Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3e53b78e-2ab8-3b67-b6b3-698393a631a5.roa
File:                     3e53b78e-2ab8-3b67-b6b3-698393a631a5.roa (raw, json)
Hash identifier:          8iyVuiRdSZ/UR9ru2bireAz1aiNCjuDxfqbdqZislPw=
Subject key identifier:   5F:B3:27:26:E4:1E:42:07:B1:6E:7A:B6:4C:DC:14:D7:40:56:27:41
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858459A634EC1ECF44FCFAB91F530
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3e53b78e-2ab8-3b67-b6b3-698393a631a5.roa
Signing time:             Sat 20 Apr 2024 01:00:26 +0000
ROA not before:           Sat 20 Apr 2024 01:00:26 +0000
ROA not after:            Fri 19 Jul 2024 01:00:26 +0000
asID:                     20940
IP address blocks:        2001:418:1401:25::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9a:63:4e:c1:ec:f4:4f:cf:ab:91:f5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 20 01:00:26 2024 GMT
            Not After : Jul 19 01:00:26 2024 GMT
        Subject: CN=669858b6-2dca-465c-92fd-6412fb31f780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:66:4d:f3:9a:3d:6e:a2:68:61:14:f0:af:5b:
                    9e:98:dd:90:3f:b6:fc:04:d3:42:0d:a4:05:17:43:
                    01:e3:68:36:fa:80:da:e9:86:81:d1:1a:89:f4:14:
                    63:d9:e7:ca:c5:e8:8f:8d:2a:b4:03:92:06:f9:5f:
                    d6:8a:ad:7d:33:14:f9:55:22:c9:12:a1:16:c6:98:
                    8b:c3:94:e5:a2:e6:19:cf:db:50:1e:ce:03:05:ae:
                    09:50:24:cc:60:b4:66:12:d6:9e:0c:c9:3c:a4:92:
                    15:1a:5f:ef:c5:76:06:a8:48:c8:84:e3:26:b1:03:
                    66:dc:d4:24:fc:dd:9f:02:06:26:6c:97:44:0e:c3:
                    96:e1:1d:ad:78:c4:7e:45:84:da:f6:ab:d7:73:d8:
                    b6:d6:e8:88:06:42:fa:14:86:ef:86:9e:25:02:1e:
                    90:e4:9e:5d:85:33:76:61:c4:d2:5c:b0:ae:18:8f:
                    c3:b4:7f:38:cc:eb:46:3d:46:12:33:a3:83:b8:5b:
                    fd:af:c5:b3:15:97:c0:6b:d2:26:4c:43:a5:a2:15:
                    dd:9f:ad:0d:3a:e1:89:19:d6:4d:0d:5e:47:d8:ef:
                    06:57:8e:5e:8f:a5:98:32:09:79:e5:df:7c:73:d9:
                    41:27:dc:5f:3d:67:81:ba:95:54:c2:98:a6:6a:55:
                    c4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B3:27:26:E4:1E:42:07:B1:6E:7A:B6:4C:DC:14:D7:40:56:27:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3e53b78e-2ab8-3b67-b6b3-698393a631a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1401:25::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:39:9c:17:d3:ac:83:98:1c:63:b3:00:0a:ac:be:ab:90:8c:
         00:ed:49:a0:10:af:82:60:95:54:65:41:a3:a9:38:1e:ad:7d:
         c0:94:99:49:2c:4a:21:26:45:03:a0:bf:e7:1e:aa:44:d3:ba:
         9c:17:33:53:a9:d3:43:fe:81:7b:60:d6:33:52:61:8e:1b:44:
         8b:a1:d5:fd:d4:89:b8:74:a0:72:aa:05:f3:be:25:31:3f:df:
         ec:ee:9f:e3:89:d3:58:8c:fd:86:df:8c:c0:10:96:ee:60:c0:
         f9:85:ba:ff:2c:e4:99:28:68:fa:e8:3c:7f:a6:b4:06:9b:10:
         82:cd:bb:da:11:4d:47:1b:dd:6b:76:d9:5e:00:87:79:d1:c9:
         79:8a:50:ae:06:0f:00:00:97:2c:1b:84:8f:9d:2c:1d:cc:a9:
         ad:3a:8b:f4:5e:17:72:34:7b:e8:8a:41:9d:27:21:61:2b:11:
         f4:81:9c:b0:50:36:91:58:f0:d9:e4:a3:d5:5e:ab:b2:bd:8c:
         46:d4:b1:20:de:3c:27:aa:f4:5f:3d:e1:e4:07:31:84:26:86:
         84:73:41:01:9d:cc:57:a6:d8:12:b4:fc:de:a4:81:33:1a:da:
         c8:d3:6d:8c:f5:c5:72:56:44:a8:4c:8e:c5:6a:0c:07:e5:35:
         bd:22:68:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 17:37:59 2024 by rpki-client on console-fra.rpki-client.org