Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c7c7b0cb-bdc7-3921-ae1a-5f178b969d9e.roa
File:                     c7c7b0cb-bdc7-3921-ae1a-5f178b969d9e.roa (raw, json)
Hash identifier:          KUp+ejCxQ7Dg1wd89bGtb2vnpZqSArCUOVPKyNjy/20=
Subject key identifier:   E1:51:B1:67:58:C2:D7:47:78:ED:71:D2:78:B8:D8:F9:0D:A9:D6:F0
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858459A63500FDD808D5B0E7E1940
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c7c7b0cb-bdc7-3921-ae1a-5f178b969d9e.roa
Signing time:             Sat 20 Apr 2024 01:00:26 +0000
ROA not before:           Sat 20 Apr 2024 01:00:26 +0000
ROA not after:            Fri 19 Jul 2024 01:00:26 +0000
asID:                     20940
IP address blocks:        2001:418:1430:100::/56 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9a:63:50:0f:dd:80:8d:5b:0e:7e:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 20 01:00:26 2024 GMT
            Not After : Jul 19 01:00:26 2024 GMT
        Subject: CN=d73872f9-cbc7-441f-baa3-e5ca5a1c70aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:70:70:95:50:6d:56:a8:82:44:26:4e:4e:64:
                    02:3b:2e:b9:d6:f7:6d:d1:e8:a6:f6:c2:42:63:91:
                    36:72:69:61:96:5b:65:02:e3:90:b6:11:3f:60:7d:
                    dc:9b:4f:6b:09:eb:7d:01:80:ce:4d:2c:30:d4:d6:
                    6a:4a:3e:3a:53:29:0d:ec:40:b4:b5:d5:f3:42:b0:
                    ae:9f:ab:1d:3a:f5:38:1f:b3:d3:7b:71:b7:41:78:
                    6b:d0:37:ad:73:e1:8f:fe:d8:ef:c0:34:87:ef:d9:
                    e9:d0:9d:a6:a5:c6:4b:aa:44:e8:c9:85:49:f3:8d:
                    5c:44:3a:61:89:d7:d4:e1:2b:3b:53:7e:9b:ec:0c:
                    0d:3e:2c:53:34:e4:a0:9d:2e:13:1c:9f:76:59:73:
                    31:14:c3:9e:77:45:22:3f:36:bb:81:4d:d9:95:cc:
                    e7:85:7b:9b:46:4b:28:82:b1:dd:d9:ee:3d:22:69:
                    b5:97:66:99:bb:ae:9a:b9:0f:b2:d7:96:f5:26:28:
                    8e:f2:df:df:3d:35:a5:bc:d7:ad:0f:4f:3f:0c:de:
                    02:e2:37:9a:05:c4:ff:46:94:f4:de:90:38:ab:b7:
                    59:8d:fe:9b:9e:56:1b:50:63:c2:15:31:68:0d:ab:
                    01:84:09:e9:49:db:41:3e:6b:12:f8:b4:5e:71:ba:
                    22:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:51:B1:67:58:C2:D7:47:78:ED:71:D2:78:B8:D8:F9:0D:A9:D6:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c7c7b0cb-bdc7-3921-ae1a-5f178b969d9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1430:100::/56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:be:3c:9c:b8:f8:54:9a:d7:9d:4f:5e:9e:73:b4:ca:64:bf:
         34:10:e5:cd:10:98:42:67:bf:f6:49:90:29:f3:d6:65:e0:be:
         2a:68:bd:d0:89:6f:e6:5c:85:ac:9c:50:dc:c2:b9:4b:8c:ef:
         cc:bf:82:26:e0:73:9c:dc:24:d0:08:2a:83:37:ac:c9:d5:01:
         43:80:9e:78:65:09:89:37:e1:1d:68:6f:24:cd:c8:c4:e6:9e:
         1a:c6:e8:58:dd:25:cb:9b:00:7e:c5:b7:63:1e:4e:d5:6d:5d:
         51:34:11:91:28:08:b6:0f:20:be:67:61:fd:6a:f5:79:59:8a:
         b9:b9:d2:29:30:d5:97:f6:02:2c:9e:c5:0a:5f:4b:29:86:d3:
         39:30:d7:32:8e:84:e0:6c:72:66:ea:f2:0d:c9:98:1e:8c:56:
         ef:b0:1c:75:9c:68:94:14:9e:4a:9c:a7:33:0c:65:a9:0f:66:
         3d:bb:5b:ef:ab:f4:bb:34:ff:55:8d:5b:2b:07:c1:8c:d7:ea:
         cf:11:c4:b7:f8:73:24:45:53:42:54:2c:ad:db:6f:66:c0:a4:
         bc:51:51:b6:4f:35:0e:85:0c:7a:d5:07:fb:37:0a:0d:f1:5a:
         e3:36:2c:52:71:28:b0:7a:9f:50:9e:cd:40:73:7a:9b:2f:d7:
         72:50:99:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:54:20 2024 by rpki-client on console-ams.rpki-client.org