Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/bb32bb6b-e68d-3f07-abe8-33529005d4da.roa
File:                     bb32bb6b-e68d-3f07-abe8-33529005d4da.roa (raw, json)
Hash identifier:          XpmJb4UyBNNsPmvGpy1AhSALwHk8jtlCVavD7eoe+Ow=
Subject key identifier:   27:E0:AA:EB:BA:A1:1B:AB:0D:3C:46:0C:FF:9F:64:12:E3:A5:F5:84
Certificate issuer:       /CN=8a9663d9-43e8-4ddb-be80-8316cf022a7a
Certificate serial:       010D0C9F43285845CE08F09538DE28F3F4A5DC29
Authority key identifier: 1E:DA:F3:05:FE:C0:E4:DB:96:3C:B8:01:F5:37:3A:C1:C5:3E:EE:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/bb32bb6b-e68d-3f07-abe8-33529005d4da.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     3379
IP address blocks:        2620:190::/32 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:08:f0:95:38:de:28:f3:f4:a5:dc:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a9663d9-43e8-4ddb-be80-8316cf022a7a
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=7bc1192e-d6b1-440a-828e-331f73229d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:eb:4d:a7:e7:ba:6f:7e:cf:9a:8d:4e:51:d8:
                    bd:bb:79:cf:87:4e:c1:e3:8f:e7:9a:47:f6:79:5b:
                    b6:be:ac:37:8d:98:53:52:d5:ef:73:a0:51:5f:0c:
                    c2:35:ba:33:38:cd:90:bb:33:c6:00:ef:e9:7f:22:
                    6c:b8:24:3e:ee:79:09:23:e7:2f:89:ee:99:fa:9f:
                    98:28:d8:f8:72:1d:48:00:31:36:6d:88:1f:48:9d:
                    38:de:20:1b:94:65:aa:cc:25:da:8e:9d:e4:9d:ca:
                    51:1f:44:52:0b:bc:dc:28:5f:d5:89:2a:1f:bb:55:
                    84:55:67:85:0b:08:17:c3:ee:1e:f7:2b:71:c0:3d:
                    10:57:13:05:a6:6f:23:d7:6c:3f:9a:3a:fa:93:3a:
                    9b:6a:8a:6e:01:72:d5:8c:a2:15:8e:fe:11:5c:e2:
                    9f:5a:e4:4b:fd:b2:8c:21:07:16:f8:0a:87:7b:15:
                    b2:97:ff:35:78:19:04:e3:74:3c:8c:8e:87:d7:6d:
                    6f:d2:a3:32:51:d2:72:3a:fa:c4:ef:80:87:62:61:
                    d0:d2:b9:a6:89:00:b5:af:4f:af:05:51:ab:17:95:
                    00:9c:d8:35:08:a5:44:74:aa:64:c3:d4:a5:1a:eb:
                    b7:eb:09:32:bb:ae:46:0f:97:3a:7f:ce:c1:b7:0b:
                    a8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E0:AA:EB:BA:A1:1B:AB:0D:3C:46:0C:FF:9F:64:12:E3:A5:F5:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/bb32bb6b-e68d-3f07-abe8-33529005d4da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.crl

            X509v3 Authority Key Identifier:
                keyid:1E:DA:F3:05:FE:C0:E4:DB:96:3C:B8:01:F5:37:3A:C1:C5:3E:EE:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:190::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:3e:86:fa:6f:69:7a:4e:c1:0c:71:20:3b:2e:b3:f1:dd:e7:
         97:70:1d:c4:95:fc:5b:f7:ec:86:d2:b5:ca:f0:b5:9b:3f:ac:
         cf:48:d6:89:c1:f2:b9:68:2c:28:a1:0f:31:2a:db:2f:a8:2c:
         43:59:61:c5:59:f2:8f:d2:51:f3:56:58:8c:98:8f:3e:ec:f7:
         f8:ce:1d:fb:79:e8:a7:b7:06:2b:6a:e7:81:89:c7:96:4a:d6:
         a6:b0:e6:5f:24:3a:12:48:01:72:d3:43:8c:69:22:18:3e:2d:
         9e:af:24:02:a9:56:01:69:db:1a:8b:46:e2:2b:cd:d9:ae:eb:
         10:ff:1b:6c:12:d3:37:db:48:78:58:60:91:ed:84:dc:de:a4:
         97:1b:db:a4:3e:8a:73:07:65:41:08:40:7f:7d:83:d0:c1:ca:
         59:50:10:53:38:70:0b:e6:4f:97:32:80:c7:97:cc:27:08:9c:
         1b:cd:d0:52:bc:21:0d:17:e0:0f:b0:af:1e:17:70:b6:0e:6e:
         a2:71:66:15:92:49:2d:c6:cf:2e:4f:a0:91:f0:74:dd:67:7a:
         2e:e8:f2:89:a3:d8:ed:82:0a:87:90:61:ad:8d:00:22:4c:9c:
         75:a9:96:a5:86:99:0c:4f:7e:ee:c4:d8:49:d8:5b:56:05:33:
         a0:74:ec:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:59:41 2024 by rpki-client on console-ams.rpki-client.org