Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/65a4b56c-f44e-3e76-9246-fb6d1e70749b.roa
File:                     65a4b56c-f44e-3e76-9246-fb6d1e70749b.roa (raw, json)
Hash identifier:          lwzsEW5iu3w05LZ10PrY6QlmqOxcEFgkGDnoH39fl5c=
Subject key identifier:   2C:61:CA:D0:4E:49:B4:5C:3A:41:9E:1E:56:68:0A:1A:B6:23:91:59
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B6122F6CB0EC5957CF6600
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/65a4b56c-f44e-3e76-9246-fb6d1e70749b.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     855
IP address blocks:        2001:4c0:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b6:12:2f:6c:b0:ec:59:57:cf:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=57c7eeb2-477e-44e0-977a-5ba11ceecef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:49:f3:e2:0c:e1:2e:43:43:11:e5:ca:95:c1:
                    b1:32:6a:cd:bd:d0:a8:3d:81:32:ef:b0:68:1f:00:
                    05:db:0f:24:30:32:03:06:b2:f5:0b:1e:c5:7b:6a:
                    64:5a:a5:1d:8f:e1:4b:18:ef:dc:f9:29:73:24:98:
                    3c:15:86:22:ce:eb:b8:5e:26:7f:35:15:12:37:a1:
                    e7:d9:38:4d:0c:3b:18:5c:5f:dd:d1:a5:02:59:83:
                    37:90:41:21:38:05:ad:51:86:b6:77:58:d7:82:27:
                    00:1e:28:a1:7e:dc:1a:5d:e2:bb:bb:b3:bc:93:ba:
                    4a:50:22:1c:b5:48:cd:b2:1e:be:b7:8d:8b:fc:7f:
                    e2:3e:c1:69:ab:21:5a:54:5d:37:7e:15:64:4e:23:
                    b4:ef:c9:84:94:5a:4d:b0:82:e3:46:58:6e:a5:0a:
                    ca:df:a3:5b:95:86:3e:70:51:20:d3:fc:7c:f8:85:
                    e6:bf:0a:bc:39:75:5f:b7:e3:f3:4b:c7:fc:90:77:
                    d2:98:81:2e:0c:0b:fc:99:cb:33:df:d0:6a:9e:02:
                    d6:b2:83:b0:a5:e9:b5:44:38:a9:25:01:85:3e:66:
                    00:fd:26:9e:ac:9c:1e:3e:7a:5e:67:0c:aa:5c:c3:
                    86:c2:a4:47:41:39:75:5c:e9:b6:44:06:aa:e9:30:
                    ae:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:61:CA:D0:4E:49:B4:5C:3A:41:9E:1E:56:68:0A:1A:B6:23:91:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/65a4b56c-f44e-3e76-9246-fb6d1e70749b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c0:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:a0:9c:d0:6d:e9:9b:cb:5f:04:40:37:64:32:84:0a:19:f2:
         5c:12:6f:37:6a:ed:f4:16:d2:d3:32:a0:3d:82:68:a4:7d:2a:
         a3:50:1e:96:95:5d:6d:d2:d8:53:5d:34:1c:1b:2d:86:ce:bb:
         fa:84:ae:6d:6e:f8:a1:e7:73:53:f0:c7:9c:78:12:2f:aa:c5:
         5e:5b:b7:44:f2:c2:9e:42:7c:c4:bd:b4:fc:80:30:7b:bb:d6:
         a2:65:8b:a4:80:28:dc:3d:f2:28:98:ab:17:a4:51:8a:77:b2:
         08:5f:d6:5d:89:73:87:eb:c5:a4:e4:65:f0:fe:37:69:bf:98:
         f8:50:08:6d:dc:fc:3b:ba:92:b0:d8:13:55:82:39:d4:a4:aa:
         a1:a1:83:a2:9d:de:67:31:81:20:9c:c5:78:fb:e0:47:e5:66:
         80:84:05:dc:b7:25:26:84:2d:ca:ee:8e:ff:d6:d8:0c:25:51:
         ee:1f:69:25:15:e1:15:15:cf:51:c0:af:9a:2e:a4:ef:39:4b:
         36:13:3f:6a:56:9f:69:ad:5c:95:59:39:91:7b:7f:e5:cb:41:
         e3:55:06:38:c9:3b:bb:15:46:0d:a6:7d:d5:95:4e:fa:d8:34:
         6b:00:63:35:6e:5d:5f:73:70:b8:46:40:c0:a3:14:a8:3a:ff:
         41:92:03:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:21 2024 by rpki-client on console-fra.rpki-client.org