Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/580c3cd5-a1bb-37d7-a9cc-b3daeaf91ff8.roa
File:                     580c3cd5-a1bb-37d7-a9cc-b3daeaf91ff8.roa (raw, json)
Hash identifier:          eC8io16ZZYqE92sXmrmmmZpdRdJiUsaY6YTjSH38xMw=
Subject key identifier:   5D:84:77:1B:7D:70:C4:89:0E:08:F6:D3:E6:17:24:60:21:8C:7B:D8
Certificate issuer:       /CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee
Certificate serial:       010D0C9F4328583DFFADE9C82C2EAD5C6581DA00
Authority key identifier: 71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/580c3cd5-a1bb-37d7-a9cc-b3daeaf91ff8.roa
Signing time:             Thu 28 Apr 2022 20:35:59 +0000
ROA not before:           Thu 28 Apr 2022 20:35:59 +0000
ROA not after:            Tue 25 Aug 2026 04:00:00 +0000
asID:                     16509
IP address blocks:        2602:80f:9001::/48 maxlen: 48
                          2602:80f:9002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Mar 2023 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ff:ad:e9:c8:2c:2e:ad:5c:65:81:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee
        Validity
            Not Before: Apr 28 20:35:59 2022 GMT
            Not After : Aug 25 04:00:00 2026 GMT
        Subject: CN=330b20d7-ae9e-4630-98d5-89f4cde6624a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:78:ad:ae:f5:ac:c7:a7:3e:10:32:a4:76:07:
                    94:42:b6:8b:2a:a7:7e:7e:09:ae:bf:db:d5:4d:e9:
                    9c:1b:89:ee:4c:8b:df:06:6b:0b:26:82:bf:0d:79:
                    02:fa:20:9f:9c:36:b9:85:fd:95:8d:0e:1a:bb:e1:
                    55:98:b5:c4:b9:61:49:77:99:36:17:68:96:d9:a9:
                    0c:20:b1:1a:03:e5:f5:c0:a8:a7:03:74:4b:b9:0d:
                    7d:d3:b1:9a:60:c2:41:4d:40:a6:d4:3f:c8:58:07:
                    19:79:0a:46:52:fe:d7:d0:19:86:2e:f6:72:03:51:
                    8e:84:02:4d:54:cc:31:a5:e9:a3:87:20:56:9b:5d:
                    83:4b:4d:f1:70:38:8d:d5:87:cd:e8:28:39:78:2a:
                    d6:dc:ea:cc:a0:c8:2b:19:c3:e4:15:79:65:4c:a3:
                    ea:8b:87:58:21:3b:90:d8:bb:7f:05:0a:cb:95:1d:
                    56:77:b1:66:fb:bc:6f:73:da:a0:05:90:16:82:61:
                    87:19:41:70:1c:4e:25:44:47:bf:17:a6:e1:6e:7f:
                    03:4b:ae:9c:e2:12:80:47:13:13:4c:8e:b7:e6:61:
                    ce:49:f3:d1:c9:4a:64:aa:da:3a:44:36:cc:1f:67:
                    bf:c2:a5:30:fb:e3:1c:0c:82:92:27:5e:8a:57:1d:
                    9e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5D:84:77:1B:7D:70:C4:89:0E:08:F6:D3:E6:17:24:60:21:8C:7B:D8
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/580c3cd5-a1bb-37d7-a9cc-b3daeaf91ff8.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl

            X509v3 Authority Key Identifier: 
                keyid:71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80f:9001::-2602:80f:9002:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:eb:66:98:d3:7a:ec:95:ff:93:36:79:97:0f:d6:79:e8:cc:
         d4:51:aa:dc:55:18:af:d8:f0:8f:0c:58:89:ee:1d:6f:c0:3c:
         e6:ac:33:20:dc:82:9a:82:9d:05:ab:dc:e6:dc:90:ac:60:fa:
         2c:65:9b:7e:e8:41:df:1a:a9:3e:91:b0:3d:40:ea:53:df:4e:
         55:6e:a3:20:82:4a:b4:93:68:d5:8b:cc:91:89:49:f2:22:5b:
         91:4b:1d:42:48:d6:9f:fc:82:a8:6e:c0:f3:5b:84:46:35:9e:
         43:f9:b8:9d:9e:5d:69:64:6e:b4:9d:48:ef:65:d2:d4:51:71:
         2e:25:e1:4d:f9:2c:a4:a8:fc:c4:7d:1c:16:5b:69:74:d8:9a:
         13:ad:5d:b6:e0:89:02:01:00:ad:11:53:0f:0f:8a:02:49:6c:
         34:f1:e6:47:c1:09:19:4c:3d:8b:06:dc:45:27:3c:da:e1:87:
         74:6f:ef:ec:55:ee:2b:f9:13:4a:31:4f:e7:62:23:bc:65:40:
         94:d6:3c:33:bb:c1:2a:fe:41:25:14:64:76:d0:74:92:fd:b6:
         2e:b0:78:92:38:56:9e:6e:33:72:9f:59:36:07:6f:88:db:a5:
         60:c7:88:c9:ae:d9:fa:e8:e4:5f:67:9e:b2:84:92:56:22:ba:
         11:af:ef:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 15 11:46:42 2023 by rpki-client on console-ams.rpki-client.org