Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/06fbf2c0-813d-3842-8c17-978a309b106c.roa
File:                     06fbf2c0-813d-3842-8c17-978a309b106c.roa (raw, json)
Hash identifier:          zmn1ABpMOmQjkWxaYwWd7gBhE+xp46MbT4CI0co0fwU=
Subject key identifier:   83:A0:04:47:4F:3C:CD:A5:5B:ED:8E:74:D6:62:3B:03:85:04:7F:4E
Certificate issuer:       /CN=1fb001d4-3a2b-436f-a572-51822a315945
Certificate serial:       010D0C9F43285845734DB25F0051CF7103ECAF00
Authority key identifier: 74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/06fbf2c0-813d-3842-8c17-978a309b106c.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     395363
IP address blocks:        2620:129:6010::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:b2:5f:00:51:cf:71:03:ec:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fb001d4-3a2b-436f-a572-51822a315945
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=f2001652-df54-437a-8c65-bcf52ce4d8d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:cf:fe:6e:5b:7a:c3:87:cc:91:fe:88:77:76:
                    31:20:57:9c:b6:01:48:da:d6:e9:a7:0a:29:1b:35:
                    aa:07:58:8d:50:47:b8:89:9c:39:90:cc:84:b3:ca:
                    b4:e5:bc:35:80:c1:bd:56:21:b6:9e:12:53:08:36:
                    39:ef:28:40:87:22:c9:f7:b2:16:d3:d6:41:18:d1:
                    5b:41:d9:b6:28:45:bb:1d:b0:c2:a1:d5:90:79:fa:
                    24:79:1a:a1:71:64:1b:8e:27:a7:0d:c7:90:62:97:
                    ca:69:66:74:ec:21:5e:26:f7:de:d5:bb:24:18:7f:
                    ca:23:35:4f:47:81:ed:11:ef:ad:65:a5:13:94:a1:
                    15:ae:43:db:69:f6:31:98:94:9e:6d:ce:84:82:10:
                    de:c3:ee:50:db:c1:58:13:22:46:b6:27:f5:08:92:
                    0e:5d:3d:d6:a3:79:d2:ed:0d:d1:1f:6f:66:4a:2b:
                    b8:fc:8a:f7:68:48:3f:4a:0f:22:b4:64:ab:4b:bc:
                    83:4b:60:7f:b4:06:dc:98:11:c6:12:0b:a1:0c:af:
                    0a:8a:2a:85:7f:88:b7:c3:96:61:a9:7f:0f:7d:0f:
                    cb:57:46:8b:a8:a7:2c:85:a2:a6:55:86:34:87:fa:
                    82:8c:27:57:9c:0c:0b:4b:8c:70:85:0f:e7:61:bd:
                    a0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A0:04:47:4F:3C:CD:A5:5B:ED:8E:74:D6:62:3B:03:85:04:7F:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/06fbf2c0-813d-3842-8c17-978a309b106c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl

            X509v3 Authority Key Identifier:
                keyid:74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:129:6010::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:ea:dc:0e:99:fa:03:89:da:d6:a0:63:3d:4b:0b:2d:72:67:
         2a:a4:ab:80:8f:db:1a:c3:de:a2:10:a3:21:47:43:b7:fc:5e:
         31:f4:8c:b6:ce:bd:36:69:91:9a:af:1b:c1:0a:e7:ed:f5:2b:
         58:ff:f9:dd:cd:3e:89:02:20:d8:68:6c:40:0c:8c:b3:fc:2c:
         d4:a8:6c:4a:41:99:c3:1d:8f:96:a5:fd:07:f0:69:eb:d6:29:
         0f:89:93:26:5d:f2:a5:38:fc:f1:52:41:53:27:d1:72:fb:97:
         5b:f5:5b:0f:16:2a:0d:31:af:b1:a2:a6:d6:8a:63:ee:1a:50:
         ea:4b:40:dd:76:e2:2f:10:59:07:4d:79:da:9b:93:d5:18:c8:
         a0:7e:e1:78:85:27:0b:9a:a3:02:bc:cf:65:bb:1a:7b:a0:a0:
         1c:89:af:ad:60:30:91:3b:8f:9a:12:42:39:0e:23:b9:10:cb:
         83:02:25:37:01:6d:3f:a3:46:86:18:5a:0b:f0:3f:24:82:52:
         24:02:a2:0a:15:18:c6:08:cb:b3:39:3d:b9:d7:73:11:c9:17:
         3b:ca:ff:76:bf:47:8a:e9:76:75:fd:ba:30:5b:1f:1a:f4:13:
         21:63:f6:8d:52:38:f4:f4:c4:c5:87:45:8c:28:bc:d2:e4:79:
         dc:b3:b7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:45:43 2024 by rpki-client on console-fra.rpki-client.org