Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2d5e3620-52fd-30cf-9ab4-5a9e9e9a4348.roa
File:                     2d5e3620-52fd-30cf-9ab4-5a9e9e9a4348.roa (raw, json)
Hash identifier:          QluV9d5BlZAB8Xp24u/FDsabCX6x2FVR8wuNQDFhVY4=
Subject key identifier:   FF:46:0D:A8:73:A8:39:CA:84:E7:BF:04:1C:3C:D2:CA:05:2E:0A:A9
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F43285844E0DA8ABFDF4CE99384FC3E30
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2d5e3620-52fd-30cf-9ab4-5a9e9e9a4348.roa
Signing time:             Tue 13 Feb 2024 14:00:29 +0000
ROA not before:           Tue 13 Feb 2024 14:00:29 +0000
ROA not after:            Mon 13 May 2024 13:00:29 +0000
asID:                     398351
IP address blocks:        2607:f790:fff6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e0:da:8a:bf:df:4c:e9:93:84:fc:3e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Feb 13 14:00:29 2024 GMT
            Not After : May 13 13:00:29 2024 GMT
        Subject: CN=2c1c1261-de99-4f58-b2e7-08afb477a958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:95:d6:23:6e:d3:30:81:5f:5f:e2:91:b7:df:
                    57:9b:03:43:92:45:76:6f:e9:62:f0:a8:d3:f2:59:
                    1f:8c:d4:6b:5c:b3:8e:a7:b6:ea:56:af:00:73:a7:
                    b4:fc:f1:36:56:ec:95:d5:7f:fa:44:26:2b:62:44:
                    f6:c7:b3:63:c9:ff:29:33:62:7e:85:98:7a:0b:42:
                    59:91:c6:f2:90:76:91:c8:90:17:33:3d:c5:76:88:
                    13:10:f2:d4:80:a8:ba:08:35:35:3d:b0:04:c9:72:
                    8c:5e:13:f5:16:70:cb:50:b5:86:1d:34:91:28:3c:
                    57:47:fb:53:58:45:d7:92:66:20:af:53:26:bb:43:
                    d5:fd:c2:8d:bf:ed:fa:23:e7:ab:b3:68:ba:b1:c8:
                    04:24:ae:e6:1a:65:d9:6a:1d:7f:d6:92:a5:b4:70:
                    a4:84:bb:30:f1:1c:9b:1b:21:01:72:e5:90:22:0d:
                    a9:9c:05:a2:e5:6d:8a:ab:56:ff:63:de:af:83:9f:
                    a1:81:f2:b5:6d:2c:0b:27:37:a1:71:a2:b8:80:63:
                    75:46:e8:66:6a:f9:e7:d6:54:30:5a:af:53:ac:a9:
                    22:fd:e8:1c:4e:28:48:bc:57:eb:58:15:df:92:19:
                    fc:04:1a:d3:57:5b:57:66:e2:bf:3a:90:0f:a9:cc:
                    bb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:46:0D:A8:73:A8:39:CA:84:E7:BF:04:1C:3C:D2:CA:05:2E:0A:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2d5e3620-52fd-30cf-9ab4-5a9e9e9a4348.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f790:fff6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:6e:b6:71:33:38:d8:14:01:24:66:76:b6:1d:40:ec:6a:d9:
         e7:08:f9:79:ec:d2:bf:51:36:25:83:fd:c8:2a:47:b6:b7:31:
         47:fd:b6:d8:76:be:12:f0:80:be:2b:ac:67:38:ec:63:cd:cd:
         5f:6b:9e:f3:8e:7a:01:97:21:ea:3b:3f:fb:0f:56:6b:33:7c:
         d9:b5:91:0a:f6:7a:f0:fc:a1:2c:9c:9f:66:e9:0f:c4:54:1d:
         91:96:be:0f:12:8f:06:5b:08:b9:f1:f0:11:9d:07:e4:fe:b9:
         65:13:0b:74:cc:34:69:20:02:79:28:bf:69:21:97:26:00:be:
         1f:7b:69:ec:45:de:68:74:9d:5b:0a:40:4f:20:47:36:58:b0:
         ee:f2:93:1c:42:d8:74:83:83:3d:56:59:02:fe:0a:4b:da:02:
         f5:67:3a:bf:2d:f1:4c:ee:1b:4c:ab:53:ff:fd:5c:e8:bb:2c:
         70:88:eb:0b:be:ab:11:fa:3d:f3:f7:6c:c0:ad:78:84:11:b7:
         9e:09:99:11:8c:f6:39:3b:eb:f3:8e:c4:c7:18:d5:b4:a5:2f:
         08:63:0e:f0:78:79:da:6a:fe:bb:f4:0e:a9:4b:1d:a7:c0:25:
         99:6d:e4:7d:c8:f4:cf:e0:01:31:ae:e3:22:35:e2:13:80:0d:
         65:c1:bc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 02:43:41 2024 by rpki-client on console-fra.rpki-client.org