Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/93039a2f-e0a3-35e0-a67f-26e424ec9099.roa
File:                     93039a2f-e0a3-35e0-a67f-26e424ec9099.roa (raw, json)
Hash identifier:          UykxC7mJZhoR7qmXOCTZrPjQgILgcSM4VGXaIco5ufA=
Subject key identifier:   4F:A4:00:61:04:E7:FE:35:FA:24:0B:1B:D6:A7:59:97:83:5B:BF:3F
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F43285841E410D157598521BDEF895F00
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/93039a2f-e0a3-35e0-a67f-26e424ec9099.roa
Signing time:             Sun 14 May 2023 12:00:00 +0000
ROA not before:           Sun 14 May 2023 12:00:00 +0000
ROA not after:            Mon 04 Mar 2030 05:00:00 +0000
asID:                     5761
IP address blocks:        2001:4898:b080::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:10:d1:57:59:85:21:bd:ef:89:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: May 14 12:00:00 2023 GMT
            Not After : Mar  4 05:00:00 2030 GMT
        Subject: CN=7c4a1ec5-fd7b-4142-bc9c-70af8055b889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b2:b4:d5:b8:19:c1:0d:4e:fe:2b:83:57:08:
                    eb:a9:4b:4e:db:75:cf:40:4f:f6:b1:50:4d:16:a5:
                    31:73:f8:ad:3e:93:ad:77:8a:71:b2:c2:c0:de:3a:
                    87:b8:ec:be:d0:92:0c:2d:c7:4f:0f:4d:2d:88:95:
                    b3:90:c0:1a:c2:eb:8a:1b:a5:58:75:8c:6f:98:94:
                    7a:c7:d0:24:be:4d:15:76:8f:40:68:fc:6e:c8:fe:
                    94:7b:15:78:dc:bb:7f:c5:44:e5:60:60:9f:8d:1b:
                    95:dd:7d:37:29:4b:11:df:60:37:fd:9a:3b:54:90:
                    58:03:33:4c:32:8c:87:29:8c:b6:67:5b:48:32:16:
                    97:ad:84:70:bf:d3:62:9b:b9:e2:13:a8:b8:0a:bf:
                    cc:bd:4d:a3:9d:3b:f9:28:28:cb:68:2c:fd:d7:5b:
                    2a:d6:a6:1a:fc:52:66:de:e4:b2:f5:0e:83:2c:3e:
                    b5:85:95:cc:5b:f4:53:c6:15:76:37:3f:36:c7:81:
                    77:b3:bd:ca:35:2d:f5:50:91:51:ab:80:40:09:28:
                    0f:6f:c8:04:c5:5d:b6:0d:f2:a0:e2:5a:92:e8:dd:
                    de:3a:b2:69:7b:b6:cc:ec:cc:32:fa:3c:54:ea:94:
                    0e:51:a0:ef:63:bb:e9:03:7e:44:0a:67:68:ee:71:
                    e9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A4:00:61:04:E7:FE:35:FA:24:0B:1B:D6:A7:59:97:83:5B:BF:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/93039a2f-e0a3-35e0-a67f-26e424ec9099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4898:b080::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:2a:b9:c0:c0:77:3e:5e:7c:f6:50:d5:03:f3:92:6b:b0:f4:
         3e:1c:f7:35:bc:89:89:d6:d8:a1:ec:46:2e:8c:3f:03:63:1a:
         6c:a8:d5:18:55:b8:b1:af:a2:af:ca:cb:4f:00:ba:a7:98:5a:
         ab:f0:b0:9d:a0:a4:7e:2a:f6:51:e5:f9:4c:57:bf:24:4f:e2:
         cf:6f:d3:42:47:92:84:76:fc:1b:b6:11:9a:3e:4f:9c:80:c9:
         fb:b2:3b:4c:42:4b:94:f5:3b:9a:f6:25:dd:89:b2:fa:06:84:
         82:fa:e7:70:48:bb:9a:ac:4b:84:04:b1:b2:fb:e6:f4:7e:2c:
         90:8e:b6:95:d0:20:62:84:bd:8d:5a:17:9d:dc:19:ed:f0:8a:
         92:0f:3f:49:c6:4e:24:ef:eb:b0:90:33:1c:49:72:86:a2:6b:
         b2:19:be:13:5a:8b:a6:2d:60:32:61:c5:9f:1c:6e:c4:6e:92:
         a1:d2:48:d9:41:b1:84:7c:70:90:ae:8f:60:9b:8c:40:94:06:
         bb:4e:4a:26:99:45:e2:af:5b:cc:d7:32:32:c2:ad:c1:87:ad:
         bf:73:d4:e1:f4:96:71:77:77:ee:52:63:47:87:26:05:56:5a:
         45:d4:49:f9:b8:3b:81:f8:a0:18:75:f2:07:a4:e1:fd:ac:a8:
         eb:dd:a7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:14:50 2024 by rpki-client on console-fra.rpki-client.org