Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c5853b83-12bf-3cdc-87d1-07ddf698d72c.roa
File:                     c5853b83-12bf-3cdc-87d1-07ddf698d72c.roa (raw, json)
Hash identifier:          gqg0Fz53Kkl3LEQ2SuAApBJEbTRQDhWPoIKgceezunc=
Subject key identifier:   3D:87:D3:99:25:B7:C4:FD:2D:4A:C2:47:FE:D6:DC:56:87:AD:34:95
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584589A32809566C395944C05300
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c5853b83-12bf-3cdc-87d1-07ddf698d72c.roa
Signing time:             Sun 14 Apr 2024 01:00:24 +0000
ROA not before:           Sun 14 Apr 2024 01:00:24 +0000
ROA not after:            Sat 13 Jul 2024 01:00:24 +0000
asID:                     61317
IP address blocks:        2604:4500:20::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:89:a3:28:09:56:6c:39:59:44:c0:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Apr 14 01:00:24 2024 GMT
            Not After : Jul 13 01:00:24 2024 GMT
        Subject: CN=ac471aba-5c7f-4ea6-a0cb-581638c68d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:75:8f:eb:7b:28:59:57:a9:2f:2c:ab:71:92:
                    1e:68:8e:21:8d:d3:c1:61:0d:0f:18:b7:f2:15:d2:
                    9e:a3:ba:8a:b4:a3:7c:dc:08:73:0f:f0:a3:16:23:
                    31:78:ea:9b:85:22:0b:87:97:b0:b2:ae:46:17:7c:
                    d8:dc:fc:65:93:5f:bc:80:63:30:1c:a2:b9:8b:06:
                    fd:29:e2:d0:a4:7e:cf:34:49:4c:00:b0:1d:c7:4a:
                    dd:ca:13:3d:06:22:8c:f7:1f:56:0a:31:35:da:28:
                    5b:06:4b:2f:5f:e2:e1:99:ef:76:b1:33:41:3a:6a:
                    31:d3:27:de:ef:46:24:db:a7:97:6e:f7:1c:ac:b6:
                    c6:10:26:55:2d:61:dd:cb:0b:fe:ae:3f:e6:7c:5f:
                    86:13:7c:36:11:6f:b5:94:eb:52:f1:c5:4c:59:fd:
                    32:26:1f:26:20:b9:ba:d5:e7:1b:8b:a8:37:71:d8:
                    5a:ac:2d:fb:38:f7:9c:11:80:03:14:bd:83:b7:2c:
                    84:19:8c:2e:af:a4:40:69:d5:50:0c:f7:0d:f7:81:
                    52:99:ca:a3:92:99:6c:47:18:67:30:49:5a:80:c8:
                    6e:91:28:b1:33:36:34:8b:2b:b2:ab:13:aa:d4:9e:
                    c3:8a:11:ef:7d:55:ed:c1:6c:53:a0:0f:8f:92:44:
                    be:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:87:D3:99:25:B7:C4:FD:2D:4A:C2:47:FE:D6:DC:56:87:AD:34:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c5853b83-12bf-3cdc-87d1-07ddf698d72c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4500:20::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:77:4a:fa:39:66:0c:66:ce:e9:12:96:92:56:d8:9f:1f:1a:
         f5:60:96:28:2c:ee:39:3e:1c:8c:03:47:a7:24:05:98:5f:29:
         a4:0f:24:67:c1:f6:39:14:06:95:ae:c8:0e:42:bc:4c:bd:a4:
         ab:a5:f4:36:04:5f:ab:a2:8b:be:4d:a2:01:00:f8:22:0d:a2:
         f1:43:16:19:19:e6:08:ee:99:b2:91:f3:4d:c2:e8:a6:33:df:
         c7:57:d7:a9:1e:f5:81:83:f9:5e:c6:25:70:0e:c8:d6:9e:23:
         ad:c8:69:a0:65:9c:74:c8:70:9f:5c:83:8c:96:87:76:50:fc:
         19:62:ca:de:de:41:b7:46:14:bf:26:35:ac:5b:28:85:7d:c1:
         eb:dd:9d:d6:fc:e0:77:d3:46:d6:76:c7:79:f4:7c:6e:a0:10:
         ec:6b:91:3c:8f:26:da:62:23:2b:4f:fb:bd:e0:40:53:fe:d7:
         25:fc:43:b6:de:5e:a9:c7:c6:d3:57:3f:f1:7b:38:0c:a0:22:
         48:b9:58:fd:32:d5:0c:3e:80:d0:64:cd:a8:b5:37:ba:ad:2a:
         91:4f:e9:ca:13:8f:62:49:75:59:ad:c6:8d:bc:76:2d:af:b6:
         24:85:28:c0:09:5a:83:38:7e:de:b5:12:0e:6e:56:97:69:70:
         45:53:ab:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:01:13 2024 by rpki-client on console-fra.rpki-client.org