Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/b774099a-dd3b-3026-8a7d-507329420ac7.roa
File:                     b774099a-dd3b-3026-8a7d-507329420ac7.roa (raw, json)
Hash identifier:          6emsJb4uPRLfiJiNnrUqgFOx1vQWjV5ErEEZGd5uZz4=
Subject key identifier:   4B:1D:2C:99:0C:78:4B:37:0A:D8:B2:0F:D8:D3:E8:26:62:71:AB:32
Certificate issuer:       /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86
Certificate serial:       010D0C9F4328584530BE9983D8C0A8E4DD055E80
Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/b774099a-dd3b-3026-8a7d-507329420ac7.roa
Signing time:             Wed 13 Mar 2024 04:48:55 +0000
ROA not before:           Wed 13 Mar 2024 04:48:55 +0000
ROA not after:            Tue 11 Jun 2024 04:48:55 +0000
asID:                     211014
IP address blocks:        2604:f440:b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:30:be:99:83:d8:c0:a8:e4:dd:05:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86
        Validity
            Not Before: Mar 13 04:48:55 2024 GMT
            Not After : Jun 11 04:48:55 2024 GMT
        Subject: CN=6db0a792-5a29-4b47-b263-581f46658c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0f:87:0b:a9:11:68:37:b9:6a:75:4c:01:9a:
                    79:07:24:28:6a:ae:27:02:4a:59:23:1c:5a:a9:78:
                    c4:33:c2:99:b9:70:20:c5:fd:97:ea:48:0d:df:84:
                    aa:e1:70:09:01:a2:bc:06:24:51:77:fc:51:7a:4b:
                    e1:81:c6:1b:2f:ff:4b:e3:e0:b6:50:ab:05:62:85:
                    39:f3:e6:0d:65:ba:af:ed:99:97:36:18:7f:d5:72:
                    49:1f:c3:41:a6:d9:6f:ad:12:8c:78:c1:9d:88:f2:
                    75:81:c9:12:15:63:de:a8:c8:b4:cf:19:b5:b9:d0:
                    a1:63:72:53:08:be:9f:65:83:c8:f0:1b:45:1b:27:
                    49:e6:8a:e6:d7:2b:47:cc:27:c6:db:54:84:be:16:
                    04:2b:a7:02:e0:94:d6:e6:66:bf:71:26:50:c7:60:
                    62:aa:4c:a7:83:4d:74:c4:be:1f:29:6f:50:33:56:
                    a1:1a:72:12:27:09:7a:09:a8:66:51:f8:78:e6:90:
                    a4:a6:27:30:56:c3:cc:28:3b:fd:c2:1f:e0:41:e1:
                    f7:25:1b:d3:fd:0a:17:df:f1:fc:79:bf:ad:76:92:
                    24:99:82:4e:69:72:f6:5d:a5:27:3e:47:1b:3a:c8:
                    51:6b:70:f2:eb:32:c3:5d:05:e2:b0:d1:00:72:66:
                    ec:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1D:2C:99:0C:78:4B:37:0A:D8:B2:0F:D8:D3:E8:26:62:71:AB:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/b774099a-dd3b-3026-8a7d-507329420ac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl

            X509v3 Authority Key Identifier:
                keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:f440:b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:4f:66:d6:2b:a9:f7:be:03:29:73:2f:f6:a7:17:e6:b2:2e:
         19:64:77:fa:c2:b8:98:f3:30:4e:06:49:d3:65:6d:e8:77:3f:
         f5:c7:0f:d3:8f:f9:a4:d5:aa:e5:97:ab:7b:1a:d1:e4:a7:c6:
         f5:8c:bb:c9:dd:f7:27:1c:9a:c3:c8:fd:d7:c1:20:fd:75:46:
         15:ff:14:df:f9:ba:68:75:58:dd:fd:94:7d:9e:28:4b:a3:a2:
         3d:df:03:c6:bc:03:46:09:8a:5c:7e:51:5e:bb:40:c6:09:f9:
         22:1c:ab:d7:39:96:ab:87:70:4e:ad:2e:3a:c8:ce:04:41:bc:
         a8:7d:fd:ac:6d:30:40:8a:77:ee:3f:97:f6:5c:7a:1d:83:04:
         c1:1f:e7:c1:69:73:95:79:67:1b:f9:1c:20:58:3f:cb:8b:79:
         7c:e1:2e:14:f1:36:e8:51:bb:0c:ac:7c:88:ec:6d:16:84:6e:
         74:4e:1a:b8:93:98:bc:64:c7:a1:58:5f:b3:66:ee:b0:cf:61:
         8d:f7:78:e5:54:79:36:09:66:8d:be:8b:f9:6b:7f:0a:f1:c7:
         fd:d2:a4:2f:6b:a7:c0:21:f5:bb:6b:50:bf:ef:37:dc:9c:41:
         0a:bb:b0:76:b7:d5:16:e1:2c:8d:4e:65:21:ee:5e:87:d6:3f:
         ec:f0:81:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:01:27 2024 by rpki-client on console-fra.rpki-client.org