Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/bc5a8e0c-37c3-3ebe-b3b1-405c34546f9f.roa
File:                     bc5a8e0c-37c3-3ebe-b3b1-405c34546f9f.roa (raw, json)
Hash identifier:          IUKtPpnOCgCDzCvSNVhmciqPCoahi/gK12eqgsBcHjc=
Subject key identifier:   A4:7B:20:E3:1E:6A:56:D5:0A:48:92:84:4A:4E:7D:8B:76:B3:EE:C1
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285845B64E0CFF69EBBF3E7BA11D00
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/bc5a8e0c-37c3-3ebe-b3b1-405c34546f9f.roa
Signing time:             Tue 30 Apr 2024 01:00:25 +0000
ROA not before:           Tue 30 Apr 2024 01:00:25 +0000
ROA not after:            Mon 29 Jul 2024 01:00:25 +0000
asID:                     399976
IP address blocks:        2602:80c:20cb::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b6:4e:0c:ff:69:eb:bf:3e:7b:a1:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Apr 30 01:00:25 2024 GMT
            Not After : Jul 29 01:00:25 2024 GMT
        Subject: CN=9b324ed5-7ab2-4cb1-92a9-a59c57d8c1c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3d:a5:15:88:60:91:35:a8:b7:1e:f1:a3:50:
                    9a:bd:d2:ff:90:eb:23:0f:c8:15:d6:75:51:3d:47:
                    fe:b5:76:7d:13:09:d2:7b:3d:01:e2:3d:22:9b:1d:
                    a3:19:0a:2c:ff:78:a4:01:71:5c:b8:a3:91:24:15:
                    e7:f6:d9:a4:fe:75:f1:18:6b:07:89:ba:e6:a6:1e:
                    69:43:3c:de:c3:f0:64:04:bb:bd:32:f9:3d:46:70:
                    e3:0a:bc:9e:e9:41:b3:56:74:df:06:a2:74:a8:25:
                    d5:65:6c:28:7c:e9:87:d2:89:56:63:de:79:57:2f:
                    f9:d7:83:48:a9:19:dd:d2:76:72:ed:85:33:9c:3c:
                    a6:7e:ec:ac:96:78:ab:24:2a:f6:f4:31:10:c2:8c:
                    60:ae:6b:37:71:bd:a8:0e:ff:08:8a:5a:7b:3e:39:
                    d1:ca:9e:af:36:91:a1:fa:db:1b:f2:e7:9e:70:ec:
                    0e:9d:1e:ee:9d:50:61:1f:ec:09:97:10:75:d3:05:
                    b0:67:cb:cc:dd:a0:15:95:a2:86:ad:36:09:10:7c:
                    ea:d0:bd:8b:e0:6c:a8:89:48:3f:55:11:3a:8f:f8:
                    90:97:22:25:1c:36:98:9b:32:a1:a3:12:f6:bf:6e:
                    81:88:61:2c:66:fd:d4:20:c6:37:57:f5:a3:7b:e6:
                    6c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7B:20:E3:1E:6A:56:D5:0A:48:92:84:4A:4E:7D:8B:76:B3:EE:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/bc5a8e0c-37c3-3ebe-b3b1-405c34546f9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20cb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:94:a8:43:f1:fc:0c:83:f9:8d:5c:f0:90:9d:9b:db:4c:5a:
         bf:60:ce:16:37:bd:b7:93:e1:6b:b0:ec:e1:fc:8a:22:38:34:
         32:7f:da:b0:dd:81:f3:90:a1:e5:a3:0e:8e:20:09:e5:fd:22:
         03:a3:36:8c:d9:74:01:5e:ce:36:60:64:43:8b:60:a8:10:27:
         e9:e6:91:01:2d:7f:8b:5b:20:5f:06:c3:7e:11:20:87:08:20:
         c7:8f:77:29:26:03:70:b8:d7:8c:b3:53:58:4f:00:c7:71:c1:
         8e:c3:f2:63:87:93:b4:2f:8c:6c:a4:bd:96:3b:62:39:48:e7:
         81:ab:a8:51:eb:27:7a:63:d5:55:a3:6b:8f:de:29:38:68:3c:
         c8:76:38:2d:06:4e:53:ec:4c:c4:f4:4d:58:78:11:03:ff:8f:
         fe:08:4b:13:c7:7a:d9:d4:c1:8f:44:40:82:fa:08:47:80:dd:
         de:9b:ca:02:78:49:01:e8:68:fd:f4:86:e5:7e:92:99:43:7b:
         ea:50:c8:73:2c:1c:e2:76:2e:e9:6f:4f:e0:96:c5:da:02:8f:
         45:3a:51:87:da:d9:30:4b:e2:cc:9e:9d:f7:e9:2f:b3:f0:cb:
         73:90:ec:1c:16:27:01:a6:ac:07:f1:06:48:4c:b5:ce:d4:7d:
         c1:d5:d1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 20:33:31 2024 by rpki-client on console-ams.rpki-client.org