Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/7be0dac1-55ee-31d6-a934-19a3cbc26463.roa
File:                     7be0dac1-55ee-31d6-a934-19a3cbc26463.roa (raw, json)
Hash identifier:          0gE1PfP/hmlXn9d2/RrqemboDWPQUjoZvBQyZcRadIs=
Subject key identifier:   BA:21:C4:48:4E:C8:2D:F6:71:56:CE:FA:29:22:4E:FE:52:B1:D4:D1
Certificate issuer:       /CN=c88ddf4a-b762-40e0-ad58-c8b1a63f462f
Certificate serial:       010D0C9F43285845612868D36887A6C39FA77C00
Authority key identifier: AE:33:3D:70:D3:C7:96:31:FD:81:5B:22:8D:DC:0E:31:0C:E9:14:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/7be0dac1-55ee-31d6-a934-19a3cbc26463.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     26457
IP address blocks:        2620:135:5002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:68:d3:68:87:a6:c3:9f:a7:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c88ddf4a-b762-40e0-ad58-c8b1a63f462f
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=617ac9c5-4983-4e39-ad6b-5dc51253fe97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e5:36:18:4a:a5:19:3d:a7:de:90:9e:19:d9:
                    29:d1:56:88:eb:66:f1:a9:76:15:ad:ac:0e:4b:dd:
                    bd:f3:c3:e7:43:f2:57:f0:3a:e3:33:ef:f9:cf:aa:
                    25:2e:de:e2:a7:c9:86:8b:45:eb:2f:26:fb:1f:01:
                    51:75:96:ea:b2:3b:6c:7a:6b:fa:1d:f0:07:5b:6c:
                    60:27:dd:7c:c0:b8:e0:5d:d0:f5:4c:55:e8:23:51:
                    8e:7c:bf:00:98:36:d7:85:1e:cd:a2:0b:c3:b1:b3:
                    58:d1:e3:2d:e1:ca:96:51:30:46:be:83:91:4f:2e:
                    5b:85:7d:43:8c:67:46:c1:0d:88:26:23:af:fa:84:
                    41:65:6b:2a:14:ab:11:a7:e4:13:c2:01:33:69:8a:
                    12:df:1d:e5:ad:f9:ac:8c:21:11:e7:51:89:7a:0b:
                    5b:e5:0b:12:28:7a:33:87:9e:88:2a:c0:7a:c7:fd:
                    b5:74:b7:2b:cc:3a:93:ae:a3:68:b4:44:18:ca:cb:
                    50:03:da:48:bc:8d:76:84:7f:f7:1a:c4:0a:9f:a8:
                    f2:3b:89:d5:81:12:bf:21:b5:b9:b0:e2:b1:91:ed:
                    46:37:61:d1:5f:25:82:1e:bd:2e:3d:55:2e:fa:d0:
                    58:0f:fa:d0:e3:c9:24:f1:de:e1:69:59:98:c5:75:
                    44:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:21:C4:48:4E:C8:2D:F6:71:56:CE:FA:29:22:4E:FE:52:B1:D4:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/7be0dac1-55ee-31d6-a934-19a3cbc26463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:33:3D:70:D3:C7:96:31:FD:81:5B:22:8D:DC:0E:31:0C:E9:14:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:135:5002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:59:a0:53:2e:a9:0d:ea:60:af:d6:b1:2f:14:53:5e:e9:96:
         91:56:6d:a1:6f:94:06:46:c6:75:c3:8c:0d:cb:5b:d8:a6:0a:
         41:46:35:5e:0d:d2:1c:d0:ac:54:a3:00:79:ec:b3:f3:dc:17:
         b6:5c:d7:7b:a1:b4:d7:a9:4e:43:1f:30:e4:31:e2:05:78:82:
         4a:6a:60:25:05:be:74:cb:b7:26:2d:e0:9a:89:e7:78:3e:db:
         bb:b5:0f:ab:64:c8:15:a7:a5:17:b1:83:05:4c:af:f5:df:99:
         2b:44:be:c8:c9:45:0f:55:c1:32:8f:4e:f7:11:ba:b8:cd:97:
         c9:b4:1e:8d:0f:e6:75:45:4c:d7:3b:65:cb:bf:c3:04:4b:7c:
         06:5f:d3:13:d4:f9:81:15:ec:d6:10:1f:f8:8d:06:b2:f8:66:
         fb:80:5b:ce:f9:5a:a3:0c:8a:d8:4a:22:62:37:7d:d5:5a:51:
         18:03:a1:a7:8a:dc:56:40:94:16:56:1b:99:f1:b1:f1:f4:f9:
         9a:ee:ea:c9:3a:b2:c5:03:89:c9:49:b4:76:56:87:d8:3e:cb:
         87:ee:33:ff:06:32:5e:44:ed:e0:54:19:97:71:b6:d1:49:f5:
         6b:88:59:fb:37:87:19:91:bd:b2:63:97:a6:17:42:eb:77:05:
         0e:95:95:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:08:26 2024 by rpki-client on console-ams.rpki-client.org