Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/d52941d0-1182-3d9a-af9f-deceb12b37bf.roa
File:                     d52941d0-1182-3d9a-af9f-deceb12b37bf.roa (raw, json)
Hash identifier:          meTV6Q33rKqpdFc4ufxXP5rfLu4cMNKqSUEaH12+oBk=
Subject key identifier:   29:A4:D6:61:A2:ED:D2:97:FB:49:E6:C1:64:07:94:E6:B0:45:01:2B
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858459D2DE693A0227889000E6700
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/d52941d0-1182-3d9a-af9f-deceb12b37bf.roa
Signing time:             Sun 21 Apr 2024 01:00:25 +0000
ROA not before:           Sun 21 Apr 2024 01:00:25 +0000
ROA not after:            Sat 20 Jul 2024 01:00:25 +0000
asID:                     15290
IP address blocks:        2001:4c8:1022::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:2d:e6:93:a0:22:78:89:00:0e:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Apr 21 01:00:25 2024 GMT
            Not After : Jul 20 01:00:25 2024 GMT
        Subject: CN=2771078a-872a-477f-999e-d5c8590b2049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4a:c7:9b:a6:3b:1b:81:5a:26:0a:29:53:b1:
                    61:d9:c7:bf:51:88:9d:16:2d:10:9e:bb:63:41:27:
                    0c:a7:3e:02:f5:cd:3d:47:0d:b4:bd:24:4b:e3:41:
                    96:9c:1e:53:1e:25:fa:d7:da:9f:5f:11:07:96:51:
                    df:e7:56:ea:b6:6d:71:7d:54:22:ca:f0:8f:73:ad:
                    c8:27:3f:cb:a4:68:5b:bf:34:09:9b:c3:71:4e:a3:
                    13:f9:2a:14:43:0e:a6:c9:c2:72:ba:26:9c:01:a3:
                    00:cc:80:2c:29:7f:1b:85:09:b0:7b:b9:78:25:f7:
                    64:6d:3d:8e:5a:d3:35:a0:86:f2:fb:fe:45:ea:88:
                    d5:79:f9:f8:fd:07:a3:78:14:26:be:99:68:a4:ef:
                    70:7d:40:95:16:75:78:69:3b:64:51:61:fc:6b:48:
                    f4:c5:32:92:69:c8:98:51:d9:ef:9c:2a:8f:2a:f7:
                    16:05:a3:25:fc:99:c2:71:d8:bb:9e:ec:50:5e:c3:
                    47:a9:5b:ff:2a:36:58:b7:9a:ea:61:68:89:c4:84:
                    70:c7:f9:9c:d2:63:69:bc:2b:ed:bb:9e:cd:25:1c:
                    3f:ee:7e:72:f1:b3:ec:15:af:bc:b6:ee:24:59:8e:
                    72:31:23:38:ea:54:19:cc:ee:fb:58:30:f6:b1:7b:
                    14:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A4:D6:61:A2:ED:D2:97:FB:49:E6:C1:64:07:94:E6:B0:45:01:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/d52941d0-1182-3d9a-af9f-deceb12b37bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:1022::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:ba:68:3c:ba:55:7d:e7:ac:d1:da:19:82:ef:ad:0c:cc:d2:
         49:1d:4f:9d:6a:cc:5d:83:26:d3:d3:d7:68:90:7f:4b:6a:23:
         66:7f:61:b5:b4:8f:e1:2f:1b:65:a0:1f:7f:30:8f:8c:32:e6:
         96:74:b4:b8:b1:03:aa:f6:b9:13:f0:cd:22:e1:0b:55:08:39:
         bd:45:0a:70:2a:d2:0d:36:aa:7d:fa:f9:24:35:6a:ea:09:8b:
         9e:34:32:db:eb:9f:06:c6:b7:6c:6d:72:81:0f:19:1a:51:1e:
         35:4a:09:ae:5f:d7:88:dd:35:d9:08:4e:41:98:ed:0f:1e:ac:
         07:0e:d1:ad:75:0a:c6:cc:24:0c:86:38:8b:98:d3:8f:80:16:
         e1:f5:2c:2c:45:62:57:6d:6d:72:5b:85:80:74:e1:3b:91:4f:
         2a:e7:11:51:b3:48:d3:10:4f:26:10:c7:6d:07:63:75:d7:cc:
         7f:7c:01:4a:94:fb:6d:fa:3d:60:aa:61:74:15:1d:ed:1f:b4:
         60:67:1b:09:31:44:fb:62:7f:c6:94:96:1a:44:c5:de:0f:3a:
         cb:4b:75:ba:50:7e:a6:ae:d1:1c:fb:6f:f8:e5:95:d2:8b:28:
         cd:62:1b:62:cf:f7:04:b5:7f:fb:af:3b:07:3c:43:26:45:5b:
         42:c3:b4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:27:20 2024 by rpki-client on console-ams.rpki-client.org