Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/c83d963c-2ced-33fe-8730-392675d7ca11.roa
File:                     c83d963c-2ced-33fe-8730-392675d7ca11.roa (raw, json)
Hash identifier:          2Ja7s2uNH8UiQxDP1uAANGyagq5T4hapit31K743gXU=
Subject key identifier:   80:74:1B:AD:EA:41:15:FE:78:E2:C0:D7:68:56:89:45:A2:64:71:C7
Certificate issuer:       /CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5
Certificate serial:       010D0C9F43285845211050119A2F1B82AE383400
Authority key identifier: 95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/c83d963c-2ced-33fe-8730-392675d7ca11.roa
Signing time:             Thu 07 Mar 2024 14:00:32 +0000
ROA not before:           Thu 07 Mar 2024 14:00:32 +0000
ROA not after:            Wed 05 Jun 2024 13:00:32 +0000
asID:                     5050
IP address blocks:        2001:5e8:0:1002::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:21:10:50:11:9a:2f:1b:82:ae:38:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5
        Validity
            Not Before: Mar  7 14:00:32 2024 GMT
            Not After : Jun  5 13:00:32 2024 GMT
        Subject: CN=0a26cc33-cb85-4243-ab33-c24c614077cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:f6:b2:3e:4e:7e:d7:48:8a:16:90:31:ab:8f:
                    49:40:bc:04:17:3d:6f:dc:da:a1:01:3b:5c:fe:4f:
                    82:80:34:bf:a5:c6:b6:f2:25:d0:c1:b4:a3:e4:ce:
                    61:e7:bf:54:dd:72:a7:3d:65:3b:ee:f3:8d:96:b0:
                    7d:46:32:cd:d0:66:16:1e:6c:b5:0a:dd:e1:0f:41:
                    09:20:86:6d:29:39:8a:55:16:5d:35:46:cf:a2:81:
                    13:ed:e4:20:e5:4a:74:d5:f8:b2:de:70:68:e5:32:
                    f7:27:97:7d:d8:d6:f2:8a:f6:a3:84:d7:8c:1d:6c:
                    75:00:98:9b:6b:9f:b6:eb:54:45:b7:1b:09:d7:f6:
                    2f:a8:7a:cb:b7:f6:63:a3:15:0e:f6:69:91:00:bb:
                    41:d4:06:a8:b4:7c:81:ee:66:36:75:cf:76:73:1f:
                    11:74:94:64:ee:30:24:94:9b:b2:9a:33:92:a9:05:
                    28:12:60:71:e5:d8:c0:f9:27:b8:f8:1d:45:6f:0f:
                    c9:8d:0c:0f:eb:0c:14:56:2f:88:0a:3d:ce:26:50:
                    51:ff:4e:75:e1:92:2e:59:dd:71:06:c7:89:af:2a:
                    88:5d:b5:5c:db:38:ab:84:02:7f:14:c7:e1:86:1f:
                    8c:20:89:44:1e:e2:c4:d4:6b:5d:40:29:b6:9b:0d:
                    c5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:74:1B:AD:EA:41:15:FE:78:E2:C0:D7:68:56:89:45:A2:64:71:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/c83d963c-2ced-33fe-8730-392675d7ca11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl

            X509v3 Authority Key Identifier:
                keyid:95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5e8:0:1002::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:f7:44:9d:13:c3:cd:1a:83:6b:dc:9d:4e:be:e2:08:54:10:
         d7:a7:59:54:03:73:1a:36:c7:79:e1:6d:88:b7:47:3e:e7:28:
         c5:da:6c:a1:d6:f4:8b:07:e6:f4:fa:0a:c6:63:11:0b:2a:d1:
         2a:fb:a4:ff:d8:1d:f3:97:c1:5e:c7:71:e5:5e:25:67:23:3f:
         48:28:b2:91:8c:e6:fc:5a:4b:d4:52:8d:79:bb:f1:3a:22:af:
         8d:74:4d:d8:74:28:12:d6:7a:28:1e:2b:5f:a0:a5:33:fa:ea:
         e0:79:8f:1d:35:65:d7:f7:83:ef:b6:34:79:00:10:c9:f7:23:
         17:64:25:be:3d:80:ef:28:e2:ec:86:66:aa:73:98:54:c0:7b:
         80:ee:4d:3d:76:01:b3:e0:1d:79:c7:35:53:30:a4:22:1d:a5:
         9d:cb:2c:b4:f9:cf:dc:e7:f9:65:5f:01:86:f4:8a:77:23:50:
         a0:31:0b:b8:2f:eb:e6:20:29:e1:54:84:06:f9:2e:74:12:d9:
         95:42:17:63:21:1d:82:9f:55:f8:fd:21:bb:76:03:99:aa:8a:
         64:bf:c7:7d:57:d6:db:2d:a0:f4:51:7e:fa:76:0d:85:fb:a7:
         24:b4:dc:10:4c:6f:83:79:1e:e8:09:df:27:12:6a:8f:da:ed:
         de:90:1a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 19:25:30 2024 by rpki-client on console-fra.rpki-client.org