Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/532a6650-1360-380d-a68f-680dd10f9fc8.roa
File:                     532a6650-1360-380d-a68f-680dd10f9fc8.roa (raw, json)
Hash identifier:          QfFjsu+FOYVDHWKwqZVlvJac43m+VEw3okC+2hQ4qag=
Subject key identifier:   52:B4:3F:58:D0:11:3D:BB:D0:36:5C:AB:E6:A1:78:C2:B2:48:74:E4
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584589A327F31AD0EE24736134C0
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/532a6650-1360-380d-a68f-680dd10f9fc8.roa
Signing time:             Sun 14 Apr 2024 01:00:24 +0000
ROA not before:           Sun 14 Apr 2024 01:00:24 +0000
ROA not after:            Sat 13 Jul 2024 01:00:24 +0000
asID:                     61317
IP address blocks:        2604:4500:1f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:89:a3:27:f3:1a:d0:ee:24:73:61:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Apr 14 01:00:24 2024 GMT
            Not After : Jul 13 01:00:24 2024 GMT
        Subject: CN=b92dc97b-09a2-4ce8-b019-e7e4d0f4dded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a1:bb:8a:4b:ce:e6:b3:6c:14:db:53:7f:82:
                    3b:74:c1:12:01:bb:10:b8:94:43:6b:dd:0d:a5:79:
                    44:83:bd:fd:a5:a2:73:05:02:02:8f:b0:28:33:5f:
                    81:a2:6c:13:89:8e:c6:46:e8:e8:13:d2:9c:3e:02:
                    a1:d7:0d:91:f2:79:37:3d:4a:de:7d:b2:bb:07:4a:
                    9d:47:41:55:41:92:b6:35:5c:b3:5c:3b:44:fe:06:
                    34:6f:54:59:7f:94:ca:d5:3e:38:84:82:58:38:f7:
                    25:f4:c2:ef:12:6a:cb:aa:00:aa:e4:c6:41:1c:97:
                    3b:28:fe:13:3e:4f:a9:98:28:a1:91:99:a4:16:25:
                    cf:6f:4c:91:6e:bb:91:1d:a3:51:9a:0a:80:5a:12:
                    bc:a1:d5:f2:bc:ae:d4:13:4e:76:aa:f7:13:93:db:
                    2b:d4:a1:75:78:58:2f:16:a8:a8:4d:0a:d5:f7:ba:
                    27:7e:4e:64:ff:b2:02:67:7e:fc:e2:dc:3d:11:35:
                    58:24:22:43:cb:2b:7f:97:f1:06:6b:dd:b5:3b:18:
                    50:96:5c:70:a6:b2:56:15:96:90:3a:c0:a5:a7:ae:
                    f5:ba:bc:de:2f:44:9c:23:f9:45:13:f6:ef:b5:95:
                    57:47:7f:a9:4e:8d:30:9e:a4:9e:72:fc:d9:c1:cd:
                    d8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B4:3F:58:D0:11:3D:BB:D0:36:5C:AB:E6:A1:78:C2:B2:48:74:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/532a6650-1360-380d-a68f-680dd10f9fc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4500:1f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:68:fc:88:d0:ee:0c:be:bb:9c:da:45:59:b8:c7:ba:42:ce:
         e2:b1:66:3f:d9:55:3c:c0:14:01:4f:b1:ea:7b:7d:e3:3c:45:
         5f:37:56:88:4b:2a:ab:45:2f:55:a8:b1:8c:32:43:59:5e:23:
         5b:33:18:44:58:6b:6b:7a:9c:63:a7:da:01:62:8f:f1:9e:6b:
         36:a8:f1:5f:ce:9c:db:26:a1:33:26:06:4b:9a:37:47:52:75:
         93:32:13:da:ae:e0:90:fc:7c:02:eb:9f:b9:1b:f0:ec:32:70:
         ba:2b:5a:c1:a0:58:0b:51:28:08:20:db:a9:35:3d:d3:82:ff:
         d5:69:0d:7e:11:c1:e9:e5:8f:b6:76:21:56:14:0a:3d:f0:32:
         10:75:0c:a8:5f:3d:f0:f4:60:44:38:5a:2d:a3:54:46:6a:eb:
         00:11:55:a1:42:b3:c0:e1:32:f8:84:a4:c5:ea:33:f0:87:15:
         6b:b5:07:7e:3a:49:a7:c5:9b:66:fe:e5:f1:6d:8e:eb:b7:d9:
         a8:53:9d:29:07:c4:89:99:cc:b4:8c:67:c2:46:25:c1:63:44:
         3a:b4:51:50:7c:ab:ad:80:c8:a1:5f:52:b0:94:03:a8:90:a3:
         9f:b6:38:24:fd:6c:d6:22:27:34:db:38:c0:0b:8e:07:b7:e2:
         3a:81:4c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:07:35 2024 by rpki-client on console-ams.rpki-client.org