Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/50ed8739-975a-3a90-9381-8342f4d01a7b.roa
File:                     50ed8739-975a-3a90-9381-8342f4d01a7b.roa (raw, json)
Hash identifier:          T7k9Gg0/gypVqMkbitZNVAgRxz1oMIutucd98ct21eE=
Subject key identifier:   7C:9F:88:F9:91:2D:E1:17:E9:6C:4E:5E:12:FC:D1:46:A0:B6:E8:FD
Certificate issuer:       /CN=d2294e65-4da1-4c07-9bc0-820cdb1e2c48
Certificate serial:       010D0C9F432858456128659FB9BF2C6BF7888500
Authority key identifier: A2:FA:26:93:6E:E2:D1:F0:D6:4F:44:71:93:66:33:0D:F3:27:A1:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/50ed8739-975a-3a90-9381-8342f4d01a7b.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     2552
IP address blocks:        2606:fd80::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:65:9f:b9:bf:2c:6b:f7:88:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2294e65-4da1-4c07-9bc0-820cdb1e2c48
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=c9a65107-b321-4448-9495-0d5709084eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:59:2e:e8:f5:2e:20:73:af:d8:21:98:0a:7a:
                    8d:50:84:34:53:2a:4d:f6:de:49:82:56:09:b7:f0:
                    87:a4:92:22:c2:fe:97:c1:6b:3b:f4:c9:0e:2d:0e:
                    51:27:58:e6:0f:ee:97:04:be:94:4f:04:88:d0:d9:
                    c3:4b:11:69:78:7f:70:ac:e6:b9:81:75:4f:74:7d:
                    f4:60:61:5d:f6:e1:7c:5b:2a:f1:54:e0:ed:dc:08:
                    30:ce:e0:f5:63:ae:74:d2:b9:c7:fb:0e:c2:dc:97:
                    d6:c8:b0:41:55:81:fc:8d:8b:f2:bc:a2:a4:ae:c4:
                    7c:67:7d:78:9c:e0:64:ec:7e:54:bd:7e:92:bc:96:
                    63:0e:12:22:d6:8f:31:34:cd:22:1e:60:80:da:20:
                    6a:74:e9:5e:b3:45:42:4c:c8:cc:4f:41:1f:a6:2e:
                    7e:8c:c5:49:40:a9:b5:3e:b2:b1:30:cf:68:25:86:
                    dd:91:52:68:0c:90:de:fb:3a:ac:ae:bf:57:b4:f1:
                    52:4c:bc:b7:d1:53:c5:9b:bc:59:94:f2:46:be:fa:
                    d0:ac:e6:96:56:c5:78:5c:ff:cd:c5:32:d2:8c:93:
                    8a:e3:58:1b:3d:54:1f:0b:d5:fe:af:c6:b1:53:3c:
                    31:e5:9b:4d:0c:e0:5a:83:18:db:21:e5:24:0f:88:
                    19:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:9F:88:F9:91:2D:E1:17:E9:6C:4E:5E:12:FC:D1:46:A0:B6:E8:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/50ed8739-975a-3a90-9381-8342f4d01a7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.crl

            X509v3 Authority Key Identifier:
                keyid:A2:FA:26:93:6E:E2:D1:F0:D6:4F:44:71:93:66:33:0D:F3:27:A1:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:fd80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:37:be:30:e4:1b:e8:c4:79:2c:77:87:1e:b8:85:3c:e7:fe:
         b2:a1:09:18:eb:56:4e:6c:b7:cd:9e:0a:be:f3:ed:3b:95:66:
         b8:61:49:10:1f:9a:3d:af:de:6c:67:4a:b3:02:10:ef:87:e4:
         ff:3e:7a:7a:38:fc:cc:83:29:22:75:cd:3d:f2:ba:aa:cc:a3:
         6f:f3:1e:5c:2b:d3:7f:4e:3d:16:55:83:0c:b7:e5:cb:2d:c2:
         33:be:8b:4a:90:d0:a5:88:33:20:b1:a5:28:47:80:8a:fb:72:
         8d:e0:db:7b:86:e8:65:14:e7:21:6b:0c:cf:bc:64:22:65:5e:
         a4:5f:db:6c:30:60:47:90:be:f7:e1:b8:c9:67:b9:d7:a7:02:
         bd:70:c3:6c:c7:13:0f:c5:5f:18:33:ec:9b:73:2a:45:33:79:
         cf:92:f4:ad:e2:61:fb:b2:2a:58:aa:80:eb:6c:c6:db:86:95:
         09:8f:df:c2:8b:07:46:d0:3f:a2:1d:a7:d8:a2:23:d0:9a:1a:
         76:0e:6e:eb:d1:67:7c:2e:60:82:aa:1a:a5:94:0a:1d:60:a4:
         e6:24:8f:7c:ff:3d:ab:36:f1:97:c4:80:65:09:70:b2:51:87:
         80:89:1a:a0:e2:e0:c0:f3:8b:cf:b7:87:b2:f0:57:af:01:b2:
         f2:d9:0e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:25:22 2024 by rpki-client on console-ams.rpki-client.org