Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78f79c83-f6d6-3406-b08f-0a3b5e1f5ac3.roa
File:                     78f79c83-f6d6-3406-b08f-0a3b5e1f5ac3.roa (raw, json)
Hash identifier:          1xc08kRuaTIrau5BFDKv0ZdqaETTKXGoTXxF8qB1N1U=
Subject key identifier:   18:7F:66:79:06:95:5F:20:48:DD:82:C8:8B:99:48:B3:EF:97:B5:19
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858457D132F3647D3398935133F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78f79c83-f6d6-3406-b08f-0a3b5e1f5ac3.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     12222
IP address blocks:        2001:4878:8010::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:2f:36:47:d3:39:89:35:13:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=b5a84ff0-798d-460e-b325-cac98ed073df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:db:67:9c:07:21:17:02:aa:02:0d:f3:19:50:
                    4a:6e:9c:a0:e9:fe:98:f7:8a:af:18:a8:29:cf:9f:
                    83:f1:8b:1e:af:4c:87:0d:fa:f1:88:dc:9a:69:3c:
                    e0:96:05:5b:3b:91:50:8f:f0:38:27:a9:60:20:77:
                    93:9c:45:9a:19:01:79:2e:98:e4:f8:60:ba:16:07:
                    48:01:79:9d:44:2b:c7:2c:e3:bb:34:d5:41:b0:72:
                    df:dd:28:52:4e:d0:90:64:19:ad:77:fb:c5:06:1d:
                    88:b3:3d:c4:61:b0:15:39:f3:f7:47:9d:25:9a:c6:
                    66:f3:9b:29:8c:80:c3:22:58:27:26:0f:27:d8:5f:
                    b6:5f:ce:17:d7:9f:c0:08:d1:9f:2f:8b:10:93:75:
                    88:67:a5:49:4a:a9:0c:71:ec:3c:3c:05:54:fc:c7:
                    9b:09:8f:3f:99:89:86:49:15:70:3d:86:d5:84:6e:
                    a1:fa:7d:7b:78:32:d2:a5:a6:17:87:59:aa:03:a0:
                    d3:b7:20:cf:fe:02:86:bd:7c:7b:ec:3a:64:e7:13:
                    6f:6e:ee:12:41:91:68:5e:07:fd:df:88:41:d1:52:
                    35:cc:1b:15:93:9c:63:f1:af:44:ec:be:1b:0f:b1:
                    92:bb:3f:bd:91:71:cb:a8:23:39:29:d0:f0:e3:58:
                    f4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:7F:66:79:06:95:5F:20:48:DD:82:C8:8B:99:48:B3:EF:97:B5:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78f79c83-f6d6-3406-b08f-0a3b5e1f5ac3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:8010::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:3d:21:fa:a5:5a:30:af:33:6e:6f:be:62:c8:07:38:07:38:
         c2:a8:c7:8a:ae:ab:f4:69:84:31:c0:d2:83:ff:7c:97:c0:af:
         ef:65:09:14:08:9b:ae:c6:c9:9e:2a:2c:41:8c:41:eb:99:41:
         33:b8:69:fd:34:19:4d:64:83:d9:af:f1:b4:0b:46:d0:d8:68:
         b8:95:6d:c0:5c:a0:2a:8a:af:ad:53:16:70:21:c5:19:11:76:
         02:8b:ea:64:28:d3:58:a2:98:b0:24:7b:7a:ef:e1:13:ac:c6:
         e0:cd:97:20:89:d0:1c:9d:8a:b5:c3:f1:89:cf:3d:63:29:bf:
         12:19:9b:f8:e1:86:4c:ac:80:61:92:d8:e5:a2:b7:50:04:0d:
         49:f7:b4:2f:01:43:b3:92:8c:71:ae:b9:a3:de:e4:fc:ac:0e:
         dc:a6:3e:0f:61:40:db:3f:39:df:86:71:18:44:50:bd:e2:cf:
         98:2d:51:de:ba:8c:b4:7a:bb:07:01:a8:74:ec:31:a4:39:a9:
         11:da:3c:ea:bd:8f:ed:53:4e:ee:a5:f1:31:9c:df:7c:42:a8:
         94:e9:03:0f:cf:2b:e1:38:fc:2c:20:5c:36:29:26:ad:38:50:
         d6:fb:df:95:6b:0f:70:9c:be:f6:fa:51:6f:cd:d3:b2:3e:4d:
         49:2a:b7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:05:29 2024 by rpki-client on console-ams.rpki-client.org