Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/551fc2be-c880-3b4d-bed4-93cf69acd18a.roa
File:                     551fc2be-c880-3b4d-bed4-93cf69acd18a.roa (raw, json)
Hash identifier:          ec6EDmZcONWK5zP7dYOBvDP8A9Q0B+IEdHZCv/LwAV4=
Subject key identifier:   54:43:F4:CD:FA:8C:AD:0B:43:47:55:1F:A1:46:F0:35:B5:86:07:9F
Certificate issuer:       /CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
Certificate serial:       010D0C9F432858457A487CAD75F12D2D2DC82560
Authority key identifier: 7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/551fc2be-c880-3b4d-bed4-93cf69acd18a.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     14773
IP address blocks:        2620:1d5::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:7c:ad:75:f1:2d:2d:2d:c8:25:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=987cd282-79d5-4574-b50c-4a6a614c2808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c3:b6:b7:ce:de:99:82:79:e8:bf:10:5d:7d:
                    07:cb:cc:10:46:ac:22:3d:53:a1:6c:b1:16:73:66:
                    7d:6e:38:ba:c0:76:d7:76:a9:02:3c:91:bc:3a:d0:
                    1f:ff:1a:f1:ef:1f:fd:f1:bd:25:46:ea:fe:26:34:
                    1b:2e:9a:b7:2a:63:87:d6:e9:87:1c:59:cc:6b:75:
                    f4:06:e3:05:45:82:69:57:12:6a:ad:81:e9:32:1e:
                    bf:97:78:b0:aa:db:0c:85:a8:6e:e7:bb:99:0b:1b:
                    7c:5a:ac:93:54:8c:7d:44:f9:bf:6e:1e:c5:ab:e2:
                    31:54:8b:3a:8b:a8:73:ad:a2:af:93:9a:fc:14:73:
                    1c:8c:23:57:d4:7b:a5:97:1c:b4:61:39:30:d6:ce:
                    fe:b8:18:5f:6d:49:ef:d5:08:e4:15:36:58:13:2f:
                    dd:73:d8:2b:0e:9b:f4:86:06:42:c5:ac:67:80:55:
                    bc:08:6e:61:dd:3b:38:8c:2c:c6:a9:ce:e1:3e:a7:
                    06:72:31:4f:ca:d1:ca:90:f0:92:7a:5e:7b:1c:ad:
                    71:d8:b3:66:81:a7:a9:bf:67:5e:4d:67:c7:58:90:
                    b2:ce:81:a8:39:71:bc:45:4b:c4:19:ff:8c:a3:e9:
                    ec:96:9c:70:7f:b9:d9:b4:b7:10:22:51:d5:b7:22:
                    94:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:43:F4:CD:FA:8C:AD:0B:43:47:55:1F:A1:46:F0:35:B5:86:07:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/551fc2be-c880-3b4d-bed4-93cf69acd18a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1d5::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:eb:89:41:0c:58:5f:5d:a9:f4:db:45:fa:f7:6b:3a:d0:09:
         ba:a9:72:3d:1b:8e:1a:ec:67:03:bb:d5:4e:fa:5d:b6:c4:ba:
         7e:80:51:58:66:6c:3f:10:e4:87:81:99:37:b9:6b:f1:76:12:
         2d:a2:5c:fa:4d:9c:95:59:28:14:56:15:5d:43:62:d1:b4:0d:
         c7:90:4e:5d:e0:3f:04:97:75:ec:c9:bc:ec:a9:41:ee:df:aa:
         45:5b:1b:80:08:c9:63:dd:95:da:11:13:c5:0f:23:9b:13:91:
         75:0b:6d:4e:a9:0c:e0:51:67:12:a4:0b:ab:2b:2c:ed:da:4b:
         84:bb:3d:0e:3a:52:97:5c:3b:9a:a0:3c:67:f2:ce:2b:33:fd:
         ab:a8:0b:bb:d9:fe:2a:86:9a:04:a8:26:6e:b7:dd:dc:69:b4:
         e0:22:79:74:40:3a:99:2e:8c:0a:76:60:8b:68:04:b8:61:2b:
         61:f5:8f:79:c0:d1:88:8d:94:11:fb:88:28:5c:35:89:99:16:
         20:87:8e:b4:c9:34:23:4b:66:c7:5f:fb:50:a5:93:5e:ef:36:
         6d:4a:d6:48:36:81:bc:61:f3:3a:ed:5b:02:54:92:5a:ad:02:
         d2:c1:fa:bb:7c:cd:53:d7:1d:aa:e1:64:2b:12:dd:3a:58:3d:
         7a:d4:e2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:00:48 2024 by rpki-client on console-ams.rpki-client.org