Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bf0d8f5a-37be-31d2-bc71-22237b74a3e6.roa
File:                     bf0d8f5a-37be-31d2-bc71-22237b74a3e6.roa (raw, json)
Hash identifier:          2UKqIUQpC5vNCvfHnyYMs/gGjF6MXfe9bqv/f3N/L2Y=
Subject key identifier:   30:B8:63:5E:18:4B:E1:7C:30:A7:A7:CF:A7:26:A4:30:DC:13:CA:48
Certificate issuer:       /CN=bc3bcc6d-6679-419c-8300-bdebdffc8ffd
Certificate serial:       010D0C9F432858459A63522CEBE83DA33334EF00
Authority key identifier: CC:59:79:C9:D5:F2:E0:6A:F8:9F:25:4F:78:84:1B:76:E3:65:E4:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bf0d8f5a-37be-31d2-bc71-22237b74a3e6.roa
Signing time:             Sat 20 Apr 2024 01:00:26 +0000
ROA not before:           Sat 20 Apr 2024 01:00:26 +0000
ROA not after:            Fri 19 Jul 2024 01:00:26 +0000
asID:                     398698
IP address blocks:        2605:eac0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9a:63:52:2c:eb:e8:3d:a3:33:34:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3bcc6d-6679-419c-8300-bdebdffc8ffd
        Validity
            Not Before: Apr 20 01:00:26 2024 GMT
            Not After : Jul 19 01:00:26 2024 GMT
        Subject: CN=bb477687-d8e2-4533-b6f2-77a78ef8e5f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7e:32:52:08:ad:32:ec:0f:2b:bb:3f:ba:f6:
                    eb:8d:5b:fc:5a:e3:99:41:f6:36:d2:3f:50:fa:d4:
                    5f:b0:d3:e7:0e:ed:3d:c1:0d:e7:c9:68:44:9b:0c:
                    07:f6:c9:68:e3:b7:13:6d:00:6f:c1:f6:e3:44:6a:
                    3f:e1:27:21:52:bb:65:3f:3f:33:4a:59:fc:99:3c:
                    bb:86:90:18:fe:59:c9:08:5a:ec:b9:f5:ee:e6:10:
                    ef:b6:25:59:38:02:fe:97:30:57:a6:2a:89:80:c8:
                    61:d1:d3:b1:27:54:c3:df:40:7b:1e:a9:8f:ae:60:
                    2c:f5:55:63:cc:f0:c2:12:44:d1:32:70:5d:91:ae:
                    d3:e0:4a:e7:9e:5c:18:f3:f1:ad:e9:fa:76:a1:0c:
                    c9:9d:55:00:fc:56:e4:59:f3:bd:bc:45:2a:b4:b3:
                    91:6d:d6:fb:67:1f:50:b7:5a:e4:a8:c1:0e:81:a3:
                    cb:c7:07:89:d0:1b:2a:e0:92:aa:9e:79:2f:b5:02:
                    96:8a:16:a5:13:5a:90:46:ca:77:6d:41:7b:9b:f9:
                    b7:e6:a3:19:f3:88:78:a2:99:e0:38:6a:9c:a3:62:
                    b4:f6:e7:f4:8b:56:01:94:35:ad:5f:56:6e:95:cb:
                    d9:76:ac:20:57:79:5b:5b:6b:b3:ca:c4:6d:f3:61:
                    07:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B8:63:5E:18:4B:E1:7C:30:A7:A7:CF:A7:26:A4:30:DC:13:CA:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bf0d8f5a-37be-31d2-bc71-22237b74a3e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.crl

            X509v3 Authority Key Identifier:
                keyid:CC:59:79:C9:D5:F2:E0:6A:F8:9F:25:4F:78:84:1B:76:E3:65:E4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:eac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:e8:b6:2b:aa:56:9a:9f:0a:dc:1a:f6:fe:c7:8b:27:ea:44:
         d1:2b:e4:ec:31:ff:15:a2:84:85:0e:ff:9d:6c:c8:f9:e3:ec:
         e6:c3:1b:73:58:a9:93:89:2f:c3:3f:ff:de:e5:7e:c9:67:f5:
         00:02:cb:d4:40:76:ab:8b:28:bb:8e:04:db:25:3d:86:c2:79:
         b7:42:2c:e8:9f:7e:0e:bb:ba:7d:fd:d1:cc:64:7a:d8:1b:44:
         7d:c7:c9:69:8f:94:74:af:50:dc:d0:08:ec:8b:4b:90:ab:89:
         fc:5c:7a:a0:74:bb:63:bb:ee:58:32:32:ba:f2:ef:40:b7:3c:
         b5:6d:11:fa:eb:1a:64:f6:56:86:8f:c5:54:ca:d1:d8:30:a5:
         f2:fa:2f:b9:1d:ac:c5:08:d5:5c:31:6e:90:ce:86:9b:1c:d0:
         f8:be:c5:a1:92:5b:1a:d8:17:bf:95:6e:47:d7:35:82:64:e7:
         de:3d:f9:9e:6e:a9:44:73:a0:0f:ee:bd:89:8d:d5:19:f3:6f:
         e7:6e:dd:bb:4f:1a:cc:7f:6b:1a:4d:cf:f9:bd:44:61:9a:37:
         78:03:98:39:d9:0f:2d:a0:6e:c7:11:1c:f1:e7:ba:5b:63:8e:
         ca:38:f1:a8:ba:8a:78:0f:0b:24:f0:db:b0:01:c2:e8:f2:16:
         d7:9c:21:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:25:34 2024 by rpki-client on console-ams.rpki-client.org