Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/27cf54e0-3286-396f-9c4e-46078ec8dbbc.roa
File:                     27cf54e0-3286-396f-9c4e-46078ec8dbbc.roa (raw, json)
Hash identifier:          kv4dsHRthfXld126ewJudSG+fOCLElEs8xGNFEVXLaQ=
Subject key identifier:   67:EA:88:70:30:14:39:1A:00:F1:25:38:DB:E5:8F:42:D8:1F:38:2B
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B6138829DF35658371AB20
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/27cf54e0-3286-396f-9c4e-46078ec8dbbc.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     855
IP address blocks:        2001:4c0:2000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b6:13:88:29:df:35:65:83:71:ab:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=d6bddcde-4a54-4ace-9c69-8048f4a85ef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:af:1e:3a:63:1c:12:2b:8d:76:83:23:46:4c:
                    e9:9e:21:e6:b7:07:a5:1f:b2:c0:ef:58:f3:e9:81:
                    a1:f6:21:a6:83:e5:94:ee:62:d1:72:f6:3f:a7:ec:
                    2f:08:df:ba:cb:06:47:d3:7c:19:bc:a0:e3:6c:57:
                    4c:1a:cc:3d:47:9b:b1:bd:98:e6:11:63:3f:57:2e:
                    1f:bf:22:3f:70:a9:19:3d:56:05:5b:b6:3b:5f:6d:
                    12:c7:5c:bc:70:56:60:11:28:16:87:70:fc:32:4c:
                    09:ff:f0:25:5d:79:f6:68:ae:68:f7:25:00:39:f5:
                    e0:9e:33:08:9c:b2:f5:98:5e:34:60:d6:9d:60:55:
                    9c:eb:c0:0c:43:1a:51:1b:b5:54:0e:38:22:fe:23:
                    9c:92:59:48:55:55:ba:b6:03:0f:e9:5e:ca:cb:b2:
                    ff:a9:4b:6f:e1:a5:54:54:d1:09:4c:8b:7b:43:14:
                    22:63:d2:b7:91:9e:8a:27:cc:50:99:7c:93:0d:1f:
                    8b:4c:b6:fe:d2:a9:94:0a:71:44:f2:01:be:fb:bc:
                    f2:83:8c:bf:d5:f8:25:6b:8b:8f:af:12:7c:7e:f5:
                    88:aa:3f:a7:99:f4:2a:8a:32:77:95:16:f1:f3:90:
                    e8:73:1d:68:84:dd:b0:7a:d4:15:da:2f:d1:bd:30:
                    a5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:EA:88:70:30:14:39:1A:00:F1:25:38:DB:E5:8F:42:D8:1F:38:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/27cf54e0-3286-396f-9c4e-46078ec8dbbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c0:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:68:93:7e:cc:81:a9:41:e0:90:98:90:db:1b:be:43:c3:e4:
         24:1e:2e:0a:9d:43:8f:db:57:d3:c0:92:2e:27:50:03:ef:1e:
         96:5c:73:ec:a3:e3:55:c5:56:62:b0:2f:6e:f2:8e:33:cf:66:
         3c:57:52:12:5f:82:42:31:92:ab:54:22:6b:39:d9:fb:c0:80:
         9e:fb:16:2c:98:ff:57:d3:31:94:90:3f:dd:19:85:e7:52:22:
         56:cb:b9:97:76:83:a5:1c:b4:8c:4d:82:74:e0:86:2c:da:3a:
         f4:aa:a1:18:48:10:e1:40:7c:36:ac:c2:05:20:5a:57:e4:a8:
         9d:6e:68:ed:94:e8:94:4e:67:39:8f:39:7d:8a:9a:c0:d3:63:
         af:c1:78:8a:5b:8e:9c:67:01:27:a9:95:90:bd:1e:42:02:ce:
         ec:8b:64:43:1f:4b:c7:16:55:7d:5a:ed:a2:a2:cf:2f:ba:0c:
         f9:19:8a:ee:b5:19:84:7f:c2:34:c5:9c:81:75:9c:b9:1f:c9:
         3f:4d:72:4d:cc:ad:ca:1b:ec:3b:2f:5c:c4:74:3f:15:5c:1f:
         7b:ef:1e:a7:8c:d1:86:e4:c2:8a:20:37:96:ec:9b:a7:cd:ae:
         78:98:b0:69:c0:9c:c4:9f:48:62:e2:36:e4:8e:70:9e:e6:be:
         75:14:e5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:32:36 2024 by rpki-client on console-fra.rpki-client.org