Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/a8bcfb94-a1f4-3133-bf64-344c27bca6bf.roa
File:                     a8bcfb94-a1f4-3133-bf64-344c27bca6bf.roa (raw, json)
Hash identifier:          R96UJASTHIEZf/99hfMPqKLPIVckghLnDnPGF0cqvGE=
Subject key identifier:   72:05:66:F0:66:FB:7B:D5:66:FB:31:5B:7B:57:E1:C7:A2:56:59:D5
Certificate issuer:       /CN=cc16c3db-6181-4312-8911-054e81ccea5f
Certificate serial:       010D0C9F432858455762CA6F07CE2C9321E0C180
Authority key identifier: D8:71:54:FE:5A:59:38:81:AB:1B:4C:37:A0:FD:21:97:3C:E9:2D:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/a8bcfb94-a1f4-3133-bf64-344c27bca6bf.roa
Signing time:             Wed 27 Mar 2024 01:00:26 +0000
ROA not before:           Wed 27 Mar 2024 01:00:26 +0000
ROA not after:            Tue 25 Jun 2024 01:00:26 +0000
asID:                     5719
IP address blocks:        2620:10d:1000::/44 maxlen: 44
                          2620:101::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/cc16c3db-6181-4312-8911-054e81ccea5f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/cc16c3db-6181-4312-8911-054e81ccea5f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:57:62:ca:6f:07:ce:2c:93:21:e0:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc16c3db-6181-4312-8911-054e81ccea5f
        Validity
            Not Before: Mar 27 01:00:26 2024 GMT
            Not After : Jun 25 01:00:26 2024 GMT
        Subject: CN=c15e1c10-ed08-448d-8dd5-42bad0997dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e9:ce:5b:d1:e6:27:3c:9b:be:1a:7a:02:2c:
                    88:05:ee:7c:b0:9e:ae:68:68:92:dd:fe:19:f2:25:
                    80:c0:dc:03:fb:e3:d7:dc:36:33:2a:00:f7:ba:1e:
                    4b:f2:51:b7:0e:c4:74:e6:7e:1b:31:80:32:a2:49:
                    a0:00:61:c0:d3:e6:df:c8:c7:bc:b9:3a:e8:33:bc:
                    ae:e3:5e:3b:77:27:6a:c7:94:30:fe:cc:ab:ec:ec:
                    c3:b8:0f:24:94:cf:f7:cb:c3:88:6b:90:ae:bd:d6:
                    3e:8f:19:a2:a3:58:82:09:d6:75:d0:e1:a1:f8:fa:
                    b4:0c:86:4d:d2:38:32:59:0a:14:df:c1:a6:0a:91:
                    1d:b1:e1:f8:3d:cb:dc:77:e1:5c:e2:44:09:60:b6:
                    5c:c9:cc:7f:95:63:24:3b:a9:28:77:7e:89:09:9b:
                    ac:18:38:31:41:ca:ef:07:50:28:49:12:57:a5:2e:
                    35:61:33:e9:21:fb:73:04:95:64:96:ff:6f:67:6d:
                    33:4d:ad:64:9c:96:3d:7b:47:0f:96:15:07:43:1c:
                    90:32:a8:19:1c:c6:8b:21:ab:a6:57:d2:d0:63:46:
                    3a:42:b0:12:c2:05:d7:15:2b:9a:3a:fa:43:75:0e:
                    a8:e5:25:be:a6:f6:d0:14:48:80:b1:d4:ac:9a:dc:
                    6d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:05:66:F0:66:FB:7B:D5:66:FB:31:5B:7B:57:E1:C7:A2:56:59:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/a8bcfb94-a1f4-3133-bf64-344c27bca6bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/cc16c3db-6181-4312-8911-054e81ccea5f.crl

            X509v3 Authority Key Identifier:
                keyid:D8:71:54:FE:5A:59:38:81:AB:1B:4C:37:A0:FD:21:97:3C:E9:2D:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:101::/46
                  2620:10d:1000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:38:10:d3:ec:1c:9a:c7:bf:98:2d:82:2c:e9:6a:db:5e:22:
         61:6a:4c:ce:06:b1:eb:3d:b0:16:f4:cc:2a:95:a3:e9:3a:cd:
         21:ac:ef:38:b8:66:a6:0d:00:00:af:f0:28:35:e9:eb:11:df:
         4d:61:24:e7:58:0e:4e:f9:00:9d:19:61:5e:14:39:97:ed:ac:
         64:42:39:bd:87:93:1a:c2:39:71:fe:b7:74:10:fb:03:85:04:
         f0:c8:d3:67:22:2a:04:d7:06:98:a2:63:c3:e5:66:f6:6a:90:
         66:93:4e:7a:07:73:81:d0:d6:fd:d8:b5:36:60:f7:bc:68:ce:
         39:4b:4c:59:7f:c3:87:d9:4a:6b:50:17:86:85:2c:c8:50:df:
         72:26:6a:d4:d1:43:50:8f:80:b2:7d:7e:84:a8:b9:23:e2:cc:
         fc:ed:4c:49:76:34:6a:74:2f:5e:5c:d2:b6:5e:56:d1:70:54:
         2c:59:51:03:52:2f:40:b8:80:39:79:5c:f8:92:46:48:fc:5f:
         a3:24:c0:96:83:2a:8f:55:a6:21:7c:bc:42:09:d2:22:b1:7a:
         72:9d:cc:8c:02:2e:bc:36:e5:1a:c8:bb:d2:24:82:25:7d:69:
         dd:4b:45:e5:d3:60:43:45:37:5d:42:61:dd:5c:c8:a1:0e:a9:
         f9:03:58:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 18:40:53 2024 by rpki-client on console-fra.rpki-client.org