Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ef5fc7f0-aba2-3b81-ad7f-894e3e459dd0.roa
File:                     ef5fc7f0-aba2-3b81-ad7f-894e3e459dd0.roa (raw, json)
Hash identifier:          roxlSa9PLuGvr3AoHqDhvWqMaDwSoXLob60nGHaPr7U=
Subject key identifier:   50:8B:CF:00:B8:79:A8:5B:B2:6F:77:BE:5B:EC:EF:9E:DF:60:1E:C1
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B61736E3D47E2AA435C040
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ef5fc7f0-aba2-3b81-ad7f-894e3e459dd0.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     855
IP address blocks:        2001:4c0:6002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b6:17:36:e3:d4:7e:2a:a4:35:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=49677daf-90ad-41a2-9be2-cfce988f5efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:13:a8:32:c5:a4:ca:73:a0:d1:5b:39:d4:6c:
                    8e:4f:10:f2:54:12:7f:5d:4a:31:f6:f9:3c:79:0f:
                    31:93:4f:bb:e0:dc:51:2c:38:2e:34:3d:c4:d9:80:
                    35:23:e4:08:a1:fb:d6:7a:5a:0c:ad:32:be:d4:b7:
                    4c:dd:e4:8f:64:58:77:8b:3d:26:42:ab:54:2e:32:
                    50:e3:3c:7d:1e:0d:2e:18:ee:5d:a8:26:31:bc:41:
                    89:db:d0:49:44:43:3a:1a:3a:dc:be:47:14:7c:99:
                    26:f1:73:52:58:c6:0e:5f:76:70:2d:95:69:6b:eb:
                    e3:bb:15:44:27:db:f3:32:16:19:71:fb:e0:fc:09:
                    81:75:a9:49:82:bd:25:75:ec:f7:fe:ed:13:b8:64:
                    ba:95:8e:c5:39:6d:da:4a:5c:e9:43:95:85:a3:17:
                    81:fe:bb:9c:f9:a6:94:80:73:6e:1a:5c:52:89:ea:
                    f7:09:c8:ce:be:d4:c9:87:94:d7:2c:15:23:96:d0:
                    90:b0:5e:9f:77:97:ba:bc:d3:7a:11:c6:8d:10:39:
                    3d:e1:b7:07:07:23:86:59:4f:31:3c:eb:58:4f:71:
                    08:de:73:cc:9d:e1:89:cd:a8:d1:1e:c0:92:d3:e0:
                    5b:0b:e1:8c:bd:9c:87:c4:f1:6d:c0:4c:a7:13:36:
                    10:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:8B:CF:00:B8:79:A8:5B:B2:6F:77:BE:5B:EC:EF:9E:DF:60:1E:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ef5fc7f0-aba2-3b81-ad7f-894e3e459dd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c0:6002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:56:9c:2c:8e:90:aa:49:1d:91:28:7f:7a:a3:7b:93:60:c4:
         d3:d1:fb:50:b8:25:5d:d0:ae:0a:0f:25:33:33:c0:4a:09:1c:
         da:a8:4f:23:cf:64:97:f1:07:07:bd:fb:e9:4e:9e:e1:c5:11:
         4b:04:5d:68:49:c4:f1:d5:d5:a0:0e:1a:55:18:31:4b:95:3e:
         38:77:b8:72:49:ad:b3:27:54:49:52:59:ff:b6:84:49:fa:4f:
         96:84:7f:76:80:29:0c:8e:a4:cd:bd:62:c6:1a:ff:f6:4c:1c:
         a5:16:56:25:23:30:91:ee:13:11:8a:11:fe:22:7b:f6:5d:17:
         09:68:6d:c3:93:5a:92:17:19:b0:d4:8f:63:c5:60:29:b2:b9:
         34:5c:30:55:70:ff:4a:2e:ac:5a:52:4d:73:3a:45:fc:6c:f9:
         f0:cd:14:34:be:c6:bd:6e:f5:15:ff:b4:a4:13:0c:59:46:a9:
         ff:18:a5:72:54:c4:d9:b0:61:41:95:34:c4:77:33:40:32:8c:
         1b:98:18:64:19:da:b1:da:16:2e:32:89:d4:53:63:c5:3a:62:
         95:9b:87:f0:6c:63:96:4f:2c:93:e2:dd:e6:3d:f4:50:d8:e3:
         60:0a:3f:b4:e8:23:53:9e:5d:13:bc:7d:42:69:63:f8:9f:23:
         f0:d3:88:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:45:52 2024 by rpki-client on console-ams.rpki-client.org