Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/64fe46c0-aa6a-30bf-9063-208fb215de39.roa
File:                     64fe46c0-aa6a-30bf-9063-208fb215de39.roa (raw, json)
Hash identifier:          MWxcS0EgjYqOLNxjHe4tnX3vI5AgOnzqXYbrKnmEab4=
Subject key identifier:   45:B3:77:48:28:77:DA:A5:65:72:F7:7F:88:A6:6F:D3:62:E9:2D:08
Certificate issuer:       /CN=22a89d78-807f-48bb-8913-4e15f4878bfb
Certificate serial:       010D0C9F43285845AC88BF946AC0AD6BB9129680
Authority key identifier: 41:26:61:4E:B6:7D:B9:81:05:C1:90:B7:DD:5F:F9:0D:32:E4:20:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/64fe46c0-aa6a-30bf-9063-208fb215de39.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     13786
IP address blocks:        2605:4a40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/22a89d78-807f-48bb-8913-4e15f4878bfb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/22a89d78-807f-48bb-8913-4e15f4878bfb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:88:bf:94:6a:c0:ad:6b:b9:12:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22a89d78-807f-48bb-8913-4e15f4878bfb
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=a88d5806-1a8c-4f4d-b08c-22449a92b7db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a2:be:f0:39:f2:2a:3e:23:18:80:a5:70:4a:
                    3d:e1:d8:d9:41:fc:29:9b:42:20:05:9f:31:7d:f7:
                    d0:4c:57:32:d0:60:1e:58:75:6f:69:90:29:ee:ad:
                    99:d4:b3:90:a3:ba:0e:ca:22:74:93:ad:69:02:3b:
                    74:68:9b:9c:fa:73:98:96:53:5f:34:24:4f:a7:a2:
                    b5:eb:00:ec:0a:74:2e:f8:df:ae:12:84:8d:70:ad:
                    3a:10:af:c2:fb:f9:b1:fa:4d:13:91:69:bd:cb:4b:
                    3c:a8:42:c9:5a:ee:b1:6b:79:59:fc:df:05:84:78:
                    4d:bf:b7:da:f9:94:ac:17:b1:10:82:23:cf:84:f3:
                    74:f0:e8:f5:b9:2a:4e:bf:87:1c:7b:de:c7:77:8f:
                    df:11:20:d1:9f:6d:34:29:5e:f5:ab:45:f0:b7:41:
                    8d:1b:50:6e:bd:67:5d:15:31:73:ce:a7:ac:d4:11:
                    01:99:d7:dd:65:34:9d:c4:82:63:0b:e3:52:e0:a7:
                    6f:4a:ce:4f:23:73:eb:38:b2:fd:61:3c:39:85:9f:
                    e5:a8:5a:a1:85:19:ab:dd:59:ce:1f:a5:8a:66:40:
                    d7:f8:77:de:04:50:02:59:b2:09:6e:86:b4:4f:ed:
                    ae:7b:15:c4:14:8c:c4:0d:3c:45:c9:2a:93:ac:a9:
                    d3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B3:77:48:28:77:DA:A5:65:72:F7:7F:88:A6:6F:D3:62:E9:2D:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/64fe46c0-aa6a-30bf-9063-208fb215de39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/22a89d78-807f-48bb-8913-4e15f4878bfb.crl

            X509v3 Authority Key Identifier:
                keyid:41:26:61:4E:B6:7D:B9:81:05:C1:90:B7:DD:5F:F9:0D:32:E4:20:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4a40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:23:3a:94:03:3a:38:51:e6:86:fe:63:7b:ed:6d:25:b7:bf:
         4d:b6:d1:5c:9b:db:dc:bc:45:2e:86:1d:72:f1:57:7a:8a:e5:
         f4:2a:0b:0b:7d:de:82:af:7a:c6:d7:e9:62:d0:87:79:f2:cc:
         fb:1a:3a:a9:e7:1a:98:58:34:fc:58:bb:f2:66:3a:a2:ab:23:
         0c:a7:94:c1:8b:fb:e5:b1:e0:f5:b4:dd:83:ad:d4:f1:41:83:
         f9:86:84:f3:ea:37:59:02:d6:5d:c9:9a:6f:b2:5d:02:de:e8:
         bf:5f:4e:22:65:4a:2a:20:f1:0b:1a:26:c7:f8:bf:e8:59:88:
         9d:1c:b6:9d:98:05:a3:42:7e:38:77:99:43:d9:4d:f2:f0:34:
         7f:b5:98:51:7a:98:1b:b6:7e:b7:e7:c7:5e:ff:3a:72:5f:c5:
         f3:c8:37:36:2d:dd:72:0f:0a:fb:b4:52:37:84:e9:4b:c6:46:
         26:d9:6d:1a:3b:08:6a:5d:52:c4:82:69:a7:4a:6d:f5:df:83:
         33:00:97:60:1c:65:1f:89:de:c2:c1:be:e2:38:1c:bb:e6:3f:
         6a:32:02:1a:4d:d0:02:ee:20:ad:9c:cd:42:b9:9c:74:93:92:
         ef:a5:1d:ef:f9:65:2b:9b:43:65:09:c6:f1:1a:d5:a9:b1:f4:
         07:40:c1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 15:57:04 2024 by rpki-client on console-fra.rpki-client.org