Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/844e8540-ba60-3e6c-9f0d-3e7fa24095f1.roa
File:                     844e8540-ba60-3e6c-9f0d-3e7fa24095f1.roa (raw, json)
Hash identifier:          5CJMiIot50+94zKWYEtbC0zjERyBM/XRRtbuIHQhZpQ=
Subject key identifier:   E6:9E:CD:45:54:90:25:C2:31:AE:53:07:71:12:17:17:71:ED:E0:EA
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F43285844AD34F154BD45A0ADB29AE600
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/844e8540-ba60-3e6c-9f0d-3e7fa24095f1.roa
Signing time:             Fri 26 Jan 2024 02:00:25 +0000
ROA not before:           Fri 26 Jan 2024 02:00:25 +0000
ROA not after:            Thu 25 Apr 2024 01:00:25 +0000
asID:                     14618
IP address blocks:        2605:84c0:56::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ad:34:f1:54:bd:45:a0:ad:b2:9a:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Jan 26 02:00:25 2024 GMT
            Not After : Apr 25 01:00:25 2024 GMT
        Subject: CN=348ef721-1fa2-470d-bcd8-2bd63c4b0e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:76:5e:26:37:e0:40:b3:d4:a7:3c:86:1b:3a:
                    15:7e:ec:5b:d0:a2:b1:60:01:f6:a7:3b:14:d8:2a:
                    68:5f:93:23:e8:00:f9:bd:c3:b3:4a:96:5d:56:7f:
                    dd:24:06:dc:6b:bb:20:bc:74:8a:62:23:7c:66:66:
                    4c:dc:7e:1a:bd:c4:31:50:b7:b4:ea:44:ba:90:8a:
                    a4:3e:e9:a9:28:f0:02:2b:aa:d8:57:1e:35:1f:00:
                    bb:fc:f2:02:67:27:35:8a:c1:ce:ab:ad:6f:75:ca:
                    77:8e:0c:28:7b:f0:00:c8:60:55:9e:d6:da:10:13:
                    8d:f2:c1:c2:97:8e:7d:75:2b:8a:f1:28:14:0d:8d:
                    c9:b9:f8:6f:6f:80:46:97:66:60:d7:b8:ec:41:c7:
                    f5:95:d7:9a:29:56:fa:ab:1c:bd:1e:00:08:6d:1f:
                    8f:f9:65:3e:cc:60:b8:8c:77:c3:4d:ec:40:bf:40:
                    c2:07:45:43:d8:c0:66:94:56:55:43:14:ca:7d:3f:
                    c3:9d:74:b0:d1:6c:ff:ed:f8:69:24:84:ab:9f:c3:
                    89:76:45:e6:b3:09:04:99:ae:c4:cd:ce:9e:f3:51:
                    ea:83:2f:e6:91:6d:7d:c2:28:c8:32:1b:a1:fd:1d:
                    1a:73:2c:db:4d:50:3e:e0:24:87:68:58:3b:45:85:
                    e2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9E:CD:45:54:90:25:C2:31:AE:53:07:71:12:17:17:71:ED:E0:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/844e8540-ba60-3e6c-9f0d-3e7fa24095f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:84c0:56::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:d8:10:df:11:a5:13:ac:d1:70:80:82:b4:70:6c:6b:da:40:
         9a:35:ce:25:ab:82:e9:09:92:06:3c:e7:64:5b:51:9c:66:5a:
         6f:d5:7d:2f:a0:e5:86:f2:77:f8:92:f5:cd:a1:b8:a5:ad:58:
         f2:6c:55:4c:09:0c:7a:32:94:59:47:06:25:46:a3:0f:7a:e0:
         ef:14:40:ed:7f:92:88:27:26:49:d5:aa:fd:ee:11:6d:15:12:
         b6:b2:09:2d:de:95:ac:55:9c:98:e1:d2:45:50:10:67:89:2a:
         06:fe:c6:1e:8f:58:b7:93:ec:1a:5a:c4:a6:cd:2f:fa:71:2c:
         76:62:29:4b:b0:a0:ce:57:b0:36:6d:8c:56:59:a6:38:15:ab:
         45:d1:1e:63:1f:bb:73:ae:17:92:aa:84:d2:c2:99:1a:ec:05:
         a2:6b:25:44:3b:c1:5d:9b:6c:ec:34:b5:aa:8f:3b:1a:94:55:
         05:7c:ee:c7:a3:c6:6c:dd:3b:5f:05:65:c9:04:ca:35:46:dc:
         fa:39:0c:e5:44:3f:9d:c0:47:b9:2b:a7:d4:8a:0e:68:0c:e4:
         78:eb:10:fa:04:0c:fe:6a:d6:32:b1:c8:78:3f:0b:ea:b5:91:
         e4:15:42:5e:e3:5c:c5:2e:94:23:3f:27:8a:51:54:83:8f:5d:
         2d:6c:0f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:42:45 2024 by rpki-client on console-ams.rpki-client.org