Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06b065d3-1fa7-3e57-ab80-fae4d9bbd61f.roa
File:                     06b065d3-1fa7-3e57-ab80-fae4d9bbd61f.roa (raw, json)
Hash identifier:          xx3w+QpSxzgL80eeEmIgS0mfcF1klfK99bS2tAD+bpw=
Subject key identifier:   06:17:24:8D:C3:FA:DD:55:E4:E2:B5:03:14:99:EC:A1:B9:16:9E:F1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584582A88924FB5F4D952358FC40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06b065d3-1fa7-3e57-ab80-fae4d9bbd61f.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     12222
IP address blocks:        2001:4878:c037::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:89:24:fb:5f:4d:95:23:58:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=9bc52ae1-ba79-46c0-822a-8a6a64851b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:66:a1:df:b0:47:c4:1e:17:67:c5:20:2a:4e:
                    58:4b:90:4c:da:6a:8a:a1:72:a0:ef:9c:8e:b4:2b:
                    d7:c7:de:40:85:4a:21:ff:c8:e0:f8:8d:c2:51:f9:
                    ce:19:e3:e1:9e:64:8c:37:64:5c:49:02:d4:b5:d4:
                    f2:1b:17:b0:2c:ea:e2:d4:f6:46:a2:ab:8b:d0:2a:
                    93:04:e5:1b:97:ad:82:39:5a:ba:b2:e2:36:1f:d9:
                    03:82:87:59:2f:31:69:da:5f:4d:fc:8c:8c:b6:6d:
                    0b:c2:52:84:35:db:3a:d1:1d:f7:69:46:64:23:e6:
                    c0:0c:f1:21:2e:fd:7f:98:0f:12:be:72:ec:16:be:
                    08:61:cb:94:33:34:b4:4e:42:3c:a9:e4:fa:84:96:
                    51:5c:57:ce:73:9c:ae:c4:93:d3:ec:e2:44:44:c0:
                    af:a2:56:51:3f:48:42:34:f4:b4:0d:22:fd:94:87:
                    bb:5b:51:d4:01:fa:4e:6b:e1:a1:f3:94:ca:32:35:
                    38:fa:4f:d9:62:ab:73:bd:6b:ce:3b:c3:97:ef:5b:
                    55:03:41:b8:1a:eb:ca:57:d3:83:b1:20:fa:1c:91:
                    e2:a4:9d:48:62:28:95:85:dd:f9:9b:a6:a5:cc:87:
                    b3:4f:32:57:45:8c:40:7e:a0:fe:2c:7f:df:6d:b4:
                    ec:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:17:24:8D:C3:FA:DD:55:E4:E2:B5:03:14:99:EC:A1:B9:16:9E:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06b065d3-1fa7-3e57-ab80-fae4d9bbd61f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:c037::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:a5:2f:da:a2:33:0f:6d:86:5d:4d:3c:25:1f:7c:14:5b:a1:
         99:14:2e:a0:c7:c7:ff:7f:c6:34:66:2b:af:12:55:cf:da:11:
         73:f6:b8:c0:57:dc:1e:ca:60:13:d2:7e:12:3d:fd:3d:1e:ed:
         45:01:bd:aa:30:ea:80:54:1a:7f:ef:5c:ce:c2:7a:a1:93:d9:
         21:49:ff:73:27:b5:7e:fc:c2:7c:7d:38:59:a6:53:1f:fe:97:
         ba:0f:cc:42:cd:e9:ab:5c:0a:b5:8e:c2:40:5b:30:d1:7e:f3:
         21:54:48:00:42:29:ee:b5:aa:5f:76:68:be:b3:34:95:2d:af:
         60:40:14:1f:69:3f:69:65:f1:30:77:0d:36:44:13:15:1a:47:
         50:ff:29:28:90:85:5e:e9:9d:4d:f0:44:3d:7c:64:f9:38:69:
         d9:e4:3b:5c:aa:70:c1:15:56:e9:03:69:83:0a:2a:24:36:c3:
         88:3a:34:6a:37:3c:f4:7d:08:a5:60:8c:0e:24:ce:38:0a:2e:
         97:28:f9:ac:d4:14:7f:f3:79:f7:09:b3:19:f6:2a:d7:2c:d1:
         35:e7:69:8a:75:98:27:fd:11:c9:96:02:23:57:85:89:c7:fd:
         b9:fa:1a:ae:60:dd:a0:7a:c3:98:d6:19:30:18:fc:b2:fe:b4:
         9a:46:61:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:15:13 2024 by rpki-client on console-ams.rpki-client.org