Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/b2837f54-ee64-3401-a183-f00d193d2ef4.roa
File:                     b2837f54-ee64-3401-a183-f00d193d2ef4.roa (raw, json)
Hash identifier:          Ih1aN4R8bTGpwP7o7Ks4jJDwJU0R85MGF7LrIuYxixk=
Subject key identifier:   7C:AA:0A:EC:C8:A0:A2:8F:3D:A0:73:E4:C9:24:5C:75:6D:70:28:3B
Certificate issuer:       /CN=2d6a17c2-b155-4b32-933b-3f7043e2cecc
Certificate serial:       010D0C9F432858450ABAD5AEE759CF719E52B600
Authority key identifier: 0B:75:35:AC:19:65:B0:66:0B:65:F7:2F:F2:E3:7F:C4:7A:A3:03:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/b2837f54-ee64-3401-a183-f00d193d2ef4.roa
Signing time:             Wed 28 Feb 2024 14:00:31 +0000
ROA not before:           Wed 28 Feb 2024 14:00:31 +0000
ROA not after:            Tue 28 May 2024 13:00:31 +0000
asID:                     33333
IP address blocks:        2607:f5a0::/32 maxlen: 48
                          2607:ffd8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/2d6a17c2-b155-4b32-933b-3f7043e2cecc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/2d6a17c2-b155-4b32-933b-3f7043e2cecc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0a:ba:d5:ae:e7:59:cf:71:9e:52:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d6a17c2-b155-4b32-933b-3f7043e2cecc
        Validity
            Not Before: Feb 28 14:00:31 2024 GMT
            Not After : May 28 13:00:31 2024 GMT
        Subject: CN=736099cf-c519-4adc-ab8f-930624e2d865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b9:4e:13:c8:f4:c7:1e:0e:2c:3e:d5:e9:e3:
                    df:e6:be:7b:b3:08:48:9a:7d:ba:45:d0:f5:82:af:
                    f6:31:c0:44:28:3c:70:a8:d0:c2:b9:63:da:67:47:
                    28:0b:d3:80:31:48:7e:5b:19:03:42:f1:83:73:e2:
                    c6:24:bc:ca:27:11:e8:7b:68:53:67:be:54:ce:ab:
                    e2:d3:23:7b:22:dd:4e:16:38:7b:9b:42:82:da:b5:
                    1b:ba:67:bc:e2:a5:70:12:d7:90:10:bd:99:42:ba:
                    e3:1f:5d:66:bc:f1:86:e8:f8:c2:c5:03:68:26:21:
                    5b:a8:41:dc:29:6f:2c:44:26:45:59:f7:8e:ac:ef:
                    58:61:23:a9:11:9c:61:62:ef:bb:0f:57:a9:40:55:
                    30:9d:a8:7c:73:2b:8a:4b:f7:4d:d1:df:ca:b2:b3:
                    aa:b1:9e:6d:4e:35:03:5e:1b:1f:47:0c:37:b2:c3:
                    60:8f:b8:6a:86:19:8a:20:7a:4a:36:c5:62:ef:3d:
                    da:d5:38:15:60:0f:21:2e:01:9b:bb:78:d2:b1:90:
                    39:d1:b5:e7:69:42:be:83:a2:a7:94:ec:a2:74:82:
                    54:f6:15:1a:cc:95:f8:f6:ee:d5:57:7f:6f:85:83:
                    40:cc:41:28:36:63:70:f4:c2:ee:f4:b4:5e:4b:0c:
                    f2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AA:0A:EC:C8:A0:A2:8F:3D:A0:73:E4:C9:24:5C:75:6D:70:28:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/b2837f54-ee64-3401-a183-f00d193d2ef4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/2d6a17c2-b155-4b32-933b-3f7043e2cecc.crl

            X509v3 Authority Key Identifier:
                keyid:0B:75:35:AC:19:65:B0:66:0B:65:F7:2F:F2:E3:7F:C4:7A:A3:03:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5a0::/32
                  2607:ffd8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:0c:27:9a:3b:b4:0e:71:a5:d4:ae:9e:1c:22:13:4a:87:f5:
         9c:55:43:bf:a9:92:9f:67:13:ba:c3:dc:ea:35:ad:5c:96:a1:
         25:ad:b3:3f:65:6c:c3:2d:02:04:37:27:a2:98:fc:87:fa:a9:
         58:49:44:ab:ec:09:4c:92:90:56:5e:4a:c8:3a:7f:87:08:25:
         6b:b8:e0:63:91:68:9e:fd:44:c5:ae:b1:ab:1a:60:a5:46:b5:
         63:56:cc:00:0a:77:10:d4:ee:5e:12:c8:33:59:eb:e1:de:81:
         85:1f:33:a9:57:94:b6:02:6a:0c:86:16:d4:fe:f9:3d:c1:6c:
         de:66:e5:c9:c1:dd:f0:c8:f5:9f:35:9c:fb:7f:69:b3:6b:ac:
         03:f8:1a:59:36:e5:e2:58:5a:62:d8:da:6f:33:4e:84:78:33:
         f5:9f:20:d4:86:a8:0a:f9:d4:c1:53:0a:10:1f:e8:04:2f:bd:
         db:9d:15:bf:c4:70:3f:b6:73:bf:c4:5c:69:36:d8:c6:2f:97:
         c8:86:b7:2b:a1:f8:c4:a2:4a:33:2e:ac:02:e0:7d:93:77:e4:
         7d:ca:7a:cb:48:85:75:b8:e4:c0:81:53:c9:73:28:5c:62:c1:
         09:5c:00:c8:dc:f3:c1:b5:97:17:e1:1b:1c:b0:2b:fd:89:22:
         75:51:32:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 17:12:10 2024 by rpki-client on console-fra.rpki-client.org