Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/87ccef9f-1423-37cd-8720-326d3ea66f38.roa
File:                     87ccef9f-1423-37cd-8720-326d3ea66f38.roa (raw, json)
Hash identifier:          FFx3cfo+U1NfcxCcEXl3G+LlvZ3gW6O8bkcTJ46u0gg=
Subject key identifier:   0F:06:EE:27:40:13:13:9B:C4:58:57:DE:71:23:54:5B:25:15:05:9A
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285845A2C343B45874123BC89BCE80
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/87ccef9f-1423-37cd-8720-326d3ea66f38.roa
Signing time:             Tue 23 Apr 2024 01:00:25 +0000
ROA not before:           Tue 23 Apr 2024 01:00:25 +0000
ROA not after:            Mon 22 Jul 2024 01:00:25 +0000
asID:                     6461
IP address blocks:        2001:4c8::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a2:c3:43:b4:58:74:12:3b:c8:9b:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Apr 23 01:00:25 2024 GMT
            Not After : Jul 22 01:00:25 2024 GMT
        Subject: CN=045906fc-063c-4bad-ba21-234df6c0f9aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:79:52:18:1d:ae:98:c5:a1:4b:73:ae:bd:31:
                    c9:4f:7e:59:48:78:af:64:b8:52:66:4b:16:39:0e:
                    97:2c:dd:1e:9d:f7:cb:ca:cf:4c:7c:53:d9:64:67:
                    54:f8:7e:ea:c9:df:7b:31:91:5a:12:33:41:18:bf:
                    90:73:b9:d5:6e:09:a2:2a:16:03:67:98:45:00:e1:
                    3f:f7:2f:67:7b:af:21:21:71:ec:63:09:3b:b0:6f:
                    40:de:8f:74:43:28:e3:cd:1b:1f:d1:52:9b:7d:52:
                    b2:07:30:be:04:25:26:aa:4f:42:99:b1:55:4c:2a:
                    79:c6:be:6b:19:43:1f:4b:fd:91:48:63:13:61:f9:
                    de:82:4c:24:c9:74:c9:16:37:40:51:d8:64:77:d5:
                    5f:a6:65:88:35:9b:89:3f:69:45:c4:b6:ed:f1:18:
                    25:02:9b:c3:21:fc:54:27:55:76:3c:a9:1a:18:db:
                    e7:d3:66:5e:f3:c1:cc:fc:55:d4:44:92:5f:38:f3:
                    fd:c9:7d:bf:e5:0b:84:5b:09:1c:45:f2:bc:06:fb:
                    04:72:45:d2:8c:b2:96:de:2b:c7:96:72:f4:d7:02:
                    16:23:2f:5e:90:a9:78:1f:6e:ce:a6:e1:81:4b:4b:
                    31:58:91:14:13:64:24:90:f4:2f:05:38:a3:ad:75:
                    da:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:06:EE:27:40:13:13:9B:C4:58:57:DE:71:23:54:5B:25:15:05:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/87ccef9f-1423-37cd-8720-326d3ea66f38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:cf:77:cc:9f:f9:2c:0e:20:98:2d:f1:b0:9a:3b:7d:e0:56:
         ff:d5:67:c2:29:be:2d:d0:51:ca:fc:ba:63:3e:66:bd:18:cc:
         cb:b1:fb:22:b1:9e:d1:d2:15:e7:be:e3:37:4c:60:ec:96:2a:
         b5:7f:e8:ad:1e:e9:2d:aa:61:6f:15:28:fc:63:e5:45:43:cc:
         5d:de:ae:ef:6e:3e:d9:ba:39:a1:a2:67:4f:e8:51:39:b2:9b:
         8a:52:27:0a:b2:ba:89:ee:40:e0:65:98:a0:1b:e6:72:cd:48:
         4e:e5:4b:2f:19:d6:c2:ed:7c:82:d6:f3:24:c6:c0:b7:a0:c5:
         4d:1f:e2:99:89:d8:31:58:45:af:db:e4:78:b8:a5:b1:4f:2c:
         b8:50:e3:86:bc:9b:ac:58:f9:e4:3a:3c:52:b6:68:e2:b8:ab:
         6a:0c:5a:d0:c9:30:95:35:e0:1f:6f:e5:47:f4:c2:69:8b:0c:
         e3:5d:fe:a2:e2:8c:aa:92:0f:e2:5a:f2:2f:72:b7:d1:aa:bd:
         d4:6a:9c:5f:ef:16:c9:09:9a:ee:b1:2d:e3:58:58:28:45:f3:
         3a:ce:27:3f:f4:cc:40:ff:19:55:69:b3:00:17:17:da:19:b5:
         5e:d3:76:e2:9e:98:3f:df:08:6e:8f:c3:84:c1:f8:cd:9b:7e:
         87:f7:fc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 16:34:58 2024 by rpki-client on console-fra.rpki-client.org