Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/f321ea97-8906-32ec-a1b5-79839e8eae51.roa
File:                     f321ea97-8906-32ec-a1b5-79839e8eae51.roa (raw, json)
Hash identifier:          5xFm91mLHeaN9XJeQtF7O5ymgn7Gvy649RnyTsDeszI=
Subject key identifier:   F3:24:5A:B1:32:48:A2:E6:A2:40:9B:00:71:F1:69:DB:52:C7:59:58
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F43285846864A2FB2D65ED267F4844400
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/f321ea97-8906-32ec-a1b5-79839e8eae51.roa
Signing time:             Sat 13 Jul 2024 13:00:33 +0000
ROA not before:           Sat 13 Jul 2024 13:00:33 +0000
ROA not after:            Fri 11 Oct 2024 13:00:33 +0000
asID:                     211066
IP address blocks:        2605:640f:640f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Jul 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:86:4a:2f:b2:d6:5e:d2:67:f4:84:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Jul 13 13:00:33 2024 GMT
            Not After : Oct 11 13:00:33 2024 GMT
        Subject: CN=8888c064-640c-47e6-8829-8d1ad9e34db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5c:ae:2f:8b:16:a7:2b:cf:4b:ed:dc:f7:36:
                    7f:d3:d2:88:5b:02:15:31:d6:93:ca:d7:d7:72:52:
                    33:e8:a2:c9:b2:94:ba:04:21:71:06:71:48:8c:f2:
                    2f:f9:2a:2e:6a:64:77:8f:4d:79:b3:b3:1d:98:a4:
                    dc:28:5a:1d:2a:d2:b6:09:17:bf:8a:fb:57:58:a0:
                    89:2e:35:73:cd:20:62:73:81:28:24:ab:e4:f8:dd:
                    e6:f5:9b:ba:b5:99:60:b9:ee:f6:96:9c:4d:56:f0:
                    7d:fa:cd:06:ea:f4:3d:69:98:1f:c2:d0:90:d1:fe:
                    8e:29:03:22:72:6b:b0:98:de:3d:a0:e8:28:ae:c4:
                    b0:4f:f8:15:e4:a1:41:81:f5:b9:f3:cc:4d:10:be:
                    b9:c3:44:59:42:49:6d:94:1f:8f:73:c0:4a:62:40:
                    4c:82:a2:86:07:a6:19:d2:94:0d:f8:8f:60:14:cb:
                    25:69:c7:99:48:12:31:32:4f:71:64:7d:72:fb:27:
                    f6:9c:79:0d:89:12:df:34:f4:10:78:8e:75:af:50:
                    40:de:0d:c5:a1:5c:42:a6:2c:c3:86:ee:ff:10:26:
                    30:87:ae:91:4e:ae:f5:1f:96:65:6f:02:bb:9e:e8:
                    15:e4:10:e5:92:8a:b6:bd:bd:b3:dc:ff:75:71:e8:
                    69:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:24:5A:B1:32:48:A2:E6:A2:40:9B:00:71:F1:69:DB:52:C7:59:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/f321ea97-8906-32ec-a1b5-79839e8eae51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:640f:640f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:bc:bd:12:26:49:bb:43:ad:6e:92:1d:4d:46:60:a9:ca:8c:
         45:d4:d2:3e:b8:46:cd:b5:ab:ff:b9:47:89:ae:d1:a6:f7:ae:
         82:0e:ed:09:c4:20:ff:d1:cf:7c:51:0a:5c:2a:22:e6:ee:84:
         bb:82:1d:44:d1:e3:95:32:24:a7:bc:67:85:81:69:38:6f:3d:
         ea:27:a5:f8:eb:cc:19:9c:17:b8:ef:c9:35:98:ba:4f:1c:2e:
         d3:4d:28:27:f2:8f:87:da:44:5a:4a:c9:35:4f:c3:1e:ae:d7:
         35:71:60:d8:a9:25:4c:50:58:a5:84:d9:95:90:0f:58:99:37:
         6e:fb:02:e2:05:c7:ef:14:e3:60:a3:ac:ed:b6:f6:77:f4:ba:
         79:a9:a7:2d:dd:b0:1e:a4:2b:9d:a3:4a:5e:13:2b:67:19:17:
         6a:db:f6:af:02:ec:da:37:7e:a0:d9:67:03:d5:6e:0d:ac:8d:
         79:b2:18:b3:33:46:93:2a:bb:bc:5c:a3:a0:86:b7:68:2c:c6:
         4c:44:6b:02:20:2a:ac:ae:43:39:4d:47:6b:6d:85:a8:13:35:
         1e:f9:0c:c2:de:df:9f:b0:30:4d:20:86:c2:ce:56:1e:94:ec:
         74:d2:10:2e:84:7b:71:40:e7:1f:b4:fb:35:bf:47:f2:5d:32:
         97:32:b9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 23:00:59 2024 by rpki-client on console-fra.rpki-client.org