Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/19707577-a550-35cc-9aa1-82013a93096f.roa
File:                     19707577-a550-35cc-9aa1-82013a93096f.roa (raw, json)
Hash identifier:          Du2U9u/QhrwimYsH3MxCRmGcgr4Attuigd4lOvaSmJs=
Subject key identifier:   B9:84:CE:78:37:ED:6C:42:67:75:58:65:F3:EB:59:7F:DF:EB:FC:31
Certificate issuer:       /CN=28df346d-3f66-4555-b2ab-67f450efdcb3
Certificate serial:       010D0C9F4328584550682A563DB74A53055AD100
Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/19707577-a550-35cc-9aa1-82013a93096f.roa
Signing time:             Sun 24 Mar 2024 13:00:33 +0000
ROA not before:           Sun 24 Mar 2024 13:00:33 +0000
ROA not after:            Sat 22 Jun 2024 13:00:33 +0000
asID:                     14230
IP address blocks:        2607:fb20::/32 maxlen: 48
                          2604:9b00::/32 maxlen: 48
                          2604:ac40::/32 maxlen: 48
                          2001:49f8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:50:68:2a:56:3d:b7:4a:53:05:5a:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3
        Validity
            Not Before: Mar 24 13:00:33 2024 GMT
            Not After : Jun 22 13:00:33 2024 GMT
        Subject: CN=960277cf-38e7-4ad1-9777-507408a1a42f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4d:28:2c:ce:e8:46:c6:8d:76:28:3e:54:17:
                    be:26:b4:d9:8e:f5:2d:67:0b:0b:18:18:ae:3c:c3:
                    1e:b0:80:ec:6b:cd:7c:f4:4c:fb:f7:b4:be:60:c9:
                    b3:e2:9c:ab:df:bf:a7:f7:20:48:6a:2c:c3:11:0b:
                    e9:b7:30:92:e8:4d:82:dd:6a:2d:7f:19:6c:0a:1b:
                    5b:01:47:2d:64:f6:5b:aa:ea:54:73:3f:f7:a5:8c:
                    f5:85:36:e2:ad:1c:bb:1e:04:46:29:58:32:e3:0f:
                    12:56:ab:2a:d5:5d:8e:fe:99:26:31:2b:7c:e9:8d:
                    99:cb:76:45:80:14:27:c9:ac:df:54:12:52:ed:ef:
                    74:cf:8c:1d:f1:d6:08:50:02:eb:95:c9:8a:ff:c6:
                    bd:87:58:7a:51:71:db:c0:9e:27:2a:4f:3c:90:07:
                    94:2a:04:ac:de:88:f1:83:91:76:ea:24:cb:8d:34:
                    6a:fe:05:35:82:96:6b:13:11:64:84:c9:5d:37:05:
                    67:13:8a:50:50:e1:3a:e8:99:a5:14:61:c6:5c:4b:
                    7d:ce:1d:44:4a:2f:07:b1:1b:98:91:5f:b6:89:e6:
                    cd:cd:10:5b:a5:f7:b6:80:08:3e:5c:10:2b:d0:52:
                    75:17:c8:ab:cc:9b:f2:a1:dc:e4:c2:fe:d0:ec:0e:
                    87:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:84:CE:78:37:ED:6C:42:67:75:58:65:F3:EB:59:7F:DF:EB:FC:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/19707577-a550-35cc-9aa1-82013a93096f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl

            X509v3 Authority Key Identifier:
                keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49f8::/32
                  2604:9b00::/32
                  2604:ac40::/32
                  2607:fb20::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:5f:1c:3e:6a:e6:a9:94:18:fe:40:ee:55:bd:75:4f:e9:85:
         10:c8:ba:79:e1:57:9c:64:77:33:bb:cb:d8:ec:b3:72:f9:61:
         c8:f4:13:46:cf:48:c3:86:07:8b:92:1c:20:8e:32:a6:15:1a:
         5e:74:3e:2a:00:dc:05:6a:b1:ae:5f:c0:6f:6a:59:9d:6f:3b:
         fc:ad:f7:db:d7:f5:f7:57:5d:56:68:f9:18:02:01:6f:e5:d3:
         2e:dd:e0:4a:93:b0:f1:c6:72:67:d2:fa:ba:2b:5a:49:8a:c2:
         25:d7:73:e4:5b:6d:64:df:23:99:d9:17:b7:4e:80:8c:3c:d7:
         09:b0:d9:02:fe:37:e5:29:b2:7c:31:d8:b4:53:88:20:90:59:
         32:6b:a7:0b:cb:5a:62:cd:b9:0b:22:40:83:ef:66:fe:3c:ea:
         15:0b:05:04:67:07:fe:55:fc:8d:54:00:15:ab:dc:c0:53:6c:
         0c:67:67:ee:f6:57:5e:eb:ae:07:9c:b6:82:18:6d:a6:ed:3b:
         2b:45:e2:f5:7c:63:45:45:7c:d9:f5:d5:99:62:ee:9e:b5:9e:
         74:d3:5f:0a:64:fa:67:af:c1:ec:04:d3:f0:ae:ac:22:14:f0:
         78:86:b0:eb:42:75:be:d0:36:57:54:c8:76:56:37:a2:5c:00:
         f8:48:99:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:06 2024 by rpki-client on console-ams.rpki-client.org