Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/24dda753-48f0-3464-8586-4c56cb9bb7cc.roa
File:                     24dda753-48f0-3464-8586-4c56cb9bb7cc.roa (raw, json)
Hash identifier:          YJXl93xSrlnCYgyeG+Io4h8Sy3Gut/icGf4ILQB7waM=
Subject key identifier:   EB:F2:81:B1:30:83:CF:95:EC:2D:A9:5F:47:D5:7E:7C:DA:41:F1:90
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F43285845CF6E365DC0F640C78FA7C2E0
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/24dda753-48f0-3464-8586-4c56cb9bb7cc.roa
Signing time:             Thu 09 May 2024 01:00:26 +0000
ROA not before:           Thu 09 May 2024 01:00:26 +0000
ROA not after:            Wed 07 Aug 2024 01:00:26 +0000
asID:                     394727
IP address blocks:        2604:880:6e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cf:6e:36:5d:c0:f6:40:c7:8f:a7:c2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: May  9 01:00:26 2024 GMT
            Not After : Aug  7 01:00:26 2024 GMT
        Subject: CN=694d185f-d913-4a6d-a0b8-f1ee32afe82d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1f:6b:ae:b4:cd:f8:69:ab:de:6b:e6:74:02:
                    8d:a3:b1:b0:68:eb:d1:d8:d6:f5:d8:a9:59:9d:90:
                    03:59:14:46:d7:94:72:64:a8:65:68:c7:70:1c:a6:
                    8e:31:96:27:b2:34:e6:14:87:ae:6f:6d:16:4e:5c:
                    94:9e:4d:f4:86:b3:ba:2a:40:cf:bf:b3:e4:24:3c:
                    77:a1:18:a1:04:7c:d1:b7:29:d1:b6:41:1e:7d:c2:
                    44:8e:78:f9:ae:4a:6b:64:23:a4:95:bd:e3:81:98:
                    49:14:22:c3:17:94:7d:83:7d:c7:3d:ae:9b:78:da:
                    5b:7f:78:ec:12:17:17:93:61:13:59:1f:da:00:bc:
                    79:f9:e1:49:6c:c7:55:f7:bc:57:f3:8e:ad:be:d3:
                    92:62:bc:11:50:f2:43:31:cc:c1:f5:df:3d:3a:c6:
                    23:9e:d9:42:f6:30:08:03:ff:dc:67:57:c0:b3:c9:
                    63:d9:a8:d3:e2:43:d7:67:48:24:c1:36:e1:99:4d:
                    b2:a8:86:df:1c:5e:39:07:4b:a9:11:b0:e1:06:ea:
                    49:d2:77:b5:67:40:15:4d:3e:53:fa:cb:f3:5c:eb:
                    f3:39:f6:8d:b5:c3:86:04:1f:fb:9d:da:cc:15:c1:
                    3c:b3:ad:17:32:73:b9:7a:c2:a2:46:d2:39:a7:e0:
                    eb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F2:81:B1:30:83:CF:95:EC:2D:A9:5F:47:D5:7E:7C:DA:41:F1:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/24dda753-48f0-3464-8586-4c56cb9bb7cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:880:6e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:c3:e7:ec:df:c0:7d:0c:21:38:5f:45:fd:50:a5:a2:e5:0b:
         b7:df:83:ea:fe:17:68:ad:a9:25:3f:d3:0a:b8:84:22:88:6e:
         87:ec:07:9a:c3:03:80:58:57:cc:20:65:91:7f:c7:20:4a:95:
         cc:dc:4e:7a:35:24:d7:87:b2:75:3a:20:74:19:f2:ea:6f:fd:
         46:9a:14:11:49:fb:65:1d:b8:6a:f3:63:fc:39:e1:a2:f4:64:
         49:37:82:62:ba:a9:02:28:74:1b:fe:07:ae:1a:5f:28:7c:a8:
         0c:aa:a8:6b:55:77:4c:34:a4:52:85:c6:63:a6:37:d1:76:f1:
         aa:72:a0:5d:c5:6c:a2:37:26:d6:d8:28:4d:3b:fd:84:4f:4e:
         9e:d6:cc:ec:93:56:88:98:39:6d:37:3b:9b:81:82:00:7b:8b:
         2d:28:d3:9a:fe:92:d9:39:8a:ad:a7:1f:99:ee:1f:a8:35:3f:
         f5:6a:02:4f:e5:9c:71:c1:80:48:4c:54:92:72:1a:87:d9:58:
         df:50:a6:b8:13:93:3d:76:7e:06:80:96:b1:16:22:d2:0f:09:
         2e:01:58:b8:31:f3:ad:ec:17:59:07:67:32:fa:04:d7:d4:58:
         3e:36:39:5b:79:40:ff:d9:40:7c:1c:d5:de:7b:7e:6b:78:e5:
         dc:92:2a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:13:37 2024 by rpki-client on console-fra.rpki-client.org