Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/8cf20e1d-1e93-3fbd-909b-734f61934be6.roa
File:                     8cf20e1d-1e93-3fbd-909b-734f61934be6.roa (raw, json)
Hash identifier:          d3AnGP4Ax8hOpW/ws2WP7xWyRHOZ5ikZOUB0VqDNdVU=
Subject key identifier:   24:30:63:59:F9:8B:2E:BA:8C:C9:22:4A:DF:02:79:BF:BA:1A:42:75
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F432858450DF8FB20D4C57A1D31E8D600
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/8cf20e1d-1e93-3fbd-909b-734f61934be6.roa
Signing time:             Thu 29 Feb 2024 17:53:15 +0000
ROA not before:           Thu 29 Feb 2024 17:53:15 +0000
ROA not after:            Wed 29 May 2024 16:53:15 +0000
asID:                     16509
IP address blocks:        2606:9fc0::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0d:f8:fb:20:d4:c5:7a:1d:31:e8:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: Feb 29 17:53:15 2024 GMT
            Not After : May 29 16:53:15 2024 GMT
        Subject: CN=c559202a-3947-435a-a45a-089307294fba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6c:09:14:28:31:fe:4b:2b:21:20:8d:4c:41:
                    b2:b3:c0:bf:f1:cd:26:2c:4d:1d:8d:c6:27:d0:40:
                    99:bc:5d:7a:ba:bd:43:6a:95:e3:f7:74:33:42:a0:
                    bf:3d:57:2a:35:ca:de:05:7f:ef:29:a4:67:90:21:
                    ad:f5:aa:42:7a:d7:27:ab:5e:c8:1c:c0:2f:cf:74:
                    45:eb:d2:c6:ef:d0:22:61:be:38:06:25:39:f7:9f:
                    e6:9f:6f:ad:3b:05:62:f2:c6:e5:ac:37:f6:e6:0f:
                    ab:2d:f0:ef:bc:f3:e8:c5:3f:b8:c1:d0:79:29:bf:
                    7c:55:fd:ed:87:07:98:64:04:93:81:55:8a:b5:61:
                    02:4d:82:95:e3:3d:14:35:10:ca:66:20:1e:1f:b9:
                    58:4a:a5:ba:8f:d2:9e:17:71:d3:59:e1:75:90:03:
                    19:9f:6d:1e:8e:6d:ce:e1:78:f3:cd:b3:e8:c8:04:
                    26:87:6d:f7:ea:69:5c:8f:8c:e8:d4:99:95:e8:09:
                    a6:8f:ea:53:17:5d:ca:89:3a:23:56:db:44:9e:56:
                    4f:ad:04:51:cc:f9:06:03:66:c9:a2:ac:36:8c:bc:
                    a0:36:45:97:1a:96:c0:56:d6:eb:ec:53:61:ac:33:
                    a9:4d:e1:a4:54:a6:70:77:1a:be:57:e0:ac:dd:2b:
                    9b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:30:63:59:F9:8B:2E:BA:8C:C9:22:4A:DF:02:79:BF:BA:1A:42:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/8cf20e1d-1e93-3fbd-909b-734f61934be6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:24:9c:6c:ad:42:dd:a4:71:34:ec:7f:99:77:31:e7:f8:25:
         c0:f2:e0:76:9d:1c:75:42:8d:ad:04:f0:e8:5a:8e:a6:ac:a1:
         e6:f5:87:13:19:16:f7:75:df:7b:50:9a:59:58:a4:54:2e:3b:
         40:f6:ea:ef:85:2e:d6:63:3e:99:60:48:71:73:88:51:5d:05:
         e8:4d:af:cf:5e:5f:ef:33:12:68:ac:53:57:8c:f6:65:c0:5d:
         c2:09:7d:c6:69:eb:01:20:fb:38:33:dc:d3:7a:46:ff:b7:fc:
         2e:4e:e9:15:4e:e7:a7:22:47:7e:1a:de:eb:c3:7d:38:ea:47:
         19:e4:b0:40:0e:ce:44:59:56:4e:05:20:e7:24:91:27:97:b3:
         cf:17:a9:27:67:3d:98:5d:f5:c8:2e:2f:8a:cb:b5:d5:d0:71:
         35:d4:06:dd:ac:8c:34:98:30:53:ae:8f:9b:b3:10:88:9a:6b:
         19:9a:5a:54:b3:68:c1:1a:dc:17:c7:8d:2d:5d:5c:14:bb:d6:
         98:38:02:ab:ee:37:39:9a:ab:56:d5:dc:26:7b:ff:d2:96:54:
         50:55:ea:ad:f8:fa:63:1f:4f:a4:82:2f:f3:ac:f9:33:de:d0:
         85:37:e4:e9:1b:55:32:ce:99:65:4e:b6:a2:02:42:ba:b6:38:
         b4:bc:c5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:56:23 2024 by rpki-client on console-ams.rpki-client.org