Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/fde386a0-a0a3-33f9-ad11-813778cd69cd.roa
File:                     fde386a0-a0a3-33f9-ad11-813778cd69cd.roa (raw, json)
Hash identifier:          J619xXO3QBVpMR25XguoYfywecJFs0MKnj1XiUV4hDA=
Subject key identifier:   98:BF:DD:87:5C:E6:67:4D:C8:07:2A:EA:6F:FC:F1:C0:19:2E:49:59
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F43285844F035455826471247C070C180
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/fde386a0-a0a3-33f9-ad11-813778cd69cd.roa
Signing time:             Mon 19 Feb 2024 02:00:25 +0000
ROA not before:           Mon 19 Feb 2024 02:00:25 +0000
ROA not after:            Sun 19 May 2024 01:00:25 +0000
asID:                     29802
IP address blocks:        2604:880::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f0:35:45:58:26:47:12:47:c0:70:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Feb 19 02:00:25 2024 GMT
            Not After : May 19 01:00:25 2024 GMT
        Subject: CN=52597bcf-4f27-499e-ad0a-25a8645c0058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:27:3e:61:9e:4b:73:f6:20:e6:80:e5:e3:a1:
                    f1:f1:0e:a3:19:c9:a2:aa:e3:4a:ec:ef:38:ba:37:
                    cf:f5:7e:37:f3:88:b7:55:ac:d2:00:ab:83:11:85:
                    24:d8:36:ed:a6:72:0f:ed:40:67:39:72:09:2d:e9:
                    67:37:25:51:d6:4b:a1:83:29:e8:a3:60:cb:73:c0:
                    36:ec:d4:e2:aa:25:3e:df:b5:92:95:fd:45:f1:5e:
                    1a:66:9c:df:cd:7f:66:df:87:9f:dd:52:69:07:25:
                    a3:c6:7f:12:69:1d:87:1f:ef:ae:0d:8d:0b:62:7a:
                    13:7b:79:1a:4b:04:e7:f0:80:5d:88:dd:15:f6:df:
                    28:53:dc:a4:49:1f:a8:6a:3d:d5:6f:d2:ac:b0:37:
                    80:e8:c7:77:40:e7:d3:9a:df:c3:ed:8a:f5:5c:de:
                    56:30:0c:6d:98:4b:88:97:10:24:0e:b3:a8:1f:52:
                    30:af:8b:a2:16:e9:d4:3d:5f:f5:b9:dc:e4:20:f6:
                    62:7c:e1:94:df:50:cb:41:18:ba:05:e8:42:d3:9a:
                    19:75:b5:23:c1:bb:76:04:4e:db:89:80:27:65:f8:
                    4a:79:9c:3a:3a:05:cc:9d:09:56:9a:14:46:94:5b:
                    88:73:d9:8a:57:be:fa:92:77:05:d4:55:2c:f6:b4:
                    44:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BF:DD:87:5C:E6:67:4D:C8:07:2A:EA:6F:FC:F1:C0:19:2E:49:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/fde386a0-a0a3-33f9-ad11-813778cd69cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:99:6d:d8:b7:7a:07:98:2d:e2:9b:43:f5:6b:0c:cc:23:8a:
         db:31:55:fd:90:10:15:bc:30:25:72:db:c3:5a:9e:fa:a3:a2:
         e8:0c:5a:73:a2:96:29:68:7b:b3:10:62:50:10:fc:b3:b4:43:
         ad:3a:84:98:da:b0:c8:21:61:a7:d9:b2:8f:b3:6d:83:3e:4f:
         7c:5c:0d:25:0f:eb:5f:d4:ef:36:5f:2f:3c:6b:38:b3:09:3b:
         32:0a:6f:92:ac:e5:d2:c2:04:5f:f0:bf:a3:09:0a:ed:4d:2b:
         a0:7f:fc:e5:b4:38:3f:be:9a:ea:aa:1d:af:31:bf:f6:fc:4b:
         c8:21:85:b8:3e:ee:48:23:f4:e9:d9:ba:ae:42:b6:d5:70:fd:
         96:f1:f9:17:0d:17:d5:e4:5f:f3:0e:0f:03:57:df:a8:d4:55:
         03:b3:89:74:e4:08:33:3a:9a:d5:2d:8f:8f:c6:1f:84:0a:84:
         36:5e:7c:7e:45:76:e4:c2:32:83:fd:4e:52:5e:42:1d:75:83:
         ca:3e:d9:53:67:d2:30:b5:07:b2:1a:e2:99:82:7f:ae:d4:85:
         e2:d6:9a:53:a0:c2:18:1b:6b:9d:d1:13:60:51:9f:83:18:02:
         21:3e:a3:2e:e5:e0:a6:0a:ae:ae:03:fe:1d:6f:f1:f3:97:a6:
         d1:70:85:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 16:12:01 2024 by rpki-client on console-fra.rpki-client.org