Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/53d7ea68-351e-38c3-937e-8f2e48e70aa3.roa
File:                     53d7ea68-351e-38c3-937e-8f2e48e70aa3.roa (raw, json)
Hash identifier:          sA2FNeoU5c6A7RROSxLoV/x4M6izbPzLXx1aqK6jwAY=
Subject key identifier:   11:D4:91:33:FD:B3:5D:61:63:FE:4D:C1:23:D9:39:C3:C3:70:CC:61
Certificate issuer:       /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c
Certificate serial:       010D0C9F4328584582A88C6B983D3585C3A49AC0
Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/53d7ea68-351e-38c3-937e-8f2e48e70aa3.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     32181
IP address blocks:        2001:1850::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:8c:6b:98:3d:35:85:c3:a4:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=d92e67bd-7a2d-4abd-bd97-87b739c127d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ce:70:f2:73:c3:cd:1c:10:5b:30:cb:39:01:
                    9b:ea:35:b6:d1:ed:2b:bf:61:a2:07:d4:47:26:79:
                    9c:5c:3d:ca:2b:5a:64:4e:77:04:e9:a5:c2:f3:4a:
                    2e:c6:5e:93:91:ca:3a:10:0c:22:bf:8c:47:ef:81:
                    c5:97:36:96:8e:43:be:7d:d0:43:e0:1a:b7:82:6a:
                    d1:81:e2:20:c4:de:59:73:b7:e6:06:b0:e0:73:9b:
                    99:f5:89:11:af:06:65:30:59:a3:49:36:c2:ec:33:
                    b4:11:b8:84:e3:9b:77:2d:44:2a:19:63:f5:9e:96:
                    8b:38:e9:08:ac:3d:23:9c:d5:ff:44:30:8f:99:bf:
                    6b:5b:ad:ce:dc:ec:2f:06:cf:20:eb:19:9d:c8:06:
                    ab:11:f5:e0:b7:69:ac:bf:25:bf:77:94:ec:fd:66:
                    35:15:e4:e7:4c:b1:23:0d:00:00:7a:61:b7:3c:8e:
                    b2:da:34:1f:08:06:03:2f:d8:06:8e:5b:73:13:30:
                    15:71:6d:36:71:fd:13:d6:9e:ee:4b:df:56:8b:da:
                    5b:f1:1b:d6:3e:e0:95:72:9d:fa:a7:c7:05:37:a6:
                    ae:3d:19:4c:4b:49:2d:8e:a0:cc:cc:3c:f4:f7:f0:
                    87:a8:db:5d:a0:1a:13:ae:e9:80:67:46:69:9b:d4:
                    ba:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D4:91:33:FD:B3:5D:61:63:FE:4D:C1:23:D9:39:C3:C3:70:CC:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/53d7ea68-351e-38c3-937e-8f2e48e70aa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl

            X509v3 Authority Key Identifier:
                keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1850::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:0b:67:79:6e:8f:19:74:dc:bc:aa:ea:56:42:20:fa:49:94:
         c5:02:39:08:3e:63:5c:e1:6a:cf:86:6a:5d:24:14:1e:4d:35:
         5a:f8:9a:bb:e4:f8:ca:af:43:13:7c:b6:09:2e:ba:21:08:d9:
         87:83:a1:c2:8d:f2:de:f9:b5:59:ff:5b:a2:b5:d4:2f:50:e1:
         79:f7:85:bb:3d:34:cb:5a:eb:11:4e:e5:43:2e:30:24:0e:6b:
         df:e7:47:01:43:40:fd:e9:76:7c:6f:e0:38:e4:6d:13:b9:ee:
         15:29:1d:51:5c:2f:2e:e9:5c:07:8b:9f:75:83:0d:82:73:3b:
         1b:01:5e:cf:17:f1:da:76:f2:05:e5:b2:0d:67:3c:e8:fc:55:
         46:09:c8:c2:cc:da:b9:35:2d:43:34:16:bc:e9:d6:56:90:c1:
         88:71:69:a2:56:a8:c8:9c:af:25:63:23:8c:44:71:59:bd:7c:
         6a:9d:a7:00:65:57:e1:b6:42:ac:c9:13:e4:08:7a:f3:71:71:
         07:3d:93:f6:ff:84:9c:1a:9b:88:11:44:ff:59:d6:5c:28:19:
         f7:cb:fa:68:e4:6a:cd:e9:aa:bc:f0:91:56:52:53:29:44:d3:
         67:7b:35:4c:c9:8e:df:34:63:e7:a0:7e:2d:37:fc:95:7c:2c:
         41:20:d5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:57:35 2024 by rpki-client on console-ams.rpki-client.org