Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8dfd5f6d-30c2-3ab5-9e90-8fdec3ef44ea.roa
File:                     8dfd5f6d-30c2-3ab5-9e90-8fdec3ef44ea.roa (raw, json)
Hash identifier:          YQ637i3hu8J5A+IeFq2C0xBJagceDa/bZBJQPElno5Q=
Subject key identifier:   A0:2E:A5:87:7F:D5:2B:89:30:BD:BE:3B:53:FF:CB:9A:4F:0C:74:CF
Certificate issuer:       /CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5
Certificate serial:       010D0C9F432858457A4884AD90D93B89BB365B00
Authority key identifier: 92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8dfd5f6d-30c2-3ab5-9e90-8fdec3ef44ea.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     10965
IP address blocks:        2001:410:2000::/40 maxlen: 48
                          2001:410:2000::/48 maxlen: 48
                          2001:410:2001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:84:ad:90:d9:3b:89:bb:36:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=4db80b80-322b-463a-a7c4-7d6be984f6ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f1:d7:c7:00:67:43:c9:ff:b1:9f:cd:fa:e1:
                    c4:b5:80:4d:38:97:d6:64:90:96:d3:fc:7a:d4:60:
                    a4:6c:dd:a9:0b:d2:65:4c:89:ad:a3:f3:2d:a4:62:
                    f4:b4:c3:e9:02:1d:d3:19:cb:12:c1:8d:95:b5:86:
                    80:2a:9f:1d:5f:95:61:58:8d:d2:b9:3c:34:08:08:
                    e6:34:ea:7d:4d:c2:39:46:f3:07:aa:c3:a0:c6:61:
                    37:b1:50:cd:f4:89:21:ae:82:a7:2b:9d:32:cb:b0:
                    c4:a3:41:d7:f8:8b:29:15:21:12:1d:66:cf:40:c2:
                    47:a4:c1:0c:5a:bd:71:36:08:17:e1:00:72:d9:75:
                    d7:1c:8f:9f:ee:49:83:e4:08:e6:5d:45:ff:71:e0:
                    18:3a:86:19:56:26:9c:98:4a:a3:5f:2f:3a:13:c3:
                    df:bf:4e:a6:43:71:05:af:e2:e6:a9:6e:b6:6e:39:
                    72:05:6a:06:11:c8:28:67:53:73:44:d5:f9:89:4b:
                    7b:55:c1:b5:7b:46:e7:ed:91:af:17:47:4e:28:18:
                    93:db:51:c4:75:af:ec:77:f6:ae:6d:85:9d:cd:07:
                    7f:21:f9:65:84:f7:f0:89:06:5f:ef:d4:3d:65:4a:
                    16:77:be:e6:fc:43:21:57:1e:01:08:c2:9b:01:da:
                    c5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:2E:A5:87:7F:D5:2B:89:30:BD:BE:3B:53:FF:CB:9A:4F:0C:74:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8dfd5f6d-30c2-3ab5-9e90-8fdec3ef44ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl

            X509v3 Authority Key Identifier:
                keyid:92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:410:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:b6:9c:7f:fa:00:e1:2a:69:d5:f1:b8:dd:5c:5a:fd:fa:91:
         19:63:a4:72:5a:3d:6f:51:c7:fd:0a:0d:78:11:e0:33:e3:0b:
         d5:0d:ab:d5:48:ea:22:2c:8b:b3:16:16:ef:77:a6:a7:29:6d:
         a8:9e:87:85:e8:b9:22:50:84:c0:1a:1c:46:ef:b2:a8:8e:ad:
         50:13:28:f1:a5:e9:61:a4:76:11:f2:6d:3c:f1:6b:28:83:f4:
         be:ef:22:46:4a:3d:ef:e8:ba:3c:90:dc:34:89:f7:d5:bd:4d:
         bb:5b:89:c2:64:9d:ac:97:a4:f4:31:7c:99:dc:7f:90:0f:dc:
         d8:c8:c7:18:09:14:8a:42:b3:10:89:98:df:56:39:23:9b:76:
         1b:18:17:b5:73:3e:86:19:dd:55:b0:b5:6b:b7:15:ae:69:85:
         7e:30:fa:05:c3:9f:e8:e1:96:4d:37:14:31:33:f9:76:06:f5:
         5e:a7:55:c9:d0:bf:8e:37:95:66:76:7a:9b:bf:cd:c9:ef:6c:
         0d:68:d2:cb:76:86:e6:40:86:98:65:63:64:94:38:1b:f5:93:
         78:cd:c5:5d:a0:1a:6a:af:87:30:e0:89:bf:72:43:21:6a:1d:
         b7:f0:60:05:92:03:9a:56:4f:5e:b1:cc:66:b4:3e:2a:a3:89:
         7d:22:9d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:19:12 2024 by rpki-client on console-ams.rpki-client.org