Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/d5c79891-e1f1-3ba0-b4fe-6857308dfe79.roa
File:                     d5c79891-e1f1-3ba0-b4fe-6857308dfe79.roa (raw, json)
Hash identifier:          OaiCChLnlF4a+EcCBG1eW1VHpXpPr2tsrjRe7M6CtgE=
Subject key identifier:   C3:20:4C:6B:FD:43:FD:35:14:53:9D:7A:92:E8:78:93:5A:18:87:34
Certificate issuer:       /CN=2d448124-6e45-40ca-b551-28ef364c99c7
Certificate serial:       010D0C9F43285845B21E24E93F6973F0667C08A0
Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/d5c79891-e1f1-3ba0-b4fe-6857308dfe79.roa
Signing time:             Sun 28 Apr 2024 13:00:34 +0000
ROA not before:           Sun 28 Apr 2024 13:00:34 +0000
ROA not after:            Sat 27 Jul 2024 13:00:34 +0000
asID:                     15290
IP address blocks:        2620:a0:2002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b2:1e:24:e9:3f:69:73:f0:66:7c:08:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7
        Validity
            Not Before: Apr 28 13:00:34 2024 GMT
            Not After : Jul 27 13:00:34 2024 GMT
        Subject: CN=8fb39931-ecae-428a-b193-928574e3d9e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3b:32:0c:9a:94:68:62:96:f5:7d:ab:10:7d:
                    de:d9:dc:30:71:81:43:69:d7:f6:61:a8:bb:43:b2:
                    18:6f:9d:05:b8:86:e1:08:fd:ac:9e:c9:55:5b:aa:
                    87:23:c0:80:4a:af:f3:41:e4:c1:65:5e:9f:f4:1b:
                    da:b4:86:be:59:ad:9d:09:50:54:3e:01:55:85:42:
                    8b:4d:c6:6d:91:fd:1b:1c:4e:f1:fa:9f:4c:f3:c9:
                    67:29:57:52:4e:03:c9:70:36:76:3c:e8:ae:f9:dd:
                    41:ea:72:3e:c9:72:14:99:75:87:c2:8e:ed:aa:75:
                    88:cb:14:73:fd:b7:30:b6:19:3d:b5:26:d0:e5:82:
                    79:84:99:83:e5:35:25:7f:7d:e8:db:53:cd:cb:9e:
                    52:fa:a3:37:ef:c2:21:e7:d5:b5:72:4c:82:17:a1:
                    2f:9d:74:1c:62:9b:9e:e6:5b:1a:07:93:54:4b:3b:
                    56:10:bf:b6:d6:b0:82:60:d0:d3:64:3e:cd:c3:ec:
                    0d:be:19:4f:d8:9e:11:ee:48:d2:c6:81:42:6e:77:
                    6a:9b:73:3c:02:d6:c1:b7:9d:34:c4:04:e4:7b:77:
                    9d:d5:a3:56:42:af:28:46:66:ca:3b:7a:f7:e6:99:
                    34:6f:87:26:9f:b0:1e:77:c7:e0:98:c4:63:37:b7:
                    10:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:20:4C:6B:FD:43:FD:35:14:53:9D:7A:92:E8:78:93:5A:18:87:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/d5c79891-e1f1-3ba0-b4fe-6857308dfe79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl

            X509v3 Authority Key Identifier:
                keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a0:2002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:28:18:b2:a4:84:44:c0:37:ec:90:f2:09:b1:af:77:be:e0:
         bb:7b:f4:d6:8d:2a:c8:82:7b:e6:e1:f3:e4:b6:fc:0d:64:df:
         7b:8e:f7:95:31:16:6d:3a:0a:33:53:2e:82:5b:cb:88:8a:02:
         3f:cd:14:7c:a5:71:6f:eb:15:00:66:fe:8d:ce:c1:b8:10:47:
         b9:bc:ac:a0:7e:1f:47:b4:bf:cc:ff:1b:a6:fa:f5:36:bb:30:
         ac:1d:07:73:e9:d9:1d:3d:d1:5f:cf:a4:2d:6b:c9:b9:1f:9d:
         70:8d:f4:51:83:f1:e4:82:bf:57:f5:e0:03:0d:7a:6b:6e:58:
         8e:69:43:f8:9d:57:ea:98:6a:79:45:15:73:a8:ed:39:ad:4d:
         d9:6f:c6:25:26:4e:cf:d9:93:e3:ab:f3:5d:b1:4d:6e:0b:58:
         c2:23:fb:92:78:0d:27:bb:36:5e:9e:eb:cf:3f:d0:5b:5f:5e:
         19:03:5c:55:55:6d:54:5d:9b:b1:0b:86:bc:94:6e:a9:f9:0f:
         86:55:2c:71:65:66:b4:d3:70:c0:e1:d3:22:55:17:8a:73:59:
         2f:d1:50:d2:06:64:e5:52:a8:aa:8c:56:d4:9c:53:af:c3:c5:
         53:3b:48:91:04:ed:26:40:a1:c3:29:c9:a7:83:b0:d4:d9:54:
         ea:65:bd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 15:21:08 2024 by rpki-client on console-ams.rpki-client.org