Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0887f272-9ef5-3c8d-b013-94c2b7f45cd2.roa
File:                     0887f272-9ef5-3c8d-b013-94c2b7f45cd2.roa (raw, json)
Hash identifier:          BUgLuy2DL6rCXI7jmPIrnA7BRWtE9BHEN+gWG5I+Ido=
Subject key identifier:   F0:4B:93:CE:C8:DF:A3:7E:0B:F8:AC:B8:C9:A8:C8:8A:34:00:6B:B0
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285845462EEBBFE5484F6492A6B600
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0887f272-9ef5-3c8d-b013-94c2b7f45cd2.roa
Signing time:             Wed 20 Mar 2024 21:07:12 +0000
ROA not before:           Wed 20 Mar 2024 21:07:12 +0000
ROA not after:            Tue 18 Jun 2024 21:07:12 +0000
asID:                     15169
IP address blocks:        2001:4860:4823::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2e:eb:bf:e5:48:4f:64:92:a6:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 20 21:07:12 2024 GMT
            Not After : Jun 18 21:07:12 2024 GMT
        Subject: CN=dd997557-2cec-4170-8750-d003a5806474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b2:c4:e4:19:fd:ee:0e:d5:fb:2a:b2:31:84:
                    19:41:45:60:32:0c:01:0c:3b:fc:6f:90:52:62:21:
                    04:c9:b4:69:73:aa:3b:ed:49:11:3c:78:09:ec:31:
                    41:c1:f1:2a:f7:f4:d9:00:ea:69:a5:02:1d:29:f0:
                    db:bf:eb:4a:0b:f7:ba:a3:a7:f7:71:e3:4b:4e:89:
                    4a:10:8f:11:ea:c5:51:ba:76:e5:a8:d7:b4:f2:c6:
                    06:4d:f8:dc:6a:e3:f3:c8:24:1c:c9:a5:72:a6:5a:
                    73:5a:12:81:c3:21:2f:4a:e6:6d:91:29:e7:ac:ff:
                    bc:98:12:c3:19:a9:84:27:0b:59:9c:ac:5a:a4:48:
                    84:39:56:88:9c:7e:c5:31:d0:19:20:2f:35:7f:63:
                    a2:fa:13:61:6a:88:25:39:69:56:de:e0:7d:7c:ff:
                    ae:e9:53:1f:b1:ca:3d:52:7e:38:0e:bb:cb:6a:9f:
                    fe:40:12:ea:7d:2f:7e:a6:4e:36:84:b0:df:5e:02:
                    22:47:d4:5c:81:a2:ee:4a:e5:d1:82:b5:ec:90:c0:
                    11:32:4f:09:28:12:04:b3:d1:32:f8:8e:8b:87:ce:
                    48:57:78:b7:fa:7f:b1:4c:41:cc:73:7c:5f:82:b1:
                    98:a9:71:2f:c2:6e:69:30:71:c4:ad:43:4f:41:d2:
                    2d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4B:93:CE:C8:DF:A3:7E:0B:F8:AC:B8:C9:A8:C8:8A:34:00:6B:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0887f272-9ef5-3c8d-b013-94c2b7f45cd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4860:4823::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:8a:3c:ab:fa:53:4f:d6:b5:b4:40:82:89:af:6f:6c:4e:8c:
         5a:ab:a5:5a:83:f3:05:77:28:e0:a3:db:18:77:f0:b6:d8:52:
         0e:fa:90:87:6f:35:b3:c8:97:14:13:bb:35:c7:b7:3c:8e:ae:
         3c:1c:33:e9:88:46:ab:f4:b0:0e:a8:db:ec:f8:88:af:ae:82:
         15:2d:20:30:68:b0:a3:e2:d0:e3:3e:37:27:44:b7:12:1a:e5:
         f5:ae:13:1e:06:c4:60:8d:c1:01:d6:12:af:1a:b2:fb:38:46:
         e6:a0:fa:bb:84:de:8c:66:3a:c3:03:49:f8:0d:3e:d1:95:83:
         af:60:58:b4:70:3d:c8:87:63:ed:20:c1:24:a2:fa:75:df:0e:
         9b:e8:b5:5f:b8:a2:29:55:96:b5:0b:be:17:f5:9c:ff:e5:82:
         f2:ed:38:bf:98:f0:c0:57:ac:63:e8:f0:bc:9c:b4:f1:dc:b6:
         f6:e2:a3:4a:c9:f2:6e:d0:74:9d:9c:74:cc:4e:c6:08:48:e9:
         ad:fb:16:0f:2f:48:f5:ac:2a:ca:6f:31:b7:45:2b:2f:fb:28:
         0f:d5:f9:de:f1:03:f3:8c:b3:d6:ca:2c:42:23:8a:2b:2c:56:
         e9:90:be:59:b3:0e:95:2c:b9:6c:c4:38:cc:c2:ba:d6:da:8a:
         55:f6:0a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:41:27 2024 by rpki-client on console-fra.rpki-client.org