Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e50f05de-bce4-36e8-a1e9-1fab8ed0662f.roa
File:                     e50f05de-bce4-36e8-a1e9-1fab8ed0662f.roa (raw, json)
Hash identifier:          R0yAizZgnDSrtyP0lKWDzuDjz1rB+DlLCq7ul15R0aA=
Subject key identifier:   A0:8A:CE:29:9E:16:FC:47:94:03:E9:70:F6:62:D0:E8:15:94:51:0D
Certificate issuer:       /CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
Certificate serial:       010D0C9F432858455FC2DB2941BB39E0E080BF00
Authority key identifier: 96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e50f05de-bce4-36e8-a1e9-1fab8ed0662f.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     8070
IP address blocks:        2607:f368:a004::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:db:29:41:bb:39:e0:e0:80:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=9e3a32cb-0c14-4924-884a-abeed9781f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e0:1f:44:9c:94:40:aa:99:26:6f:ec:a1:0a:
                    e1:39:33:92:23:96:74:1d:d2:d6:5f:e8:76:f1:d9:
                    4c:24:c2:e8:14:ab:87:8d:63:4c:8a:6c:9c:87:7c:
                    82:2f:8e:b3:a5:7a:0f:31:eb:03:6c:5d:3f:ea:e7:
                    bf:7b:c1:27:82:c8:04:2e:d5:7f:6f:fc:58:a6:1c:
                    05:60:00:c7:69:78:b4:1a:19:21:0d:71:36:94:93:
                    23:ae:23:a3:a9:fb:e6:26:4b:05:72:f2:7c:0b:37:
                    67:c3:00:dd:be:d3:c2:dc:fc:c2:45:f2:6c:4b:2c:
                    f8:8c:2e:e8:26:a0:7f:2c:a2:cc:79:52:c8:e3:90:
                    2c:7e:77:07:e9:ea:5d:a3:72:b1:e4:f1:f2:83:9d:
                    25:d6:1b:a8:11:8b:ae:f0:1a:07:c7:81:fa:2c:ff:
                    4f:f8:66:db:66:08:07:1f:be:49:70:72:37:61:f6:
                    72:0d:08:b5:90:c5:87:4f:38:1d:ab:2c:ca:08:5c:
                    56:54:99:35:17:79:d4:33:b0:12:51:26:8e:68:bb:
                    4f:52:8b:fa:8b:c4:93:83:84:f6:bd:7e:be:f0:7f:
                    f6:bf:48:b3:a4:06:30:3f:c2:b3:94:aa:52:34:31:
                    5f:36:cc:a7:76:ea:f6:ef:57:93:29:b8:08:dd:4c:
                    76:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8A:CE:29:9E:16:FC:47:94:03:E9:70:F6:62:D0:E8:15:94:51:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e50f05de-bce4-36e8-a1e9-1fab8ed0662f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl

            X509v3 Authority Key Identifier:
                keyid:96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f368:a004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:b5:3c:10:04:7c:1e:34:b0:32:db:1d:ac:89:74:c7:2c:38:
         d8:f9:7c:09:dc:3c:c6:c7:36:3a:60:ff:d9:46:56:2b:06:c7:
         03:c6:35:e2:9d:dc:7d:0f:70:2a:21:e7:33:f3:64:78:ec:ef:
         0a:8f:08:33:0d:3a:06:67:8b:2d:b8:06:7b:94:9e:58:4a:89:
         cc:07:e8:04:5b:c1:ea:d4:6f:ad:e1:69:17:fd:4c:5f:92:25:
         e4:8f:c4:93:0f:6e:72:f8:16:c9:98:64:bf:d2:f3:10:69:fd:
         28:13:b1:c0:88:ea:96:2f:b0:5f:65:c4:83:a4:7f:d5:b9:1c:
         2d:1e:30:f9:26:c9:a8:ae:c9:31:43:07:23:e9:3c:d2:45:a6:
         73:d2:d6:3f:65:dc:57:61:a8:fb:82:6e:6a:c5:45:a2:cc:7c:
         ef:87:76:ba:dd:92:85:e8:07:88:93:ab:06:02:7c:49:56:76:
         cc:06:5c:d2:c9:10:8c:6d:7a:d2:b5:72:bb:e0:03:d4:96:47:
         c3:b6:0f:d1:d2:4d:bb:34:ca:ce:06:dd:e2:23:18:41:ed:ba:
         c1:c3:34:7f:68:81:52:db:e1:9e:82:77:c8:3b:77:76:67:62:
         cb:7e:8a:a1:6f:02:4d:17:69:4d:0c:73:87:1d:b1:e9:9c:c3:
         95:cb:bd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:57:47 2024 by rpki-client on console-ams.rpki-client.org