Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd/76ce52ab-20d6-3f14-abc2-59dc38ea13dd.roa
File:                     76ce52ab-20d6-3f14-abc2-59dc38ea13dd.roa (raw, json)
Hash identifier:          gLyo90I3CLucaCVxCyj0W/106sh6UDT/JSLak3Gkk18=
Subject key identifier:   FE:25:22:7D:AF:CA:C6:6B:03:73:BF:40:8A:A5:61:FF:C3:95:A4:18
Certificate issuer:       /CN=1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd
Certificate serial:       010D0C9F4328584535E29D4EC962B593F31A1000
Authority key identifier: 2D:D0:17:61:94:A0:D6:A1:48:A1:96:00:47:6D:B4:3F:9E:A7:B6:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd/76ce52ab-20d6-3f14-abc2-59dc38ea13dd.roa
Signing time:             Fri 15 Mar 2024 01:00:26 +0000
ROA not before:           Fri 15 Mar 2024 01:00:26 +0000
ROA not after:            Thu 13 Jun 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        2620:bb:a000:1000::/56 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:e2:9d:4e:c9:62:b5:93:f3:1a:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd
        Validity
            Not Before: Mar 15 01:00:26 2024 GMT
            Not After : Jun 13 01:00:26 2024 GMT
        Subject: CN=599e7f82-68ca-4c01-8b8a-aca16837e494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9e:3c:a7:68:27:7f:14:fe:19:06:f9:93:2d:
                    14:0f:c5:93:37:8d:6a:67:f5:1d:84:af:d0:08:99:
                    96:6a:11:0e:46:46:5d:6b:97:56:e1:4a:dc:bc:1c:
                    2b:8d:94:e2:f5:dd:e6:05:f6:d8:63:c3:b7:3f:ed:
                    9e:f4:41:9b:cd:17:c5:ad:97:d4:cf:3a:98:5f:b3:
                    40:cf:4b:fb:50:0d:12:b0:6a:0e:c5:fc:08:fa:a8:
                    f0:e3:f7:9b:fe:73:1d:a8:3c:b6:63:e9:22:be:fd:
                    00:39:91:f8:84:05:d5:57:a7:e8:72:b8:80:cd:e0:
                    19:bc:fe:83:17:58:63:ad:6d:a7:65:f1:49:b9:53:
                    d5:f9:89:ea:30:13:5b:0e:6c:9b:b7:be:27:81:9e:
                    50:a6:70:93:05:16:5e:be:e4:16:0c:03:20:f0:00:
                    a9:64:18:9f:b2:00:79:7b:d9:51:c3:96:7d:ff:c4:
                    da:d4:35:fd:00:f9:ef:8c:04:4f:e9:b7:5e:fd:cf:
                    5d:00:0b:18:47:a6:63:20:04:b5:b0:c3:b1:98:6e:
                    49:11:06:41:a3:5d:cf:67:97:9e:83:a0:4a:2f:1e:
                    5c:8a:a7:16:8e:fd:a5:8d:c4:aa:84:cf:a8:45:b8:
                    e2:83:8f:b3:26:e6:7e:8d:1b:aa:6e:d7:a9:63:7a:
                    18:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:25:22:7D:AF:CA:C6:6B:03:73:BF:40:8A:A5:61:FF:C3:95:A4:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd/76ce52ab-20d6-3f14-abc2-59dc38ea13dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd.crl

            X509v3 Authority Key Identifier:
                keyid:2D:D0:17:61:94:A0:D6:A1:48:A1:96:00:47:6D:B4:3F:9E:A7:B6:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:bb:a000:1000::/56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:95:8f:00:94:81:8d:08:e0:1d:e1:3b:84:81:1b:03:16:1d:
         27:7e:a8:0a:c9:4d:fb:f9:89:e8:d6:af:56:f4:91:99:9e:bf:
         0e:e9:63:e1:94:01:b1:e9:94:e9:af:13:8e:2c:21:e5:0e:eb:
         13:b8:b9:53:97:46:9d:a0:5c:db:d1:22:d5:fa:36:a7:93:d2:
         29:c9:f9:a5:4e:56:5e:30:44:ba:00:9e:17:f3:6e:8e:21:72:
         3a:c4:f6:4a:47:c0:77:d6:2c:eb:7e:0b:83:71:60:79:30:42:
         43:8e:b3:00:ca:c3:7e:51:ef:a6:1a:05:b7:33:0f:04:8b:7f:
         75:13:de:31:0e:0d:09:2b:42:b6:c0:d0:00:cc:66:e9:23:47:
         da:7d:72:52:d9:d7:5b:6d:7a:4d:43:9c:4e:5b:fb:36:a8:e3:
         cb:f1:14:c4:b9:ce:76:52:43:8e:56:41:54:5b:1c:a9:5d:0e:
         d2:0b:51:cb:92:bf:cf:0f:4d:2f:50:94:5c:09:52:0b:12:a8:
         f8:c0:75:12:cf:4b:de:6e:9b:63:6e:22:29:8a:59:b3:94:52:
         0a:de:c5:f3:ce:6a:69:5a:d3:2c:dc:c4:18:c2:5c:57:c0:30:
         41:64:82:79:3a:75:e2:c0:cd:7c:f3:86:ae:66:86:c9:bf:48:
         c0:bd:b6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:56:59 2024 by rpki-client on console-ams.rpki-client.org