Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4bf5f122-1142-3348-bba1-25509bd0c542.roa
File:                     4bf5f122-1142-3348-bba1-25509bd0c542.roa (raw, json)
Hash identifier:          n7gs9T706eLW770bKTgJ0TArbIscu2PjN65IvfWeE7M=
Subject key identifier:   D0:1D:03:9C:C2:86:17:65:8A:CF:6D:29:24:F0:37:EC:2B:BF:41:3A
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858459A634F9F24EC90AE4AE86600
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4bf5f122-1142-3348-bba1-25509bd0c542.roa
Signing time:             Sat 20 Apr 2024 01:00:26 +0000
ROA not before:           Sat 20 Apr 2024 01:00:26 +0000
ROA not after:            Fri 19 Jul 2024 01:00:26 +0000
asID:                     20940
IP address blocks:        2001:418:4001:2::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9a:63:4f:9f:24:ec:90:ae:4a:e8:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 20 01:00:26 2024 GMT
            Not After : Jul 19 01:00:26 2024 GMT
        Subject: CN=bc2021cc-c326-46bf-bfe4-104999cf6ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4f:ae:67:eb:a2:19:b2:97:40:f1:a4:96:ca:
                    a7:cd:70:39:bb:ea:09:78:a9:6f:cf:5a:e0:1e:af:
                    ef:84:53:29:36:ab:6a:7f:b6:c9:18:37:9a:82:9a:
                    92:68:56:16:58:77:1e:1c:cb:f1:3b:b3:6c:21:73:
                    ff:53:d3:5b:41:b3:8b:c6:87:5c:df:36:a2:5a:5e:
                    5d:71:4b:35:bc:67:aa:fc:0b:aa:a9:27:87:a5:59:
                    a8:50:2c:66:9f:69:62:6e:83:82:fc:37:55:82:a3:
                    9c:cd:e0:6b:39:01:c4:14:91:63:bb:d9:95:fc:f1:
                    07:0e:4f:84:77:05:96:b0:7d:8d:ed:84:a2:4a:98:
                    7b:98:80:77:47:a4:b3:c5:32:af:51:72:f5:01:eb:
                    02:da:57:ea:f3:64:27:4b:10:89:42:d3:78:4d:5e:
                    ad:76:75:cf:cb:b7:64:ea:ca:8e:06:68:2b:5e:eb:
                    b0:fd:54:41:e8:a7:be:a1:26:16:1a:ee:31:00:88:
                    5c:2e:d6:69:de:84:5b:ea:a4:2f:95:70:cd:08:c6:
                    a8:d6:6c:cb:67:0d:cf:8b:55:98:04:4a:ff:ba:9c:
                    2e:f6:4c:33:9a:a3:96:7c:09:0c:f6:32:55:d3:1d:
                    5c:67:93:73:42:ab:a2:4e:de:8c:77:78:5d:12:89:
                    59:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1D:03:9C:C2:86:17:65:8A:CF:6D:29:24:F0:37:EC:2B:BF:41:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4bf5f122-1142-3348-bba1-25509bd0c542.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:4001:2::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:f8:ff:b2:82:da:b5:d2:1d:67:2a:98:06:fe:1a:58:12:b4:
         23:df:30:b4:d7:55:fb:3c:5e:68:7f:d4:bc:cf:56:ac:f1:b2:
         77:9f:b6:9b:26:98:09:3e:c0:7a:75:c2:fb:64:75:c3:f7:fe:
         96:9f:8b:ca:d6:d7:cc:c4:d6:0f:9d:9e:ad:73:a4:c0:21:b6:
         6f:94:e9:f8:37:cb:ff:ba:9e:d5:72:fc:56:4c:a0:d9:4d:7a:
         26:83:c0:07:49:79:95:60:88:f6:53:b3:22:0b:85:12:6a:ba:
         75:6e:7a:2e:b7:27:0b:1b:6d:fa:a6:96:a5:3c:a7:68:c6:25:
         32:cc:48:b5:fc:5c:0f:2f:b0:99:28:e0:0f:5b:51:63:85:52:
         a8:12:6f:f8:29:e6:aa:23:36:22:87:bd:6a:3a:07:10:89:47:
         6e:ae:b7:ba:37:74:48:65:b2:80:78:1f:f8:28:4f:2a:99:12:
         59:3a:14:48:06:d3:d3:e8:df:37:68:77:61:12:ff:00:6c:aa:
         8d:91:4e:10:6d:9d:50:54:2a:0a:38:87:1f:0b:07:82:28:d3:
         84:a1:b5:4d:cb:73:0f:77:52:3e:8c:5a:51:50:3f:67:f1:3c:
         7e:fe:37:da:74:50:53:54:f1:8f:8b:3d:a9:d6:a0:f9:72:13:
         50:8d:c1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:44:12 2024 by rpki-client on console-ams.rpki-client.org