Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/de58a534-66be-3f5a-bf08-7f6aeec0845e.roa
File:                     de58a534-66be-3f5a-bf08-7f6aeec0845e.roa (raw, json)
Hash identifier:          XXBbQYtXXRmgM6z5DA/RpGGhqDiTjECxNZNZ4y833tI=
Subject key identifier:   16:3D:AB:FF:E1:BC:86:A0:EC:8F:DC:82:B8:25:C4:72:5D:25:5B:31
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858459A6350BDE6BAEEEF1DA5F380
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/de58a534-66be-3f5a-bf08-7f6aeec0845e.roa
Signing time:             Sat 20 Apr 2024 01:00:26 +0000
ROA not before:           Sat 20 Apr 2024 01:00:26 +0000
ROA not after:            Fri 19 Jul 2024 01:00:26 +0000
asID:                     20940
IP address blocks:        2001:418:1401:2c::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9a:63:50:bd:e6:ba:ee:ef:1d:a5:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 20 01:00:26 2024 GMT
            Not After : Jul 19 01:00:26 2024 GMT
        Subject: CN=22e88bcd-fd20-4c64-b887-1d2a16e837e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b1:16:6f:75:75:76:43:19:e9:99:68:8d:dc:
                    cf:1e:25:21:55:7c:31:0c:df:66:a7:3b:ab:32:41:
                    93:27:4e:9d:b4:44:33:14:53:98:aa:0b:50:e7:5d:
                    fd:39:ff:52:19:d1:bd:13:f9:e3:da:c6:72:e7:15:
                    81:6d:cd:8f:a4:a2:06:2c:50:ef:6d:2f:8d:07:b3:
                    04:dd:66:ef:99:dc:9b:8c:da:f3:e8:3d:c5:3d:20:
                    8f:7b:cf:f5:1e:84:76:ff:35:82:ca:56:88:02:29:
                    14:09:4e:aa:68:a6:2c:0d:b4:c3:d2:37:94:12:21:
                    af:0b:15:41:28:9d:f5:86:eb:80:c8:76:42:4b:6e:
                    2b:bf:02:ce:1f:a3:c8:4a:44:fa:c3:9b:45:51:ce:
                    ef:62:24:cb:04:ac:e2:3c:79:7a:2f:42:9f:06:ed:
                    51:cb:fb:fe:75:bc:38:8c:71:31:c0:cc:54:7c:bc:
                    53:c8:8b:04:ca:c4:66:76:22:98:aa:e6:27:8c:b6:
                    22:27:e9:0a:68:ce:14:99:20:c8:99:0e:38:3c:e2:
                    b7:28:66:32:07:74:a5:40:80:de:99:46:78:bd:17:
                    f6:38:c9:d3:00:2e:4f:47:ef:28:9f:29:bb:bd:b7:
                    1d:86:40:2d:5a:66:2f:74:50:b7:4e:da:1c:2b:18:
                    0a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3D:AB:FF:E1:BC:86:A0:EC:8F:DC:82:B8:25:C4:72:5D:25:5B:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/de58a534-66be-3f5a-bf08-7f6aeec0845e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1401:2c::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:30:36:74:11:13:25:a0:b3:6a:00:57:c9:65:68:9c:0e:1d:
         e0:32:a8:62:f7:0b:96:63:55:ed:b6:0e:bd:b4:fd:29:61:7b:
         7a:70:2c:5e:72:73:44:31:04:19:e1:e4:50:07:b6:ea:5b:8c:
         54:11:ad:8d:25:83:7c:df:31:78:9f:2d:ce:ce:41:29:9a:9a:
         53:7e:d1:87:8c:bf:f6:ee:be:c0:e0:e4:c3:b4:cd:b7:f2:d3:
         59:9b:16:ad:77:a8:7c:d7:0a:6b:96:41:f3:9c:e6:14:c8:83:
         30:66:7e:f1:45:0f:1d:22:c3:75:d6:f1:83:39:07:84:30:6f:
         f2:7e:b0:7e:0c:8e:4d:4a:77:a5:a3:90:67:c1:f1:b4:f2:1a:
         6e:e9:e2:fc:e6:06:01:69:a4:07:95:d6:2e:7c:4c:38:76:28:
         bc:7c:3e:bd:e5:71:63:72:0c:a6:4a:a5:f5:59:1d:64:92:ac:
         15:7d:7d:42:44:ee:33:4a:74:14:bd:58:09:b3:0e:8a:a6:9a:
         a3:99:7d:da:c6:4e:7b:35:e2:8b:0b:da:4c:5f:b9:a7:0f:30:
         92:ae:a6:a1:89:45:00:eb:7c:28:37:3e:6c:00:71:ab:f3:b7:
         7d:8f:1e:13:98:04:9b:5d:f0:dd:91:97:ff:73:af:29:12:ac:
         ad:bb:c1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 11:59:30 2024 by rpki-client on console-fra.rpki-client.org