Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/bd24ff87-c178-3f0d-a1e7-788cf90a8c56.roa
File:                     bd24ff87-c178-3f0d-a1e7-788cf90a8c56.roa (raw, json)
Hash identifier:          mJtgyc1a+ST8uVN9xDSsfFiws393WjYKufcxIkZcO3s=
Subject key identifier:   A3:47:87:73:2C:B5:01:1D:D1:7E:CE:B8:3A:FB:E9:B2:29:B7:21:0F
Certificate issuer:       /CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f
Certificate serial:       010D0C9F43285844DB4531ECBF6B643B0DAEAD80
Authority key identifier: E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/bd24ff87-c178-3f0d-a1e7-788cf90a8c56.roa
Signing time:             Sun 11 Feb 2024 14:00:30 +0000
ROA not before:           Sun 11 Feb 2024 14:00:30 +0000
ROA not after:            Sat 11 May 2024 13:00:30 +0000
asID:                     0
IP address blocks:        2001:504:1b::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:db:45:31:ec:bf:6b:64:3b:0d:ae:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f
        Validity
            Not Before: Feb 11 14:00:30 2024 GMT
            Not After : May 11 13:00:30 2024 GMT
        Subject: CN=22a81e33-082f-4a6e-ad69-85a4b929891d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:74:8e:ba:d6:78:da:1d:0a:f3:b2:f7:40:9a:
                    5c:f2:5a:b8:c9:6c:2d:83:8e:ff:34:4b:2d:fc:d4:
                    45:4a:65:65:02:f4:d6:5d:8c:34:1f:12:c3:7a:fc:
                    ab:c0:93:dd:35:1d:c2:a4:8c:79:8f:fe:f7:bd:ed:
                    f4:60:56:47:48:75:5d:cc:de:b3:d4:57:6d:13:fc:
                    b3:e7:97:14:02:91:d6:2a:72:8e:88:57:c2:bd:05:
                    4b:2a:dc:94:f2:e3:b2:7c:e8:35:d0:07:6d:06:64:
                    ba:ab:2d:17:22:59:e9:f8:61:de:06:a7:72:ab:f2:
                    22:12:9e:e2:e4:8a:ed:17:45:c0:15:e3:5b:4b:7c:
                    e6:a5:9e:b0:42:9d:54:5f:cf:37:f2:4c:bb:f0:1a:
                    5e:d8:92:48:fc:27:1f:ef:71:75:d3:e2:8d:d3:a0:
                    4c:e5:85:1e:ec:3b:00:b8:6e:16:54:e8:d5:54:9a:
                    06:65:d2:e8:5f:0d:41:1a:39:c9:a4:86:34:5c:53:
                    e1:d3:f0:06:f0:38:f4:f6:a2:05:21:92:ab:2f:e9:
                    b4:5d:fe:4f:b5:23:f0:d7:0a:7f:e8:2a:15:e1:14:
                    fb:c8:d9:83:fc:92:20:c5:83:a4:0a:da:73:2d:46:
                    97:d7:a9:67:9b:09:33:7c:8c:1c:c7:5e:6c:63:1e:
                    f7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:47:87:73:2C:B5:01:1D:D1:7E:CE:B8:3A:FB:E9:B2:29:B7:21:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/bd24ff87-c178-3f0d-a1e7-788cf90a8c56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl

            X509v3 Authority Key Identifier:
                keyid:E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:1b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:48:a1:bc:2d:58:63:5f:5b:db:eb:4c:87:cc:68:ac:f7:d4:
         63:b7:ff:6a:45:c7:98:ee:14:77:81:be:cf:b1:26:84:d6:6d:
         87:45:2b:ac:0b:d8:bd:56:c2:31:bf:24:b2:b9:3f:86:df:8a:
         ab:2b:77:98:1e:f5:49:c8:5b:d8:0f:5c:07:19:4e:06:8d:b2:
         11:2f:a8:4a:62:29:20:34:d6:2d:f0:72:8a:cb:a6:49:2e:f5:
         4e:f7:ec:1c:59:e5:50:81:f7:fe:2b:24:1c:7f:78:0f:51:68:
         c3:23:72:ea:e8:ca:bf:a8:71:50:84:26:dd:f9:10:1f:7d:e2:
         31:1b:93:69:db:5c:ac:ee:ed:9f:3d:44:46:3f:25:fe:a5:04:
         7a:11:4d:1f:82:42:a9:68:c0:f6:88:dd:40:a3:5c:d9:94:70:
         24:eb:c8:64:d7:f4:1a:7b:17:ec:3d:3e:51:a1:2a:8b:7f:14:
         6f:7a:86:5e:6a:52:ef:96:20:94:e5:81:5c:d6:70:1e:cf:71:
         bc:a4:f9:96:8b:de:ff:f0:49:37:6a:48:f9:1d:7c:d7:f4:a5:
         61:60:0d:8e:69:2e:19:04:3b:1b:c3:1b:82:b7:39:68:63:65:
         97:32:e6:97:c9:e7:5d:96:f8:79:0d:3a:1e:10:ec:8e:0d:85:
         6c:d2:c0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:42:58 2024 by rpki-client on console-fra.rpki-client.org