Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/5d8f3fe1-e905-3bc4-a6f1-e1ffa46eeb09.roa
File:                     5d8f3fe1-e905-3bc4-a6f1-e1ffa46eeb09.roa (raw, json)
Hash identifier:          AbkDhmzXPCN4JPjRnwft9VdNKPWdOwwGefCY+i4smek=
Subject key identifier:   A6:49:23:A7:FA:19:6F:3F:D8:43:E5:75:AF:EC:B9:A1:44:C4:C1:19
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F43285845A428CE93FBDC298520D336C0
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/5d8f3fe1-e905-3bc4-a6f1-e1ffa46eeb09.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     55081
IP address blocks:        2607:6b80:65::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:ce:93:fb:dc:29:85:20:d3:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=69fff244-7018-4cf7-8c8a-3dea1f4efed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c0:f9:03:dd:d1:a9:da:73:97:fb:21:d3:6e:
                    57:59:45:53:bf:fd:83:ea:bc:3b:9a:e4:bb:58:8b:
                    7f:0c:8b:20:eb:45:7a:e1:8c:97:ab:51:9d:a2:3c:
                    f2:8b:f1:c1:33:84:86:df:ce:d0:09:e5:98:51:32:
                    27:43:5f:38:77:91:05:5f:03:93:12:20:25:b1:6b:
                    d2:5e:f5:fe:a2:f9:da:e6:d4:d1:38:71:16:7e:c6:
                    57:e2:d6:24:93:27:00:8f:93:d1:a3:4d:39:7b:15:
                    61:23:c3:15:f7:9b:7e:81:94:99:10:4d:03:63:4d:
                    59:a7:8c:2e:6b:0c:a4:b9:bc:b3:7f:ad:c8:17:34:
                    51:1b:48:f2:07:86:1b:27:34:3e:23:e4:6f:f5:83:
                    cd:1b:49:76:10:8b:5b:d2:61:d5:d3:f8:f7:88:68:
                    12:4b:9f:1c:a9:0a:84:a7:d8:51:7b:75:19:5f:f5:
                    1f:96:36:31:54:2f:5e:ae:f7:28:c2:43:a1:38:49:
                    29:94:ea:53:8d:7a:f6:86:77:8e:f9:d1:36:79:98:
                    6b:68:6a:04:5c:5a:4d:16:c4:87:cb:c4:a6:7d:88:
                    70:2f:bf:91:81:9f:3e:96:c4:ab:8c:77:b9:ae:ac:
                    91:a1:80:58:14:41:b2:88:3f:48:c2:00:8f:b2:28:
                    7a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:49:23:A7:FA:19:6F:3F:D8:43:E5:75:AF:EC:B9:A1:44:C4:C1:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/5d8f3fe1-e905-3bc4-a6f1-e1ffa46eeb09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:65::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:20:62:8d:74:92:29:01:f9:db:ce:22:e8:e4:94:da:5a:75:
         e0:80:8c:a7:f0:af:42:1d:03:22:fd:fb:ab:ab:0a:ac:f1:28:
         b9:a4:c8:31:d4:8e:1c:02:a6:37:e0:57:92:03:79:bf:7a:1e:
         8c:06:a0:86:5c:b0:10:14:cc:a5:61:f9:72:4e:35:be:93:4b:
         d8:71:a1:47:9b:1e:be:d3:a0:60:a8:5b:3b:39:52:1d:99:d9:
         cf:b6:b5:9e:69:cd:e6:be:e4:ad:7e:d4:ce:ca:4f:cb:b5:0c:
         2c:21:bf:7f:50:79:ea:4a:c4:70:3c:af:bb:03:1d:29:35:fe:
         9c:de:34:9a:95:80:33:61:a5:32:70:7b:85:dd:97:7a:7c:b9:
         f6:93:de:69:cc:f1:38:5c:a5:c0:42:7d:85:80:c4:7d:6f:46:
         d7:e6:7a:69:d7:f3:ba:e6:f1:e9:36:ec:14:1d:f0:93:ed:8a:
         44:73:22:83:ad:6c:4f:45:6e:a5:6d:13:00:03:67:a0:12:5d:
         93:a5:1d:60:ee:5b:f0:af:fe:e9:92:09:5a:16:a5:39:78:96:
         df:d7:c0:04:e9:63:d2:7d:f1:22:88:ab:b5:cf:3c:0a:37:d3:
         93:ec:eb:33:13:f6:0f:a1:4a:e6:26:ba:88:c3:1a:ce:59:5a:
         8c:d5:34:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:16:07 2024 by rpki-client on console-fra.rpki-client.org