Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/f321ea97-8906-32ec-a1b5-79839e8eae51.roa
File:                     f321ea97-8906-32ec-a1b5-79839e8eae51.roa (raw, json)
Hash identifier:          ttzbyFaJGdAkeqklvVQ5dDtNx4x/3YylfivNNajkzqo=
Subject key identifier:   D0:C9:9D:AB:B5:14:99:EC:3E:57:FB:45:C2:15:B7:D8:8B:F8:67:D5
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F43285845A6F35EF0564A967A8CAAE048
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/f321ea97-8906-32ec-a1b5-79839e8eae51.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     211066
IP address blocks:        2605:640f:640f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:5e:f0:56:4a:96:7a:8c:aa:e0:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=c4729c0d-b652-4b00-b9e8-7876d69b5e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9a:6a:48:8c:31:f3:e8:c6:82:3d:26:61:70:
                    bd:09:e1:de:2a:74:3c:63:1e:0f:d2:0e:ae:53:6a:
                    96:94:3e:11:e1:f6:a3:7d:14:79:56:7b:e9:4e:20:
                    cc:88:de:a0:21:9d:6d:84:de:fc:00:73:d5:f5:3c:
                    a0:ee:f0:21:6e:2e:de:9f:13:90:ad:2c:aa:e6:6c:
                    0e:27:c9:1a:4c:8c:c7:6c:b4:20:07:f8:c4:04:54:
                    56:2f:b3:0f:5f:cf:75:48:29:fd:25:fa:c1:12:eb:
                    71:0d:2a:64:01:3e:fb:f6:dc:55:70:c5:a0:e9:a1:
                    d5:5b:4a:60:37:0a:d4:a0:e7:49:b5:1b:83:17:8a:
                    8e:f8:4d:35:4a:26:6c:cc:21:64:57:ca:e7:6e:32:
                    eb:d1:ff:84:de:89:f7:fe:1d:f0:20:21:7e:a7:ef:
                    7c:ab:0f:d4:14:aa:f3:a2:7d:70:85:a8:1f:9c:e3:
                    f3:f5:73:67:80:73:94:98:a5:fa:d8:93:cd:bf:a0:
                    c1:70:09:61:d0:57:6d:8b:4c:7f:10:07:b8:bc:c7:
                    a9:bc:f1:11:d8:99:0c:de:2e:f3:63:67:25:1a:cc:
                    20:89:fb:80:c6:97:3e:fd:00:c5:b8:d9:dc:a1:36:
                    9e:37:b8:86:9c:7a:e0:7d:97:00:ef:91:03:76:8c:
                    59:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C9:9D:AB:B5:14:99:EC:3E:57:FB:45:C2:15:B7:D8:8B:F8:67:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/f321ea97-8906-32ec-a1b5-79839e8eae51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:640f:640f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:c2:b4:1b:31:68:ee:c9:e2:9c:88:e9:ae:c5:f3:f1:9e:a5:
         5b:57:4f:34:08:45:d1:76:ca:ed:ea:8f:1c:57:da:f0:7f:e6:
         e1:f0:bd:bd:3e:e5:6c:15:78:45:3a:57:8e:c8:75:37:92:6c:
         e8:48:80:07:94:07:0b:05:eb:bd:bc:d3:4c:f0:3a:e3:50:24:
         bf:c5:c5:17:0f:a6:59:a8:c3:9c:27:42:c4:db:93:02:b2:16:
         e9:bb:21:a5:81:5e:c5:b9:fc:2c:e7:16:e0:2c:d3:23:de:17:
         2a:42:38:6c:d4:4b:a0:8d:2c:17:36:ee:56:a2:7c:33:5b:5a:
         80:fd:ae:17:d8:88:ee:a8:ef:7b:8b:1f:d8:34:20:1f:01:1f:
         19:50:ce:d1:95:db:54:74:16:52:ba:3b:7f:6f:5f:70:f1:44:
         65:c3:43:77:1f:16:b6:ca:d2:3d:eb:b3:61:62:fa:d2:af:14:
         a9:82:8b:6e:5b:87:82:08:1b:35:0d:42:da:6f:f5:d1:e9:89:
         87:ea:8f:8f:69:d8:4a:3a:c0:5a:04:18:77:bc:1e:b4:30:b7:
         da:84:6d:d0:4f:84:84:8d:e0:2c:38:37:31:2e:63:87:4a:e7:
         72:ab:d4:97:02:cf:ea:84:20:a4:64:5f:1e:ef:56:04:8b:69:
         dc:71:8b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 05:09:25 2024 by rpki-client on console-fra.rpki-client.org