Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/ed2d2faa-099a-312e-bb7d-40e2aba994a4.roa
File:                     ed2d2faa-099a-312e-bb7d-40e2aba994a4.roa (raw, json)
Hash identifier:          fxO4HsGroI9cEHd+JnqZYn5pmtaOROprLcFz+iyQ0Qk=
Subject key identifier:   58:3E:18:49:7F:74:DE:E5:EB:87:3F:F9:57:1D:B6:70:7A:71:63:50
Certificate issuer:       /CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
Certificate serial:       010D0C9F432858456128599102821E5E7E190D00
Authority key identifier: EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/ed2d2faa-099a-312e-bb7d-40e2aba994a4.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     11659
IP address blocks:        2001:49d0:80::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:59:91:02:82:1e:5e:7e:19:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=70f80441-6f24-46c2-88bd-d62b8196ed8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7c:0c:61:31:46:4b:db:f0:b4:03:0b:5b:c8:
                    c8:3a:c7:53:6c:af:c0:a8:53:f4:7b:d7:a0:4c:7f:
                    4f:4c:f4:bb:23:ac:ab:e0:60:29:2d:23:76:aa:73:
                    d0:58:04:10:6d:a0:b1:04:eb:c9:db:55:4a:3e:14:
                    ab:71:82:11:4c:ef:1b:d0:9c:a4:d6:29:81:de:4a:
                    06:11:8f:24:60:05:3b:2a:9d:04:f8:20:cc:e3:76:
                    dc:70:d7:fd:4c:c7:9b:68:c7:53:5f:8a:a0:02:b8:
                    9e:d0:24:77:07:77:b2:a9:df:d1:a0:81:68:82:d7:
                    d2:bc:a8:1e:1f:3f:61:19:39:72:64:b6:3a:d7:db:
                    c3:6e:ba:0c:1a:f3:25:14:dd:68:07:67:15:dd:45:
                    2b:e3:b3:3b:b6:88:22:12:8b:2e:67:0f:e1:c2:7a:
                    b8:56:39:76:5e:4f:05:51:84:ca:53:f7:94:ad:68:
                    3f:38:5e:bb:8d:3b:f4:37:fd:79:c7:4e:8b:d2:d1:
                    f5:e0:43:6a:f0:30:18:22:61:7a:9e:f4:97:97:13:
                    14:9f:cc:c3:12:f9:d8:d5:95:32:85:2f:d3:ce:cd:
                    90:b1:e5:be:8d:7a:46:0d:db:df:a5:82:0d:24:88:
                    90:41:88:7e:59:87:04:52:15:cc:bb:e5:fa:85:49:
                    3b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3E:18:49:7F:74:DE:E5:EB:87:3F:F9:57:1D:B6:70:7A:71:63:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/ed2d2faa-099a-312e-bb7d-40e2aba994a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl

            X509v3 Authority Key Identifier:
                keyid:EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49d0:80::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:6a:5f:02:fc:04:1e:3f:bb:d1:f7:c4:ec:9c:b6:94:df:f8:
         0c:03:f0:43:e0:f1:22:0f:81:78:3e:db:42:dd:65:a2:a6:fe:
         8d:c4:83:61:b7:93:dc:1d:dd:2d:ce:50:31:90:f8:23:34:8c:
         e3:b6:54:4c:21:42:b3:99:ae:91:7a:07:06:be:d3:fc:49:d5:
         c9:a6:64:77:20:86:aa:40:97:51:bd:04:24:63:2a:3d:4a:c4:
         e9:3a:4c:7c:86:46:b8:af:1d:28:8b:f7:a5:e9:33:a3:98:33:
         71:30:01:96:08:5a:95:05:f8:fc:ea:33:94:4f:e4:02:68:b6:
         5f:0f:f1:2f:7c:2f:f9:ee:aa:2b:bc:c4:6a:7b:fb:ef:f4:af:
         ed:f8:7f:ca:da:cb:ac:cb:11:f5:dd:c3:2c:34:29:84:ad:35:
         5b:5a:2a:30:24:bc:c0:dc:31:4f:06:aa:91:cb:44:b7:54:0c:
         02:ac:22:ee:db:bf:7b:34:1a:16:a7:de:03:8d:0a:44:fb:07:
         a7:1a:d4:c2:97:59:02:96:77:e0:71:47:d0:14:1b:60:fc:0d:
         bb:14:5f:9d:f1:cf:76:d4:36:64:1c:e6:23:a1:7d:72:56:bf:
         09:74:25:13:e4:d1:72:f5:d1:23:ef:16:e8:97:fe:09:a8:96:
         9a:b2:b3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 05:59:15 2024 by rpki-client on console-fra.rpki-client.org