9b:32:1b:20:0e:70:57:c8:a7:36:de:94:d5:72:02:22:62:
         b8:ca:77:51:cb:3e:2a:5e:15:37:45:85:84:23:d9:3b:40:b8:
         fb:36:ec:ae:34:63:e1:20:64:e7:1d:c1:33:10:fc:17:a0:51:
         5d:d4:d6:22:df:4d:ff:4a:12:7e:bd:79:dc:3a:31:3f:6c:fd:
         fe:b1:c6:ff:ac:a7:cd:f7:b8:c6:b3:1a:1c:28:75:c0:9e:e9:
         ff:30:14:cf:96:02:7b:2a:d8:d9:1d:27:81:4e:a1:0a:c5:68:
         ba:1d:c4:44:b3:cb:a6:3c:7b:6c:cd:38:57:1c:cf:b0:f6:e7:
         9e:bd:d0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 23:39:43 2024 by rpki-client on console-fra.rpki-client.org