Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3a696e09-7384-38e4-8936-c5171efb8159.roa
File:                     3a696e09-7384-38e4-8936-c5171efb8159.roa (raw, json)
Hash identifier:          k5C7NEziNTOsvt0g7BhE2VE64iKkTEjUYBAwJuTWaaE=
Subject key identifier:   E4:D2:6F:CF:E8:BA:FF:02:73:69:55:19:20:60:63:81:BA:ED:BF:87
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584598FDFCB1C94EFE28327FC400
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3a696e09-7384-38e4-8936-c5171efb8159.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     1225
IP address blocks:        2001:418:1401:12::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fd:fc:b1:c9:4e:fe:28:32:7f:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=7ac4a326-7675-495e-897e-6ee44937f24b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:08:e9:27:18:e7:72:18:ab:63:8f:27:d7:be:
                    a8:28:7d:a1:33:be:b8:be:80:21:f7:da:39:08:03:
                    4c:9f:fd:15:f3:f6:99:f3:f7:4b:06:68:0a:3c:49:
                    1b:3d:ab:43:1b:90:83:ce:0a:ef:c2:5f:67:6f:08:
                    b9:01:2a:fe:c6:fb:91:a0:03:f7:6e:ee:94:43:83:
                    ef:c9:5c:2d:a6:37:e8:fb:73:e5:eb:05:66:b0:a9:
                    bd:10:06:6a:72:00:ea:ff:85:2a:56:80:42:ab:0d:
                    c8:f3:6a:e3:97:c3:d1:3f:e0:7c:dd:1c:13:72:0f:
                    0c:f9:ee:62:4f:7c:ab:20:40:11:93:72:be:ee:2b:
                    ec:2e:27:0a:95:3c:60:ac:93:66:55:89:0a:5d:63:
                    ba:0e:85:ce:92:13:53:68:23:dd:51:02:14:b1:48:
                    81:93:92:ec:5e:cb:38:ff:1f:0e:b5:d7:1f:63:2c:
                    32:03:dd:a4:b6:b3:38:3d:bf:07:a0:c6:fc:10:a7:
                    21:71:ce:25:ba:6d:40:e2:a6:f4:1b:0c:3f:f7:83:
                    82:27:f0:65:78:39:2c:07:c6:4f:32:ff:09:ad:3f:
                    ff:58:2f:ed:b9:bf:04:b7:df:37:19:1a:79:d4:c0:
                    de:1e:1d:bc:55:fa:c9:e4:34:9c:c0:da:b1:45:85:
                    3a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D2:6F:CF:E8:BA:FF:02:73:69:55:19:20:60:63:81:BA:ED:BF:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3a696e09-7384-38e4-8936-c5171efb8159.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1401:12::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:d1:13:0c:6f:bd:8c:1d:f3:54:a7:64:76:bc:ac:60:68:62:
         66:84:cb:ff:e7:f9:ee:a4:d2:2a:b3:cc:ac:19:4f:20:c2:41:
         ae:2d:f7:a8:12:47:05:54:10:25:6b:16:03:8a:7e:8f:13:99:
         78:db:d7:3d:b2:c2:ee:e0:1f:1e:f5:e1:a5:9e:e2:74:75:ad:
         fc:fe:10:59:eb:86:b5:ec:97:6c:6f:cd:19:f4:15:58:83:95:
         fb:f1:72:46:df:35:6a:99:2e:f8:e1:60:c1:a0:31:41:23:94:
         6f:f0:1e:2e:37:ee:86:90:91:75:a8:af:e5:9b:e2:07:a6:78:
         9e:7a:b6:42:88:0c:5b:88:8c:35:7d:c0:a3:76:8d:22:ee:11:
         a2:57:5e:48:52:e2:83:e0:c8:21:2a:96:09:4e:ed:74:65:8d:
         fb:8a:87:88:19:c9:37:7d:5e:2b:83:4a:a6:89:5e:09:30:a4:
         33:3d:3d:d4:51:b4:f1:9f:ec:cf:7c:1d:2d:cb:4d:e2:3e:7d:
         dc:4e:0f:88:cf:7f:52:f5:e6:6a:5b:35:51:e3:29:1d:f9:1b:
         f0:62:3d:ef:be:f9:d9:f2:1a:39:3a:24:2c:68:61:c0:3e:67:
         c5:32:01:f9:bf:b0:3e:f9:c6:eb:87:02:f7:13:84:8a:fa:4e:
         8e:f6:a4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:48:34 2024 by rpki-client on console-fra.rpki-client.org