Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/ca06bd9b-beb6-3f78-950b-575c93605483.roa
File:                     ca06bd9b-beb6-3f78-950b-575c93605483.roa (raw, json)
Hash identifier:          GCH2WwuL3jCHYlIO1Z3ewKUNrFGf1I+Ft4bEby4EH8U=
Subject key identifier:   E3:DA:BB:53:43:40:1C:60:05:28:B3:54:3B:A9:5C:F2:D7:FF:6E:C7
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F432858458C6DD2589A6FDE72BFEDA3C0
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/ca06bd9b-beb6-3f78-950b-575c93605483.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     46562
IP address blocks:        2607:6b80:67::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:d2:58:9a:6f:de:72:bf:ed:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=13012d22-cd46-4606-bdd9-ca26a6917512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:89:9e:0e:5b:0c:22:83:ce:89:eb:0f:e6:03:
                    13:5a:39:4b:43:f8:38:49:92:73:00:0f:d2:d0:96:
                    13:24:b4:42:c0:d2:ae:98:22:51:64:8f:0c:a4:17:
                    fe:a0:c0:aa:44:09:36:9a:55:2f:38:9e:4c:bc:4c:
                    3f:2b:d0:1b:a1:68:e7:b0:12:bc:c4:95:98:b9:01:
                    e3:ed:47:8d:2f:d8:e2:15:ea:a1:f1:60:3b:56:f4:
                    2a:81:e5:59:b1:3f:8b:d4:aa:a4:9a:2c:28:55:8f:
                    59:b0:62:74:38:c3:c4:05:2d:fe:ee:aa:29:b1:ed:
                    b9:27:25:b7:4d:a0:fe:6b:25:b0:d8:bd:50:69:96:
                    55:55:c8:0c:10:da:5f:33:37:a0:f0:1d:0a:9a:10:
                    4f:c6:8e:37:82:bf:50:44:3f:7a:c6:36:de:0d:26:
                    13:0a:75:1b:e4:04:75:2a:81:74:86:40:ab:ea:99:
                    a6:55:4f:8b:22:b3:47:0c:a5:65:26:cd:29:3b:84:
                    4b:da:ef:f8:dc:6e:30:7b:8f:dc:1f:65:c0:da:4d:
                    a1:66:57:cf:98:39:35:d6:a0:0f:40:51:86:38:a6:
                    b5:6b:c5:3d:35:6a:3c:3d:e1:20:3c:03:bd:cf:b3:
                    fb:88:d4:ba:60:56:ce:3e:c9:e3:49:37:27:7d:07:
                    ae:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DA:BB:53:43:40:1C:60:05:28:B3:54:3B:A9:5C:F2:D7:FF:6E:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/ca06bd9b-beb6-3f78-950b-575c93605483.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:67::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:4a:aa:aa:2d:48:29:66:95:d2:7b:36:fd:c3:51:98:b9:5b:
         3c:63:3f:3c:d0:52:97:0e:7f:1c:ac:49:f7:64:02:36:dc:21:
         16:a2:27:06:db:2d:91:50:cf:09:a8:46:f7:62:70:55:77:10:
         7e:ca:b7:26:87:d1:0d:02:cd:51:b7:db:09:56:41:85:36:24:
         35:76:01:c7:d4:11:03:5e:36:ed:bf:87:a8:fd:7d:d6:97:33:
         4b:77:0a:4a:09:e9:e5:d2:79:e7:43:e1:69:e0:16:9d:cb:98:
         c3:d2:9b:f5:87:3e:05:4d:c7:6c:0e:1f:ab:01:77:3f:9f:2c:
         79:87:43:4f:c1:f3:92:4a:c0:6f:50:e9:46:70:e9:9c:a8:b7:
         48:25:c0:86:5f:67:7c:66:1c:2d:3c:99:e3:5f:d0:e5:44:50:
         59:cd:ac:ac:6c:1e:e2:8b:83:3a:63:96:f5:7d:5e:f2:b7:d5:
         ea:ca:08:d4:3a:13:6c:d0:fb:f8:02:3c:bc:a2:85:52:4d:64:
         e3:d0:22:b1:1c:74:d7:7f:12:ce:ef:0f:04:21:ee:3c:62:b4:
         01:93:e7:ab:66:76:3f:c0:af:d5:8b:f4:08:22:29:0f:26:60:
         49:ec:cd:cd:01:6f:c0:a8:43:7d:22:6e:d8:35:bb:81:a1:6b:
         e9:e8:bc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 21:35:27 2024 by rpki-client on console-fra.rpki-client.org