Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/84eba332-7cf8-3813-9951-e44ab46403d4.roa
File:                     84eba332-7cf8-3813-9951-e44ab46403d4.roa (raw, json)
Hash identifier:          B3tasU+XPpuCpbpgx6Q/6WqT0yYt9yTBTHwWTZGbkfA=
Subject key identifier:   98:37:00:40:E5:CB:B0:37:08:C8:DF:99:5A:F8:EA:F5:D3:89:F4:6C
Certificate issuer:       /CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
Certificate serial:       010D0C9F4328584582A89C290E9D5CAAC3B05080
Authority key identifier: 96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/84eba332-7cf8-3813-9951-e44ab46403d4.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     14618
IP address blocks:        2607:f368:804::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:9c:29:0e:9d:5c:aa:c3:b0:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=b19cd3e1-48c2-4a4c-b98d-488b8d2ea5e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:98:76:e9:f4:58:7c:1e:2f:19:eb:f2:76:6b:
                    00:39:c0:36:88:c4:de:cf:f6:a7:41:b3:f3:24:77:
                    f9:27:45:d5:c6:fe:4a:9c:8e:37:1e:bf:87:01:6e:
                    7d:4b:4c:05:7b:5e:ea:48:fe:15:b4:c9:1b:a3:22:
                    6f:25:a3:c6:14:b5:c4:41:45:2d:dc:76:57:12:4a:
                    56:46:46:02:f2:7c:29:9a:36:6e:fa:0e:ea:33:2b:
                    34:36:e1:ef:3d:b2:8d:b7:f3:05:ae:7f:6d:75:9a:
                    58:77:35:97:0a:73:be:d1:40:0f:0f:8c:83:9b:35:
                    6c:fb:81:49:0f:25:fe:30:0f:50:65:f3:63:a7:1f:
                    1f:f9:f1:18:28:db:9d:6a:02:39:46:3a:7c:11:11:
                    2b:ac:cb:2e:11:2e:ba:2f:72:3f:34:5b:af:22:93:
                    ef:85:42:59:ff:17:8f:b4:64:92:b3:48:26:b9:b8:
                    eb:c0:53:a6:63:75:de:c8:9c:92:99:fa:7a:98:dc:
                    da:aa:ba:33:4c:73:62:dc:ff:2c:6e:41:8f:ad:32:
                    04:79:62:70:b1:70:c4:31:e6:22:a9:6b:cc:d3:1b:
                    5b:cb:00:fe:4c:7b:ba:ed:31:a4:50:3b:4a:63:97:
                    e2:43:cb:32:24:d3:72:2c:1d:06:d1:46:60:72:e9:
                    d4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:37:00:40:E5:CB:B0:37:08:C8:DF:99:5A:F8:EA:F5:D3:89:F4:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/84eba332-7cf8-3813-9951-e44ab46403d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl

            X509v3 Authority Key Identifier:
                keyid:96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f368:804::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:5d:8a:07:11:7c:95:cb:48:aa:58:80:b8:08:09:91:42:66:
         95:0b:8f:7f:56:6d:37:a3:1a:8e:ff:52:1f:3e:16:15:b4:10:
         e2:ab:ec:e2:b0:16:b5:81:0a:f4:7e:f8:37:93:bb:41:ca:29:
         85:e5:56:10:2a:6f:6d:48:fa:9a:ab:7c:c8:9d:87:19:23:3b:
         ff:f0:e0:f3:15:bc:a3:be:dd:81:a0:7b:55:32:68:ef:32:97:
         cf:1b:b5:88:75:2b:df:34:9f:d8:1e:89:87:8e:60:5f:43:9e:
         ff:b5:72:d1:5c:34:67:46:9e:94:36:60:fe:e2:20:8d:29:fb:
         f7:61:7b:e5:5d:56:c2:b4:d0:56:a6:bd:a5:18:ec:1b:0f:3e:
         a4:b0:0a:dc:d3:2b:4d:30:c6:7b:6e:24:3d:e9:7a:28:cb:e6:
         44:58:16:e9:ac:7a:1a:46:dc:c0:96:9e:bf:77:09:87:4d:f3:
         b4:23:95:6a:33:81:de:49:65:26:2e:77:80:fe:63:e4:31:a2:
         d8:eb:c8:5f:34:f7:ff:6e:37:3e:69:6e:d5:9b:54:70:59:0f:
         cf:02:7c:9f:00:1d:69:e6:a1:67:b4:e2:c5:db:fc:09:03:5c:
         f2:0b:e9:9c:49:34:43:b5:7d:b1:06:b8:e4:17:a4:dd:14:cd:
         90:5c:79:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:27:20 2024 by rpki-client on console-fra.rpki-client.org