Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f46575a1-bb08-3d4e-b614-33b43d1dcc0f.roa
File:                     f46575a1-bb08-3d4e-b614-33b43d1dcc0f.roa (raw, json)
Hash identifier:          UhEFTlNojFrhmyczbMsJGhxp2rmEY7C9xOFXDBesKuo=
Subject key identifier:   AD:F9:E9:E9:5A:7F:22:7E:37:81:4E:2A:82:BF:77:9C:59:43:36:78
Certificate issuer:       /CN=2d448124-6e45-40ca-b551-28ef364c99c7
Certificate serial:       010D0C9F43285845ADEE17F38C0F96C9FC190780
Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f46575a1-bb08-3d4e-b614-33b43d1dcc0f.roa
Signing time:             Sat 27 Apr 2024 01:00:26 +0000
ROA not before:           Sat 27 Apr 2024 01:00:26 +0000
ROA not after:            Fri 26 Jul 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        2620:a0:200f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ad:ee:17:f3:8c:0f:96:c9:fc:19:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7
        Validity
            Not Before: Apr 27 01:00:26 2024 GMT
            Not After : Jul 26 01:00:26 2024 GMT
        Subject: CN=5b14f68a-a1a5-42c1-bd5c-45803c61a477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:13:c7:aa:bb:01:1f:4b:d4:a4:a9:05:fd:3d:
                    2e:9d:7f:ec:cb:df:d8:2d:36:76:a8:f1:26:62:5b:
                    a3:4c:49:24:b9:68:87:93:06:4d:76:18:83:ce:c7:
                    3d:ed:f8:8b:87:f8:a6:45:bd:d0:84:6f:be:9f:26:
                    59:e4:10:65:b8:aa:50:0b:00:32:9e:ed:d5:59:f1:
                    0d:34:b0:5f:0d:76:ab:5b:01:7d:75:51:ae:15:4e:
                    c3:a8:55:2c:ac:50:ec:03:57:a1:5c:ff:46:72:a2:
                    76:0a:f7:4d:84:ee:ea:ff:b9:f1:6d:c2:b1:63:02:
                    57:b5:b3:76:8c:13:84:e7:a3:8a:ad:d1:c8:b4:22:
                    22:ce:25:5a:d5:c7:a3:d2:5c:87:90:9c:7c:f4:78:
                    63:6f:7e:6c:50:89:05:b8:79:9a:25:61:67:a3:d8:
                    5b:e8:e3:cd:6b:df:a7:cb:c2:b5:cb:91:0c:76:f3:
                    32:49:cc:00:f0:ee:09:0d:e5:58:4b:2d:ff:36:23:
                    a8:76:0b:ad:b1:53:95:fd:14:3a:e2:05:83:0f:3b:
                    53:97:5c:af:c1:9f:f2:09:6b:a8:f2:6e:87:1f:46:
                    5a:3c:aa:f0:d2:3f:be:d9:15:4a:42:fc:f9:e5:ad:
                    56:a1:0d:df:d0:09:fd:f0:a5:fa:83:36:a3:8b:e4:
                    88:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F9:E9:E9:5A:7F:22:7E:37:81:4E:2A:82:BF:77:9C:59:43:36:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f46575a1-bb08-3d4e-b614-33b43d1dcc0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl

            X509v3 Authority Key Identifier:
                keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a0:200f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:98:05:a6:d6:91:81:64:4d:61:a9:30:3a:50:3e:4c:80:d4:
         d4:f4:51:c4:8f:6e:aa:f4:2a:b7:cb:49:b2:69:47:00:00:33:
         f1:69:98:f4:84:af:55:30:e0:32:87:14:1f:8a:65:13:16:8c:
         6f:50:f5:5f:92:18:1d:09:3e:56:78:bc:b0:7d:b1:4a:68:3c:
         c7:35:4b:2c:82:ec:d5:f0:33:24:ae:4c:ca:90:26:2c:ef:af:
         d4:6c:ad:6f:3e:e6:7d:11:05:7b:0a:09:d9:21:8f:c3:97:61:
         4a:2b:23:6d:fb:ba:06:fd:71:e0:d6:3a:a0:0b:29:32:55:c4:
         e4:c0:ac:5c:6d:0d:b8:19:c0:5c:3d:17:bf:02:e8:64:40:ba:
         7f:d5:15:d2:72:2d:77:40:09:14:ca:22:3e:c3:a3:b5:f1:d9:
         a4:dc:48:a7:ad:dc:11:a2:55:6e:fe:f9:4f:41:c3:dd:4f:70:
         93:31:e5:27:66:6d:82:9d:30:db:92:bd:b5:c4:6a:94:dc:8d:
         18:e7:fc:6b:10:2f:4c:1b:f3:cc:c2:a7:fc:96:de:d2:e2:0f:
         0c:81:9a:5c:8b:1a:0e:4c:d5:06:25:5f:63:18:83:4f:af:83:
         97:03:af:09:47:51:d0:27:dd:6a:95:1d:9e:74:fe:0c:b8:ef:
         e5:32:18:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:30:04 2024 by rpki-client on console-ams.rpki-client.org