Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9a81db9d-8d34-32d2-b1d2-8295bcd578e6.roa
File:                     9a81db9d-8d34-32d2-b1d2-8295bcd578e6.roa (raw, json)
Hash identifier:          XWw8DZzShAjBYiGk0SZVneLnF9tSsmmbkkWO1YYUKwg=
Subject key identifier:   04:77:A2:38:7A:3A:20:99:D4:6C:14:FF:2E:39:61:2A:10:74:BD:6D
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584598FDFC16B742F96D87FF24A0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9a81db9d-8d34-32d2-b1d2-8295bcd578e6.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     1225
IP address blocks:        2001:418:3801::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fd:fc:16:b7:42:f9:6d:87:ff:24:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=64ff16c3-7af9-4a51-97b6-38df16c27e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b0:10:99:dd:d6:3d:ef:0c:23:08:2b:02:04:
                    82:c0:80:d5:a1:ab:88:44:ae:38:d5:a2:00:ef:70:
                    70:80:42:77:c1:57:dd:a7:33:ea:07:fe:61:1c:f4:
                    6e:b8:aa:35:20:0a:41:08:65:b3:b3:18:fb:e1:21:
                    5c:9c:4f:f8:38:3e:f0:06:5e:0d:be:68:d4:79:2a:
                    6c:13:2d:12:d6:02:d6:21:ef:f7:6d:14:06:48:09:
                    bc:c2:e2:e6:a8:09:5c:5a:82:58:9f:8e:e2:d5:3a:
                    38:80:05:98:4c:89:00:3c:49:df:4c:d3:a7:72:58:
                    14:b0:ee:85:15:ad:be:5d:67:0f:f0:a6:8e:a7:72:
                    f4:8e:8a:7b:56:e8:53:dc:90:c8:c7:8a:5a:ca:35:
                    39:f8:ca:de:95:a1:e4:dc:53:9a:50:55:c2:b5:4d:
                    4e:48:a9:7b:8d:8d:47:a6:fc:93:4e:73:01:0f:5a:
                    df:7b:6c:10:f6:84:bf:01:b1:2b:82:9d:2a:e3:3e:
                    37:46:53:20:89:38:9e:a0:0d:e6:43:b5:b6:f6:59:
                    ee:e5:41:38:86:be:f0:17:90:40:5c:5f:b5:75:cf:
                    26:3b:af:a1:4c:d6:02:ab:e8:63:12:93:99:16:a2:
                    ea:6d:1a:9a:b9:43:fe:7f:6b:5e:e7:0b:8d:7a:9e:
                    f3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:77:A2:38:7A:3A:20:99:D4:6C:14:FF:2E:39:61:2A:10:74:BD:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9a81db9d-8d34-32d2-b1d2-8295bcd578e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:3801::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:18:d0:c2:86:c2:cf:b8:4f:11:2c:a4:20:48:a2:be:80:46:
         54:bb:79:74:94:66:a3:9e:b6:e8:a3:b6:a3:f3:53:b6:53:7b:
         34:46:34:31:ca:a0:a4:98:30:5c:28:d8:26:22:86:68:29:31:
         20:f6:7a:2e:9a:e4:0d:1e:e3:5b:ec:30:80:98:67:c9:15:41:
         bd:e5:42:f0:4a:5d:0b:48:1c:5d:75:1e:3a:90:3f:94:54:e6:
         ae:72:c2:8b:6a:bb:0b:5d:ff:f2:ab:87:63:9d:cd:27:48:63:
         da:4d:9d:57:7f:2a:18:36:68:15:09:7f:fc:d0:1a:f9:69:48:
         19:94:cc:a0:8f:3f:87:ce:ef:ef:60:88:0d:94:8a:a6:40:f0:
         a6:17:83:e4:e3:f0:1e:70:a1:f2:0f:b3:53:95:ce:be:35:95:
         a8:c6:d3:80:3e:5f:f1:ab:5e:74:f9:6b:f0:35:84:34:d9:96:
         78:89:b5:5b:36:cf:00:98:bc:03:c9:be:d7:46:41:26:7e:9a:
         0e:80:9d:51:58:3a:04:15:73:0e:4f:ee:96:98:7c:c0:45:11:
         63:d2:d8:79:6a:b8:32:86:b0:d5:99:a9:f0:e8:2d:92:8e:d7:
         d7:45:ca:0b:de:a5:ac:4f:8c:8b:58:6c:59:e0:72:ba:12:1d:
         60:66:cb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:13:56 2024 by rpki-client on console-fra.rpki-client.org