Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1eeaf983-8d3a-3115-9b6e-30dfa0207e58.roa
File:                     1eeaf983-8d3a-3115-9b6e-30dfa0207e58.roa (raw, json)
Hash identifier:          0vc4yJZE+ADBX1RNkOuHkzglAdGMrg0MRpxYZR2SSaA=
Subject key identifier:   1B:06:0D:68:B4:ED:AC:73:15:D5:52:A6:78:65:A7:88:8F:D8:BC:95
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F432858455B92F2EB8E3ACE4E1B6EE300
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1eeaf983-8d3a-3115-9b6e-30dfa0207e58.roa
Signing time:             Thu 28 Mar 2024 13:00:36 +0000
ROA not before:           Thu 28 Mar 2024 13:00:36 +0000
ROA not after:            Wed 26 Jun 2024 13:00:36 +0000
asID:                     61317
IP address blocks:        2604:4500:1800::/40 maxlen: 40
                          2604:4500:1400::/40 maxlen: 40
                          2604:4500:1500::/40 maxlen: 40
                          2604:4500:1600::/40 maxlen: 40
                          2604:4500:1700::/40 maxlen: 40
                          2604:4500:1900::/40 maxlen: 40
                          2604:4500:1200::/40 maxlen: 40
                          2604:4500:1300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5b:92:f2:eb:8e:3a:ce:4e:1b:6e:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Mar 28 13:00:36 2024 GMT
            Not After : Jun 26 13:00:36 2024 GMT
        Subject: CN=2d85c483-4efc-4d8a-9b7a-5a5f355d6a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0f:89:cc:68:62:e3:dc:0e:74:c2:c6:a3:16:
                    bf:1e:e7:6c:bd:ca:f6:29:2b:da:35:1c:50:e3:00:
                    45:e6:22:a8:f9:4f:16:e4:31:e0:50:12:d8:cc:73:
                    f2:47:f5:59:0e:99:22:69:e3:ef:44:81:b3:f5:3d:
                    5e:ad:7a:5e:86:60:df:01:01:3b:5e:f7:5d:50:7f:
                    fa:5d:9f:55:b9:4e:31:6f:0c:fc:66:0c:41:a7:6f:
                    19:6d:d2:75:a2:75:ad:d6:14:17:26:5f:7e:5a:1d:
                    ba:52:8f:41:49:9a:5c:d6:4d:f7:3d:25:7c:f9:1c:
                    75:a2:62:72:99:90:ec:5b:2e:a9:36:6a:75:41:86:
                    71:5d:dc:fe:bc:6b:ad:48:77:8d:e4:28:11:4b:0c:
                    7e:b4:ea:59:02:55:ff:d4:bb:8a:96:79:17:39:0d:
                    97:f5:ab:67:58:d6:f7:1d:af:fd:dc:7f:f9:ff:08:
                    76:81:ed:38:9d:34:33:30:2b:15:54:35:be:22:94:
                    ba:b0:e1:21:19:b0:a8:16:f1:bf:46:c1:2b:49:56:
                    42:0f:06:cc:d5:cc:8a:f5:50:30:44:f0:8f:f7:9c:
                    21:36:c1:7d:3f:05:2a:15:5e:cc:75:21:6f:e2:95:
                    7e:db:fa:98:1a:45:0a:59:1e:c1:71:16:44:53:7f:
                    7c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:06:0D:68:B4:ED:AC:73:15:D5:52:A6:78:65:A7:88:8F:D8:BC:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1eeaf983-8d3a-3115-9b6e-30dfa0207e58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4500:1200::-2604:4500:19ff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:41:ac:6f:e5:f8:c1:92:21:4e:14:0e:20:62:6d:75:fd:fd:
         1b:52:7d:df:7d:45:68:17:b2:d0:fc:bc:7d:14:76:b5:47:96:
         c9:a5:eb:8a:1d:03:53:e8:fc:1e:e2:e0:d2:9e:aa:ec:fa:28:
         43:08:88:fa:7b:dd:58:35:cd:49:43:38:0f:ad:7d:3f:89:8e:
         45:c1:2f:16:21:83:9a:e2:41:f1:ff:90:5a:fb:3f:6e:1b:7f:
         c5:8a:00:f3:f7:28:f1:03:c8:c8:61:e0:99:33:0a:5a:43:6f:
         29:e4:bf:99:9c:24:ee:f3:41:0b:e7:88:49:25:d3:b5:f3:72:
         af:93:f8:3d:3d:20:e4:62:d1:71:3e:64:d0:06:0c:19:ff:0e:
         55:cc:9f:37:3a:5c:76:03:87:17:84:bc:a9:ff:56:da:7b:cd:
         ab:91:6b:c9:4f:fc:60:3c:fa:f5:82:c1:ce:09:3b:d1:e8:2c:
         6b:b0:3c:b1:a0:13:3a:ca:7c:8e:a3:ef:5a:93:57:3c:e2:4a:
         fa:5f:9a:80:9c:02:f3:0e:f4:06:b3:af:71:32:30:d6:82:0e:
         e4:dc:ce:c5:54:b6:6b:96:07:42:4d:d6:7d:cd:74:aa:ba:e5:
         32:eb:bf:03:f7:00:86:f6:b8:e4:34:7d:f5:36:e7:cb:28:98:
         4a:93:c2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:57:14 2024 by rpki-client on console-fra.rpki-client.org