Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/902609b8-209b-370d-a483-6d893db0882b.roa
File:                     902609b8-209b-370d-a483-6d893db0882b.roa (raw, json)
Hash identifier:          FvsOX0tiSQCUyez6HgQxGnOoj6rQzGGQ5azr5KgzZi4=
Subject key identifier:   2F:1B:CF:0E:DF:75:53:5D:0F:F7:A8:AB:0E:F5:77:35:32:7C:88:6D
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F43285844F0355247DEB3FE2BA5FC6700
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/902609b8-209b-370d-a483-6d893db0882b.roa
Signing time:             Mon 19 Feb 2024 02:00:25 +0000
ROA not before:           Mon 19 Feb 2024 02:00:25 +0000
ROA not after:            Sun 19 May 2024 01:00:25 +0000
asID:                     20473
IP address blocks:        2001:19f0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f0:35:52:47:de:b3:fe:2b:a5:fc:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Feb 19 02:00:25 2024 GMT
            Not After : May 19 01:00:25 2024 GMT
        Subject: CN=1d377156-ca6c-431a-8739-eaf806d2b14b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:62:b1:98:b1:f7:3d:21:0d:90:d1:86:95:5f:
                    d9:da:86:2c:1a:05:52:89:14:28:a3:eb:a9:96:8f:
                    b4:70:f5:e9:9b:ec:d8:82:66:5e:6c:ee:b7:3c:ed:
                    9a:49:7f:67:da:ae:93:4b:33:d5:a4:a6:74:d8:fd:
                    7e:c7:ec:f4:47:77:f0:ac:a8:98:b5:98:95:86:1d:
                    f4:00:5b:32:c8:71:b5:82:ae:8c:80:fb:bb:63:ea:
                    ac:21:4b:99:b9:17:25:72:34:19:aa:78:13:3a:a2:
                    99:80:24:33:fd:85:91:1a:92:25:dd:e2:6d:f4:31:
                    b9:4b:11:67:19:9a:10:91:d2:e4:55:b1:45:81:a0:
                    e7:4c:f1:f3:33:b8:9c:1d:f4:26:00:c5:e8:5b:81:
                    70:a5:e7:cb:61:91:55:01:ae:0b:2a:d1:9c:9e:72:
                    dd:94:5c:f7:a4:37:7a:1b:d6:b8:9d:2d:8d:b8:97:
                    67:07:11:ab:33:ae:83:78:56:89:57:4d:16:7c:fb:
                    d6:6d:3a:07:33:40:65:cc:6b:ee:88:0f:24:20:92:
                    86:f9:a6:09:49:8c:e1:41:5d:33:a8:c9:fb:fa:41:
                    0f:b3:bd:07:db:e5:e6:b8:97:b4:85:7c:6f:72:64:
                    6f:f9:c9:4f:0d:7b:66:31:e3:b7:b0:82:ab:64:47:
                    1a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1B:CF:0E:DF:75:53:5D:0F:F7:A8:AB:0E:F5:77:35:32:7C:88:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/902609b8-209b-370d-a483-6d893db0882b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19f0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:88:e2:11:e8:62:c0:fe:d7:1f:5d:67:fc:46:a6:7e:cd:06:
         04:b8:84:8a:0d:8b:70:26:1e:74:f1:63:2b:85:be:61:e3:18:
         eb:b3:2d:eb:50:f9:a6:f8:45:0e:59:9d:5c:28:ce:11:dd:67:
         9c:9b:c2:78:9a:48:c7:c6:64:b7:bd:04:7a:55:0e:5a:08:09:
         bb:00:86:04:a3:65:30:0c:7b:9e:66:a6:41:9a:ec:29:47:7a:
         01:7d:a2:93:b1:cd:e9:cc:20:eb:70:3e:98:c2:23:cd:71:c2:
         d6:62:5b:e9:89:c1:e1:77:59:d6:46:50:76:58:ff:04:da:d3:
         5f:28:12:b6:ac:76:26:f2:41:1c:d3:ce:f3:ef:9e:6c:cf:1f:
         4d:da:e8:6b:b7:64:90:e0:34:2b:c5:45:02:e8:05:51:66:0b:
         ed:c6:c2:35:e6:48:55:e5:67:2e:bf:bd:1f:21:a8:85:a8:45:
         52:5f:6d:6d:63:96:10:09:f3:fe:8c:26:cd:e0:78:29:db:14:
         0f:0d:0e:ee:c6:17:de:8c:92:e5:06:df:35:9c:a3:c1:4e:0e:
         f1:34:d1:78:e5:07:d4:4a:18:3d:8d:78:8f:8d:b2:e7:24:95:
         79:c5:f4:3d:9a:0b:92:da:a3:6f:af:3e:ab:31:e1:23:7d:61:
         b8:9c:72:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:43:32 2024 by rpki-client on console-ams.rpki-client.org