Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/53a033e7-e1ab-3301-9aeb-743edbf78f50.roa
File:                     53a033e7-e1ab-3301-9aeb-743edbf78f50.roa (raw, json)
Hash identifier:          KYVz3V1ustgoOmCwV4lx7z9R/D23bUU13cJ4PHHqgAg=
Subject key identifier:   9B:59:50:F7:A9:1B:AE:8B:78:92:FD:46:EB:BC:51:D8:DF:BE:04:3B
Certificate issuer:       /CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074
Certificate serial:       010D0C9F4328584507F022BBD584E1DF56FB3D80
Authority key identifier: 92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/53a033e7-e1ab-3301-9aeb-743edbf78f50.roa
Signing time:             Tue 27 Feb 2024 14:00:31 +0000
ROA not before:           Tue 27 Feb 2024 14:00:31 +0000
ROA not after:            Mon 27 May 2024 13:00:31 +0000
asID:                     14618
IP address blocks:        2604:7440::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:07:f0:22:bb:d5:84:e1:df:56:fb:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074
        Validity
            Not Before: Feb 27 14:00:31 2024 GMT
            Not After : May 27 13:00:31 2024 GMT
        Subject: CN=73e48032-d861-426e-a23e-25d2560da83b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ca:88:bf:0e:bb:53:55:38:7d:25:28:60:fd:
                    29:6f:f9:22:5c:52:05:80:5d:4f:39:a9:e2:9a:bc:
                    d4:af:99:02:39:27:79:12:fc:3f:89:88:b3:48:c5:
                    b8:30:2b:dc:aa:54:43:25:53:41:43:db:2c:97:3f:
                    96:1b:ce:9c:fc:8a:a4:3b:60:a6:de:69:97:c5:56:
                    0f:e6:3d:5f:61:0e:16:9a:47:cd:f7:0d:3e:12:6f:
                    2f:ae:aa:ee:96:d5:96:66:64:34:03:00:e3:49:2c:
                    57:61:ce:38:af:31:bc:5d:7e:9d:65:83:a2:f9:01:
                    77:e3:93:1a:2d:e5:38:31:43:74:4b:78:ba:3e:79:
                    b5:ae:f3:15:f5:57:01:64:63:5f:9b:20:e3:24:35:
                    dd:0f:63:9d:d7:01:de:0d:fb:df:de:e4:c9:2b:1a:
                    1a:04:b5:bd:59:a0:13:5d:ff:e2:fc:b0:4a:7c:97:
                    60:00:73:09:3e:bf:fc:08:fd:2d:08:33:51:28:d6:
                    7b:e2:a4:61:4a:5a:a7:c6:46:98:f2:12:af:0f:ca:
                    9b:8f:69:3b:34:9c:63:e6:52:5c:6c:b4:c1:99:b6:
                    0a:18:98:20:ba:73:b6:5d:b1:70:0d:1d:8f:37:a5:
                    05:77:7a:b6:b2:32:3c:a1:bc:d8:5a:35:d0:00:d9:
                    2d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:59:50:F7:A9:1B:AE:8B:78:92:FD:46:EB:BC:51:D8:DF:BE:04:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/53a033e7-e1ab-3301-9aeb-743edbf78f50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl

            X509v3 Authority Key Identifier:
                keyid:92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7440::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:f0:a8:60:9f:30:2c:88:82:ac:78:ef:64:ae:e6:40:1d:65:
         56:fe:be:3f:82:08:2f:74:eb:a6:e2:a7:30:f5:ab:17:40:5d:
         5e:2e:29:09:68:86:05:db:94:e5:81:ca:80:3a:01:a7:08:2c:
         6d:8b:ee:f0:f4:b7:ba:22:82:ba:34:7a:ff:a5:16:7e:8e:62:
         d8:1a:17:dc:c9:4f:93:65:f4:4a:9c:f5:92:9d:58:ef:df:14:
         bf:8c:5e:c2:d9:e3:59:50:f0:8c:e8:4f:93:59:30:0c:61:f1:
         19:49:66:69:1a:d2:01:07:6c:bd:aa:0f:20:46:2c:3f:c5:00:
         1e:29:71:15:95:11:6c:0e:6a:58:10:bc:87:b4:12:df:fd:a5:
         b2:b0:4a:26:85:38:e5:ad:cd:1f:81:af:39:77:ce:a3:27:0c:
         1a:2b:40:5d:96:13:4b:f9:f7:d5:04:42:10:c5:95:ea:c7:01:
         4f:16:44:2b:07:f8:4f:1a:ad:07:30:f8:b6:f5:d3:df:ce:83:
         c6:9e:b2:86:b6:f5:a4:52:b1:04:00:bf:38:85:2d:4d:0a:f8:
         86:17:19:80:99:46:5a:3d:f7:d0:83:3b:7b:0d:4d:23:af:17:
         ab:9b:e4:40:62:9a:af:ee:66:a2:91:75:d7:79:8f:77:84:84:
         47:97:83:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:54:53 2024 by rpki-client on console-fra.rpki-client.org