Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/88fa80cf-a4cb-3ced-a935-1fe3c40c4de0.roa
File:                     88fa80cf-a4cb-3ced-a935-1fe3c40c4de0.roa (raw, json)
Hash identifier:          3xaUyLECduzEuNRT4cv/yzJ+ofgBm/jAFgLZlU6k0HE=
Subject key identifier:   47:9E:5C:05:26:15:5E:3D:EC:11:F1:61:8E:9E:25:79:A0:FF:BB:09
Certificate issuer:       /CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
Certificate serial:       010D0C9F432858458DD34E119000E38A69D66D80
Authority key identifier: 5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/88fa80cf-a4cb-3ced-a935-1fe3c40c4de0.roa
Signing time:             Mon 15 Apr 2024 13:00:35 +0000
ROA not before:           Mon 15 Apr 2024 13:00:35 +0000
ROA not after:            Sun 14 Jul 2024 13:00:35 +0000
asID:                     14618
IP address blocks:        2620:121:5080::/43 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8d:d3:4e:11:90:00:e3:8a:69:d6:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
        Validity
            Not Before: Apr 15 13:00:35 2024 GMT
            Not After : Jul 14 13:00:35 2024 GMT
        Subject: CN=62ad1143-f614-4199-aae6-079671afca03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:56:0a:07:dc:c3:a2:b2:15:b4:fa:4a:c7:da:
                    98:9c:f9:b2:a0:c1:d7:94:72:da:98:94:19:d5:93:
                    95:06:f2:f5:eb:88:38:38:e1:60:9a:d6:0f:e1:0d:
                    1f:15:f8:d8:b7:88:1e:6c:25:03:df:17:33:12:b7:
                    79:5a:d8:d0:1d:6d:25:41:1d:52:33:68:57:d5:ff:
                    bb:0f:67:34:df:e6:d3:44:a3:16:88:3b:e3:1a:ca:
                    5c:fa:68:a3:3b:70:73:09:7a:f1:b5:dc:1c:c7:46:
                    fe:48:2c:5e:19:66:7b:f1:03:a4:15:af:0d:94:d0:
                    5a:e5:ee:24:48:ca:bb:1b:e8:f4:35:09:e5:3e:a3:
                    6c:34:51:50:8f:34:4c:3c:1f:19:89:65:a1:77:c7:
                    39:ae:6f:dc:3d:51:08:a4:13:aa:42:fc:50:12:9f:
                    b2:9a:5b:3c:9c:9b:21:fc:20:ae:77:6f:b0:59:3c:
                    6f:f1:bf:30:ab:a9:f7:66:97:f0:c2:d6:d2:85:80:
                    3a:d2:96:be:b9:ca:cd:5a:0c:99:4a:31:ce:78:70:
                    35:f8:cd:1e:44:90:ef:3a:02:9c:5e:13:08:cd:68:
                    7a:90:f5:17:78:d9:2e:65:7c:68:9f:d4:f3:fb:d8:
                    96:75:9b:99:d2:e3:e0:c9:ff:c8:19:36:84:0b:4f:
                    6b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9E:5C:05:26:15:5E:3D:EC:11:F1:61:8E:9E:25:79:A0:FF:BB:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/88fa80cf-a4cb-3ced-a935-1fe3c40c4de0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl

            X509v3 Authority Key Identifier:
                keyid:5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:121:5080::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:e6:e8:77:00:ec:9b:80:46:ea:4c:f4:ad:94:d0:fd:64:9d:
         be:f7:8e:52:2a:1d:c9:75:53:6d:96:ed:9b:11:2e:fe:15:5c:
         44:91:de:6e:57:ca:25:b3:2f:f4:5a:f8:af:bc:58:a8:a2:72:
         35:45:30:4c:7e:70:d7:ae:74:65:5e:6d:3d:a5:94:be:0c:11:
         bc:62:57:9b:c5:e7:b4:a3:c2:6c:de:d5:78:4a:93:19:00:4e:
         cf:3e:0a:42:9a:d5:ea:b6:97:13:1a:76:f9:54:20:46:af:5c:
         c2:52:17:b5:8b:0a:f1:fb:93:32:31:ca:51:60:4b:41:f5:d2:
         6b:70:e4:c6:19:81:40:de:c8:17:1d:01:aa:d8:49:31:1e:5a:
         97:63:f1:92:79:36:2d:29:76:83:c2:64:f1:44:02:46:b2:33:
         12:5d:62:e0:79:bc:e3:f4:1b:6e:be:39:ae:e9:06:ed:e9:58:
         2e:d2:1a:6c:e1:5c:ac:17:0c:7f:c2:84:c1:ac:ea:cf:5b:fe:
         94:fc:07:a7:82:45:7b:1e:56:d7:d9:d3:30:c0:8e:9d:9e:2e:
         74:44:d6:43:f1:0c:46:2b:64:42:6b:13:df:a2:10:cf:b7:ca:
         49:1b:60:3f:fb:6f:b2:c2:9a:d3:a4:66:dd:68:40:4c:1b:a8:
         cb:44:35:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:41:53 2024 by rpki-client on console-fra.rpki-client.org