Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd230e81-6eb2-37f2-862e-ab70131b1fd3.roa
File:                     bd230e81-6eb2-37f2-862e-ab70131b1fd3.roa (raw, json)
Hash identifier:          EkJvn+PWjC0N5O+bbNKjamtqzrjfazdUny4yDGJB7J8=
Subject key identifier:   A1:C3:CC:F3:2F:13:6C:4B:8F:F5:2F:18:B5:3F:76:35:E6:B9:8D:05
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858459091FE94192B92CFB0C9CA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd230e81-6eb2-37f2-862e-ab70131b1fd3.roa
Signing time:             Tue 16 Apr 2024 12:36:38 +0000
ROA not before:           Tue 16 Apr 2024 12:36:38 +0000
ROA not after:            Mon 15 Jul 2024 12:36:38 +0000
asID:                     7342
IP address blocks:        2001:503:bfb0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:90:91:fe:94:19:2b:92:cf:b0:c9:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 12:36:38 2024 GMT
            Not After : Jul 15 12:36:38 2024 GMT
        Subject: CN=e824b750-7ea9-4609-9ec9-792a4b2084b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9e:bc:88:d3:5a:30:c8:a9:f9:08:42:66:8b:
                    3b:b1:83:e0:1e:0e:d3:1e:a3:ea:4c:67:19:10:c3:
                    7c:68:a8:b8:fb:25:ce:ac:3b:b3:e5:a3:31:96:f0:
                    66:ce:7a:2a:94:70:db:2e:42:85:61:da:88:b0:35:
                    fe:2b:cf:df:5e:16:9e:dc:14:51:36:e2:cc:fc:3e:
                    71:3c:82:32:f4:1e:02:f1:3b:22:0c:8a:f0:26:21:
                    53:62:5e:42:b0:9b:5c:99:b8:71:8f:5d:e5:8c:f0:
                    f1:ba:55:89:3a:de:1e:df:11:e4:3f:11:d3:81:81:
                    a9:44:22:27:79:a5:0e:25:00:b8:b1:b9:de:95:4c:
                    0b:d0:ab:ef:f2:fb:d7:09:d4:fa:33:88:31:40:5a:
                    03:94:84:6e:77:13:f9:7c:c5:60:6a:25:72:34:df:
                    52:d6:92:6d:6d:7c:6a:38:19:fc:3f:88:45:cc:49:
                    02:ec:ef:82:ea:f2:91:df:81:8f:13:b2:52:ae:9e:
                    7d:a0:2a:47:84:21:08:c9:e3:f5:78:df:3e:cc:4e:
                    ae:fb:95:85:20:0b:a8:27:01:1f:01:86:64:ab:24:
                    3c:c9:e7:7d:6b:7d:36:1b:7d:29:04:70:e6:48:ed:
                    a5:2f:d2:9c:2b:92:4f:c0:94:4a:ec:c8:3d:48:0c:
                    e8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C3:CC:F3:2F:13:6C:4B:8F:F5:2F:18:B5:3F:76:35:E6:B9:8D:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd230e81-6eb2-37f2-862e-ab70131b1fd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:bfb0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:d0:c2:44:88:7d:90:73:e9:b0:26:a6:e7:ce:22:53:b0:29:
         58:fb:00:28:61:38:e8:13:61:b7:94:d9:6c:a0:0d:91:8e:03:
         cf:5b:99:50:79:7c:c9:38:be:7b:de:7d:3b:96:2c:39:03:85:
         3d:5b:f2:ca:04:05:1a:87:49:8d:fa:91:b7:4b:e7:96:fd:4c:
         70:2d:9b:1f:ed:bd:26:2e:e7:f3:e0:65:5a:30:f8:e9:94:2f:
         fa:c5:a2:8b:0c:20:72:7e:9c:6b:8e:f5:b0:0b:da:9c:f9:de:
         24:ca:35:62:66:b8:ff:9c:ba:af:5e:dd:a8:15:2e:63:c8:dc:
         cf:92:1e:08:67:ba:68:d3:bc:a9:79:24:c4:99:79:dd:2e:ab:
         06:3d:67:de:d1:a6:75:a5:a4:64:e8:c0:bc:12:c8:35:9a:67:
         83:ab:c2:5c:e3:d2:71:12:84:77:66:41:ca:61:3b:19:55:33:
         fb:13:63:01:03:89:bb:e9:76:e2:3a:8e:58:2d:e4:78:38:7a:
         fa:f7:0a:c8:e9:69:6b:b7:3f:a5:31:87:5f:17:39:62:00:33:
         4f:eb:79:d4:b4:3d:b3:ec:88:3b:70:72:b6:a7:e3:49:b3:69:
         f8:d2:bc:85:05:4a:f1:fd:4f:c3:ec:f0:55:05:4b:7d:6e:15:
         6e:c6:de:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:33:26 2024 by rpki-client on console-fra.rpki-client.org