Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/1bc0b1e6-ba1d-3c24-b678-c29bf30220e3.roa
File:                     1bc0b1e6-ba1d-3c24-b678-c29bf30220e3.roa (raw, json)
Hash identifier:          /bIgRwtGpK80KZPavCmdmH+VUautzNSh3HTqLAOmy1Y=
Subject key identifier:   39:B8:44:6E:33:99:68:AB:09:84:9D:66:16:CD:E2:AA:FB:42:B8:0F
Certificate issuer:       /CN=0c82e125-4df5-4912-a714-101a1caa5b99
Certificate serial:       010D0C9F4328584558C839D827F30DC9A6EFA9F0
Authority key identifier: C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/1bc0b1e6-ba1d-3c24-b678-c29bf30220e3.roa
Signing time:             Wed 27 Mar 2024 13:00:35 +0000
ROA not before:           Wed 27 Mar 2024 13:00:35 +0000
ROA not after:            Tue 25 Jun 2024 13:00:35 +0000
asID:                     54054
IP address blocks:        2620:8c:4000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:58:c8:39:d8:27:f3:0d:c9:a6:ef:a9:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c82e125-4df5-4912-a714-101a1caa5b99
        Validity
            Not Before: Mar 27 13:00:35 2024 GMT
            Not After : Jun 25 13:00:35 2024 GMT
        Subject: CN=8e5bc286-9777-4358-85fb-8a5f702ecff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:32:61:c1:d8:b5:10:a5:22:50:ac:c7:b7:70:
                    ce:16:93:0b:00:13:c0:c4:b7:e5:f4:f0:32:10:a3:
                    95:1a:31:30:a3:fe:23:2b:1d:71:cb:35:69:c1:a0:
                    33:1d:76:97:c3:4a:97:06:a2:e8:9b:c4:aa:72:73:
                    29:3c:aa:85:a4:96:d2:1a:b5:17:1f:4c:58:60:53:
                    07:88:cf:ba:15:d4:e5:50:00:11:86:c5:8d:cc:1f:
                    e1:dd:94:d5:78:24:0a:bc:58:e1:08:73:6c:93:45:
                    ae:d6:6f:a4:23:e2:0c:df:5d:ea:5e:27:24:62:f1:
                    54:f8:a1:0d:db:7c:0a:68:6e:0b:20:b3:bb:ca:ab:
                    85:04:6a:e7:26:4f:c0:41:86:cd:bc:24:5d:fa:87:
                    fd:49:58:ba:2f:b9:cc:1c:9e:f0:c7:cd:3e:9c:5c:
                    3a:bf:5d:ff:b5:f9:09:97:f1:f0:3b:24:73:95:c9:
                    37:c8:88:ae:d0:b0:42:69:2a:7e:a3:41:72:a6:c8:
                    7f:26:1a:63:f6:f7:45:06:71:97:79:5e:80:6c:fd:
                    c8:fc:7b:9f:37:e4:01:04:36:0a:23:83:f0:0e:86:
                    c9:86:ee:57:f2:b5:28:8b:97:42:91:55:15:c5:ed:
                    a0:0f:cf:f4:e5:90:f3:09:c0:c9:f3:97:42:31:dc:
                    80:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B8:44:6E:33:99:68:AB:09:84:9D:66:16:CD:E2:AA:FB:42:B8:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/1bc0b1e6-ba1d-3c24-b678-c29bf30220e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl

            X509v3 Authority Key Identifier:
                keyid:C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:8c:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:fd:7d:64:3b:a5:13:07:af:6b:0a:84:e7:7b:f7:44:98:3f:
         c2:a4:8f:b2:8c:30:51:7c:b2:67:22:33:3c:7b:66:c0:2e:8c:
         0a:2a:73:e0:4f:af:35:2e:51:5e:dc:49:02:95:e3:3c:ad:ec:
         3d:27:0a:74:99:e8:c9:3d:d3:6e:47:73:e8:a0:81:cc:b0:84:
         18:df:26:48:74:c6:12:44:e9:9c:32:d1:8d:be:8b:46:0b:7d:
         5d:1f:46:07:bd:a9:af:07:59:1a:ba:34:09:b6:5a:2f:dc:6d:
         67:76:42:b1:7c:f6:e9:75:73:73:e3:43:66:fa:ba:5b:54:e7:
         35:c5:09:69:3a:79:64:d3:02:5c:50:b8:8e:92:64:52:3d:c6:
         53:2c:d5:5c:55:5e:0e:ba:75:fc:0c:04:be:e4:aa:82:b5:85:
         06:7c:f9:2d:3b:1d:d8:61:57:ca:b7:f3:85:51:b2:2a:2e:db:
         db:4c:d7:96:39:7c:75:6e:df:60:0b:8a:6d:ed:33:b5:b5:70:
         a7:52:55:02:ba:a9:a6:cd:c4:32:26:b2:3a:47:cf:a5:10:b0:
         29:1f:2a:0b:50:a2:71:81:43:25:7f:1c:a2:65:7c:7f:76:00:
         a5:c9:2b:52:03:a1:8e:6e:e9:34:8c:70:8a:90:da:a5:69:99:
         ff:ee:fe:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:08:59 2024 by rpki-client on console-fra.rpki-client.org