Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2669404b-ae73-3bf2-a4d1-f2f857d174a1.roa
File:                     2669404b-ae73-3bf2-a4d1-f2f857d174a1.roa (raw, json)
Hash identifier:          Ai72GIw3yRjtLyh6XGPAC7gpwbTdaF/wWipE0Kg3Jek=
Subject key identifier:   65:6E:06:8F:81:CA:1C:32:55:A7:44:64:7A:23:AE:30:85:33:D2:8F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328583DF22E79225FB937D5B473F700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2669404b-ae73-3bf2-a4d1-f2f857d174a1.roa
Signing time:             Thu 20 Jan 2022 22:23:07 +0000
ROA not before:           Thu 20 Jan 2022 22:23:07 +0000
ROA not after:            Tue 20 Aug 2024 04:00:00 +0000
asID:                     0
IP address blocks:        2001:500:12c::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f2:2e:79:22:5f:b9:37:d5:b4:73:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 20 22:23:07 2022 GMT
            Not After : Aug 20 04:00:00 2024 GMT
        Subject: CN=b22fdba9-4a69-4357-9b16-da9eaa755395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8f:d5:15:d6:8a:d9:d5:9f:f6:ee:f0:e8:f9:
                    5d:ed:6d:df:fe:53:af:c6:7c:67:e4:9e:0d:03:c6:
                    37:3c:a4:3a:61:5e:b7:e8:50:7f:fe:82:4b:5c:f8:
                    46:ab:84:e7:d8:d6:f8:12:01:e1:f7:a0:34:d0:af:
                    9b:0f:00:91:ae:96:9e:0f:eb:78:12:38:34:82:09:
                    0b:99:1c:5c:aa:32:6c:0b:15:29:6d:f9:fb:00:f8:
                    14:1d:22:91:5a:2a:8b:de:56:e4:ec:ae:08:b0:a3:
                    c4:8a:ba:c1:8c:09:bf:90:97:5a:b9:4f:5a:48:aa:
                    f4:5a:e9:fd:a8:5f:a8:ff:cd:99:07:61:c8:a4:cc:
                    25:da:4d:b0:e5:b8:8e:27:62:b6:42:8b:e1:f1:a2:
                    46:c7:8d:14:05:81:62:ba:8f:9b:7e:51:1c:d5:1f:
                    55:95:7f:eb:d3:e7:57:41:a0:7c:03:60:29:e8:5d:
                    3f:47:e8:02:7c:0b:2b:b9:62:2a:24:31:b9:cb:e0:
                    68:6f:a1:8a:5f:e0:50:b0:4b:6e:80:2d:2d:30:da:
                    a2:e4:2a:96:05:b5:4f:c7:96:25:4b:ff:ec:30:8b:
                    9b:e0:56:9a:67:38:92:0c:84:ca:7e:1a:6a:2b:a4:
                    3d:7a:c5:60:02:83:b1:68:33:aa:c2:94:18:42:2e:
                    c6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:6E:06:8F:81:CA:1C:32:55:A7:44:64:7A:23:AE:30:85:33:D2:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2669404b-ae73-3bf2-a4d1-f2f857d174a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:12c::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:75:50:5c:88:d0:b4:ee:f3:7f:f6:aa:2d:c8:b6:45:7d:2b:
         e6:39:e8:6c:80:e0:f3:6f:c9:02:91:b7:d5:6d:96:de:19:17:
         bd:ad:6d:21:50:71:26:f6:8d:52:23:0f:e8:22:f0:1d:90:51:
         ce:94:3b:8f:86:e5:10:74:42:a1:a6:68:09:d8:52:0d:6b:fd:
         a9:f7:19:5a:29:17:88:74:b8:3d:db:c8:51:5c:31:89:05:6f:
         f8:05:e9:8b:66:1a:b1:cf:a8:6b:10:9d:4e:42:f6:b7:c8:38:
         30:ab:ee:f5:6c:63:e1:28:e0:e0:ae:6e:80:e0:8e:32:f9:5b:
         e3:2d:a7:5a:e0:8c:40:22:0b:ab:f2:26:e4:52:3e:e7:cf:f8:
         a3:4e:01:a9:b4:92:84:e9:7b:21:b2:b3:42:97:8c:cf:0f:3a:
         f1:f6:67:d7:df:77:79:90:63:b4:68:6a:64:80:2f:15:8f:a7:
         8b:ee:e6:84:22:d5:57:ad:f5:2a:fc:db:53:30:fe:59:1f:de:
         75:77:20:91:36:85:17:75:08:16:4b:34:91:27:e7:c2:ae:8f:
         04:f0:e8:11:4d:98:f8:ab:1a:61:9e:14:b0:c9:80:d0:5f:af:
         80:03:df:76:22:4d:7c:58:5c:ef:fe:96:0f:54:48:2e:fa:34:
         6b:0e:e6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:41:52 2024 by rpki-client on console-fra.rpki-client.org