Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/9051a4c1-e0cc-3c99-b06f-6125fd4e2008.roa
File:                     9051a4c1-e0cc-3c99-b06f-6125fd4e2008.roa (raw, json)
Hash identifier:          p3fpTh0kpqBvv83aOHfYqphKtJM0VagHOPUIKxSzglk=
Subject key identifier:   29:5A:10:62:03:F1:43:2C:0D:3F:2D:94:8A:05:AB:80:2D:7F:ED:6E
Certificate issuer:       /CN=e85b04ff-40d9-4bf7-8d38-4de0c54bb785
Certificate serial:       010D0C9F432858455F0520199FDA79BA7843F800
Authority key identifier: D6:BF:E3:FD:2D:90:49:61:AF:E1:E9:09:3F:B8:8F:2C:E4:E3:06:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/9051a4c1-e0cc-3c99-b06f-6125fd4e2008.roa
Signing time:             Fri 29 Mar 2024 18:38:12 +0000
ROA not before:           Fri 29 Mar 2024 18:38:12 +0000
ROA not after:            Thu 27 Jun 2024 18:38:12 +0000
asID:                     47065
IP address blocks:        2620:33:c000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:05:20:19:9f:da:79:ba:78:43:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e85b04ff-40d9-4bf7-8d38-4de0c54bb785
        Validity
            Not Before: Mar 29 18:38:12 2024 GMT
            Not After : Jun 27 18:38:12 2024 GMT
        Subject: CN=37da22c1-58c7-44c4-abfb-a441e5d1beaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8a:0e:12:fa:d1:4c:5c:64:15:00:eb:d6:b6:
                    7b:9d:06:6e:48:ba:70:c8:88:d9:df:0c:0a:ad:17:
                    af:46:9d:40:10:01:5e:ee:37:83:0a:7c:5c:64:08:
                    24:e0:99:d6:88:fe:50:63:ec:84:e2:04:e8:92:1d:
                    0a:c4:8a:ab:f3:3f:2f:58:01:ad:4e:bf:cd:e1:e4:
                    ec:ed:67:32:e6:04:e6:51:12:6c:c0:38:69:29:15:
                    87:49:03:05:30:47:6e:9b:e5:84:bc:65:ec:fb:ce:
                    86:c7:f7:90:c1:d8:56:a6:60:b7:6a:b8:dd:a5:68:
                    9f:b2:33:a0:cc:5b:4c:b8:b5:7f:b2:18:92:34:9a:
                    99:62:b9:4b:e0:82:15:dd:ce:24:f6:b3:86:27:ad:
                    63:7c:9a:b3:01:27:fb:ad:bd:cb:30:ad:c8:38:c1:
                    cd:9c:f5:75:4b:76:b0:9d:47:84:e9:9b:b6:9d:bd:
                    ad:e8:8f:6f:d7:ee:19:d5:87:5a:2e:21:af:97:1d:
                    23:de:d0:ea:ca:9d:40:17:f5:0c:7c:dd:86:30:93:
                    15:63:12:31:9a:50:5e:7d:5e:bc:43:d1:d8:30:c8:
                    18:6a:c5:66:35:70:34:a0:d6:7f:b3:31:4f:ab:c9:
                    f7:f6:ba:10:43:85:0a:99:64:55:61:03:0d:ca:26:
                    23:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5A:10:62:03:F1:43:2C:0D:3F:2D:94:8A:05:AB:80:2D:7F:ED:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/9051a4c1-e0cc-3c99-b06f-6125fd4e2008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.crl

            X509v3 Authority Key Identifier:
                keyid:D6:BF:E3:FD:2D:90:49:61:AF:E1:E9:09:3F:B8:8F:2C:E4:E3:06:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:33:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:2b:61:51:a7:0a:af:e4:50:90:4d:42:30:4d:71:40:24:36:
         1a:c0:0f:0c:5d:f0:d0:88:f7:2a:f0:76:be:31:96:b0:f0:59:
         74:de:5f:4e:19:84:66:81:3a:51:31:d7:fb:f1:05:13:48:97:
         c2:cf:08:5a:f4:a1:c5:2e:09:a4:01:e9:bd:c9:71:61:9c:f9:
         bc:5f:9a:47:00:6b:c2:33:14:23:28:9c:67:c0:ad:e5:b1:dd:
         3f:25:64:a6:5a:1f:f4:d2:ac:ba:49:11:bc:35:22:29:dd:3e:
         87:6b:a3:65:61:68:e9:d9:0a:06:53:ce:0f:4a:74:04:33:0e:
         78:50:4f:25:2f:5f:3a:2c:9d:0c:25:d3:e9:31:3a:6e:ea:e6:
         ec:c9:da:b6:a2:50:44:a1:13:4c:2c:3a:8b:79:f9:1a:39:1a:
         83:28:80:9b:69:22:99:7e:66:58:60:c4:46:cf:1f:26:1e:67:
         21:6c:3b:ae:83:0d:07:89:0e:31:7d:9d:ad:e6:ae:4b:08:82:
         07:03:76:af:cf:d8:d1:29:3a:83:fa:64:81:ed:18:2f:80:50:
         77:c3:0b:8f:3c:b2:0e:02:2e:6d:be:bb:dd:4b:b1:63:d2:fd:
         49:d8:cf:f2:ba:d2:60:01:4f:68:c1:0d:b2:45:70:2f:d3:fb:
         69:cb:6b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:37:58 2024 by rpki-client on console-fra.rpki-client.org