Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/433732bb-9cac-3c17-8337-8b9e5f365a48.roa
File:                     433732bb-9cac-3c17-8337-8b9e5f365a48.roa (raw, json)
Hash identifier:          0AS2y1del/+i2KPpWLAPRhZXG9P0buXjTCKhrRDsCb8=
Subject key identifier:   47:44:A5:95:9B:71:8C:1F:F0:02:F4:75:84:3F:EF:13:3D:8F:05:63
Certificate issuer:       /CN=9a6361d2-bce7-409a-8f19-ddd81a1f6249
Certificate serial:       010D0C9F4328584538AD496BF5C7964BFB7D8700
Authority key identifier: ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/433732bb-9cac-3c17-8337-8b9e5f365a48.roa
Signing time:             Sat 16 Mar 2024 01:00:25 +0000
ROA not before:           Sat 16 Mar 2024 01:00:25 +0000
ROA not after:            Fri 14 Jun 2024 01:00:25 +0000
asID:                     54885
IP address blocks:        2620:63:8000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:38:ad:49:6b:f5:c7:96:4b:fb:7d:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a6361d2-bce7-409a-8f19-ddd81a1f6249
        Validity
            Not Before: Mar 16 01:00:25 2024 GMT
            Not After : Jun 14 01:00:25 2024 GMT
        Subject: CN=df067f29-af0a-4bb8-90c8-d45a6fdc1276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6e:dd:b4:5c:0c:20:9f:1e:68:ef:8a:2a:58:
                    18:45:48:13:fa:2d:f0:7e:60:fb:dc:48:08:b0:4e:
                    a8:cc:be:01:e6:ff:6a:b1:4f:f3:cc:d3:3b:d2:17:
                    a1:63:9e:b5:b2:f5:64:af:06:46:58:bb:ec:30:a1:
                    87:4b:7b:49:cd:f4:6a:f8:20:ed:48:12:e1:aa:dc:
                    83:dc:57:2f:57:31:c6:6d:f2:69:52:11:c1:72:dd:
                    cf:6c:22:01:ab:d1:71:e0:6f:b5:77:dd:41:44:75:
                    39:1c:e0:03:4a:14:15:9a:a7:a5:83:f8:75:36:74:
                    c7:1d:7e:49:34:76:4f:11:5f:3f:1c:d1:43:04:fb:
                    93:57:c5:72:ee:20:82:2d:4d:de:b2:22:46:a3:94:
                    56:d1:ac:88:29:c5:a5:60:c0:5d:47:ac:bf:02:4e:
                    7b:8d:36:5b:65:57:b0:f7:19:21:92:03:ba:d6:0f:
                    ef:9d:e7:c5:50:58:ac:9c:3d:0c:25:56:53:90:dd:
                    2e:fc:0a:46:b8:bf:91:e3:9d:9b:c9:b0:c0:59:29:
                    57:b9:38:d3:27:d9:0b:a5:08:f6:3a:33:e1:61:f6:
                    b6:93:22:c7:3c:f9:90:75:97:ba:6d:fc:17:20:07:
                    5c:4c:7a:d9:cc:57:31:43:b1:ff:8c:f2:80:05:5a:
                    3e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:44:A5:95:9B:71:8C:1F:F0:02:F4:75:84:3F:EF:13:3D:8F:05:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/433732bb-9cac-3c17-8337-8b9e5f365a48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.crl

            X509v3 Authority Key Identifier:
                keyid:ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:63:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:e7:49:d9:ed:4b:c2:69:2f:86:d8:8c:9c:bd:0c:cb:09:5c:
         73:47:09:db:19:19:23:c4:16:37:ac:5f:6b:db:ed:68:f3:a5:
         31:82:aa:5a:84:8f:5b:81:b6:d4:ef:0d:d5:c8:56:81:f7:8e:
         19:81:79:e8:61:26:d1:21:3f:37:d1:00:0f:4f:e2:d1:b7:17:
         53:9e:1d:75:1e:07:6f:f2:67:e3:2e:26:ef:79:bc:95:55:c9:
         cc:66:72:45:b1:09:c8:8d:fb:a5:9d:24:53:7e:0e:76:8b:32:
         7b:31:92:6c:00:b0:96:e3:16:d6:5c:7d:e1:88:ba:74:b6:08:
         e2:91:ba:6b:75:eb:fb:94:7b:99:71:f2:ad:75:5b:89:96:23:
         7d:aa:17:6c:b2:ee:27:51:e9:74:7a:77:73:d4:1d:2e:4b:f8:
         05:3b:c4:d2:c0:e7:19:82:f5:07:cf:e7:0b:15:45:cf:49:7b:
         9e:e5:51:b5:6b:6e:9e:62:c2:03:43:6e:c5:da:b1:c3:cc:41:
         d8:7f:7b:9b:88:a4:95:15:d0:ed:bf:29:ee:ad:c1:72:c7:91:
         d6:4d:d0:48:8c:1c:a2:5e:35:c3:6b:4b:62:43:12:0c:aa:9c:
         db:46:4f:a3:47:d6:bf:cd:ff:e6:42:0a:7a:f3:e5:ae:6b:7c:
         9b:93:54:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:44 2024 by rpki-client on console-fra.rpki-client.org