Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/5433bf49-ace7-32ec-afe1-9e8653412767.roa
File:                     5433bf49-ace7-32ec-afe1-9e8653412767.roa (raw, json)
Hash identifier:          5l2GdMs0gRj9px9t+HuEaCqsTtCCpCs6SkHHNBGu+WA=
Subject key identifier:   C1:0C:13:6B:16:F4:F9:05:61:82:C4:98:B8:A5:36:B7:2C:82:F5:EA
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858459D2DE71DDC176D75CDD8B380
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/5433bf49-ace7-32ec-afe1-9e8653412767.roa
Signing time:             Sun 21 Apr 2024 01:00:25 +0000
ROA not before:           Sun 21 Apr 2024 01:00:25 +0000
ROA not after:            Sat 20 Jul 2024 01:00:25 +0000
asID:                     15290
IP address blocks:        2001:4c8:1089::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:2d:e7:1d:dc:17:6d:75:cd:d8:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Apr 21 01:00:25 2024 GMT
            Not After : Jul 20 01:00:25 2024 GMT
        Subject: CN=0f4c2a92-166d-4099-856e-db979945a9f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:54:2e:81:19:18:ff:af:8a:5c:bf:32:82:24:
                    9d:ef:bf:1b:5b:0b:08:34:1b:7d:29:0c:e8:a9:1e:
                    e7:50:3f:12:a1:54:09:61:2d:ac:9b:f0:d1:b7:30:
                    b0:7c:0b:4b:8d:08:95:f9:f9:56:d8:f7:e3:29:56:
                    9a:4b:0a:1d:b4:02:1d:ae:37:7d:95:b4:b3:3d:bb:
                    32:d7:df:f0:c7:41:ce:0b:e3:03:fa:ad:7a:3c:e5:
                    7e:1a:ff:1e:4e:37:72:24:28:65:88:36:da:79:78:
                    66:d6:a9:f2:18:61:3e:ff:c6:ad:d5:44:b1:12:23:
                    36:c2:33:c0:cf:55:a7:d6:c9:d0:c7:c5:a0:21:b8:
                    f5:45:40:1a:4f:8d:88:f3:0b:af:c4:1f:f8:15:5a:
                    ec:25:bf:5a:98:8b:16:0f:39:c9:29:25:28:a9:c1:
                    00:ab:63:58:31:23:9d:bd:ce:69:4e:66:d7:29:25:
                    f5:71:2f:9a:3a:d5:08:b8:19:af:9b:55:85:92:e1:
                    85:58:d3:81:44:c3:df:5b:1f:a8:a7:6b:4b:ca:5b:
                    81:b5:06:a4:fe:0d:db:96:8a:25:8e:a1:d2:9d:f8:
                    97:94:0c:7c:2b:39:eb:2c:f4:9f:fe:42:63:b3:b2:
                    e3:0a:c4:b9:72:b2:c3:74:99:b7:12:c0:b0:b4:36:
                    bf:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0C:13:6B:16:F4:F9:05:61:82:C4:98:B8:A5:36:B7:2C:82:F5:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/5433bf49-ace7-32ec-afe1-9e8653412767.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:1089::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:a8:06:e7:6b:51:14:0a:d9:cb:a0:a7:60:8d:78:f0:b7:c1:
         6b:c9:e8:3a:95:7f:81:94:55:12:5d:cc:86:29:f3:82:39:2f:
         5b:0f:14:16:81:7d:6b:b5:e3:ce:e0:03:96:1a:f2:d0:6b:25:
         34:89:37:ef:50:31:6b:97:fd:5c:cc:83:b8:05:59:22:14:79:
         4b:05:a9:18:12:9d:fd:b3:2f:7f:ad:fe:f8:29:4e:f2:02:77:
         bd:d1:19:97:63:aa:dc:c8:7e:0a:9e:b9:0d:0d:cc:7c:a6:a0:
         8b:b6:27:7b:ec:71:a0:d7:4b:e2:28:30:ce:55:ac:03:96:36:
         7b:aa:0a:b9:73:1c:f5:2f:84:9d:97:bf:1f:61:e3:43:e0:24:
         83:79:85:da:f2:ce:93:f9:43:f2:51:18:ad:6f:b1:4b:0c:f8:
         e5:62:5f:59:37:a3:eb:7e:9d:c1:3f:7a:d6:e8:45:44:44:2f:
         f0:bb:49:17:6d:84:79:40:61:c9:4b:81:1e:09:38:64:2c:a4:
         d5:16:f7:bd:e1:88:8f:88:50:d4:d3:c1:08:8e:5f:96:5d:84:
         7d:a5:ef:a9:3a:24:e5:3a:aa:3e:bc:97:6e:26:d9:05:a0:49:
         20:dc:5e:c8:f4:b3:71:e8:6a:f2:18:ce:dd:06:10:1b:54:c7:
         d7:b5:61:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:10:43 2024 by rpki-client on console-fra.rpki-client.org