Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/0a59adf1-4ce0-3512-b604-484c769f0384.roa
File:                     0a59adf1-4ce0-3512-b604-484c769f0384.roa (raw, json)
Hash identifier:          gsp6R33kF73VHwY87SW0E3iKODQfnLl2Npc57I2O6dQ=
Subject key identifier:   DF:8F:78:34:94:00:14:11:3D:AC:C0:1D:0E:05:09:4B:86:79:32:A3
Certificate issuer:       /CN=6459964e-cb44-4be5-88da-03fac554e95c
Certificate serial:       010D0C9F4328584558C84360288C3593BA85CA00
Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/0a59adf1-4ce0-3512-b604-484c769f0384.roa
Signing time:             Wed 27 Mar 2024 13:00:35 +0000
ROA not before:           Wed 27 Mar 2024 13:00:35 +0000
ROA not after:            Tue 25 Jun 2024 13:00:35 +0000
asID:                     32771
IP address blocks:        2620:111:800d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:58:c8:43:60:28:8c:35:93:ba:85:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c
        Validity
            Not Before: Mar 27 13:00:35 2024 GMT
            Not After : Jun 25 13:00:35 2024 GMT
        Subject: CN=d7b42e04-5de1-4401-a5c8-b31af05f2ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8e:f0:bf:cb:86:18:ff:a0:8a:6a:2e:45:48:
                    aa:c0:8a:e1:45:e7:c3:44:d7:19:17:70:95:4e:12:
                    7f:f7:55:55:a6:32:a0:89:a4:22:07:16:bb:f0:2a:
                    72:d1:f3:34:ea:fd:3f:d8:b3:5e:6a:28:ff:46:77:
                    74:6d:e5:12:5b:e3:02:ce:1c:1f:63:3c:ea:3c:92:
                    e3:ba:88:9e:61:ac:a0:35:b8:81:ff:e4:d5:1e:4e:
                    e7:96:a4:2e:82:73:71:21:45:00:26:2a:42:fb:9d:
                    18:bc:1a:98:f4:a1:14:4e:cf:0d:ab:5b:e2:bc:a0:
                    a5:8a:2c:c9:ac:65:a1:25:8d:ee:11:bf:36:e9:5a:
                    fa:78:c2:36:2e:0d:39:6a:8e:ce:e8:69:f4:80:c2:
                    22:38:ad:cb:3c:fd:b3:41:87:7e:6f:d2:26:ac:84:
                    bf:e8:7a:c9:2e:8c:61:3c:be:6b:73:bd:80:0a:10:
                    e6:13:28:70:2b:d3:6b:19:1b:c0:bc:15:5b:d6:aa:
                    55:2e:f1:76:9c:6a:b0:f5:96:f5:21:e6:5c:fe:81:
                    4d:38:ee:18:e8:e5:e7:2c:d4:ab:62:cf:ab:8f:d7:
                    2e:6a:a4:2f:9f:f8:36:23:62:c7:b8:5c:e5:b0:0e:
                    43:c1:d8:17:05:1f:cb:cf:16:04:6f:41:67:11:ed:
                    e6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:8F:78:34:94:00:14:11:3D:AC:C0:1D:0E:05:09:4B:86:79:32:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/0a59adf1-4ce0-3512-b604-484c769f0384.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl

            X509v3 Authority Key Identifier:
                keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:111:800d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:6e:6e:9d:63:d4:2a:a5:40:e7:74:d4:6c:d5:4a:51:ff:70:
         87:37:d3:01:be:ee:6e:19:11:26:c7:70:65:6e:2a:c5:21:ff:
         9c:f5:3a:42:62:3e:73:ff:90:73:c6:d8:82:7b:09:52:9e:23:
         de:73:b4:f2:69:1a:29:72:4c:bf:06:26:c4:b2:c4:d9:c3:0c:
         d4:ba:c0:bd:72:79:c0:32:2e:8f:3c:d5:49:16:18:c1:f4:31:
         3d:47:cb:ad:ab:5f:dd:7f:e3:68:d0:bb:6f:38:68:c0:b1:e6:
         5c:c9:e9:e5:bd:f6:bb:f8:6f:4e:b7:d9:35:1e:65:cf:f7:3e:
         a0:bf:c4:cf:3f:1c:2a:70:a8:16:09:bd:8a:b4:28:43:b8:bf:
         e3:5b:fa:e1:c8:7f:7d:ba:cd:19:d9:ea:56:91:43:7c:c7:00:
         91:70:2e:d1:00:5b:ee:99:6e:69:c0:8f:6b:17:ed:c5:01:13:
         c2:e1:ec:26:68:d7:77:3d:85:f0:55:da:93:46:69:e9:fb:f1:
         d1:ec:15:ba:f7:85:1f:6d:49:fe:36:3d:34:9d:9f:8d:4c:67:
         a2:b9:3d:b6:ea:30:68:1f:9e:e4:70:41:e6:93:bc:2c:2a:94:
         f1:61:70:0e:cb:09:37:dc:00:78:80:99:8c:23:96:76:48:45:
         46:a5:31:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:19:14 2024 by rpki-client on console-ams.rpki-client.org